This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          LvmrU2Sfdi+2GpcbG4K6bKlKW5ibycUeB/rbUnC4438=
Subject key identifier:   5F:34:84:F9:39:A2:AB:F6:26:72:E0:76:8C:AA:A1:3B:FC:20:7C:98
Certificate issuer:       /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial:       65F4782162812BBF57C950547FF8B3FB50BFB991
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Mon 10 Nov 2025 13:47:26 +0000
ROA not before:           Mon 10 Nov 2025 13:42:26 +0000
ROA not after:            Mon 09 Nov 2026 13:47:26 +0000
asID:                     265393
IP address blocks:        2804:3364:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f4:78:21:62:81:2b:bf:57:c9:50:54:7f:f8:b3:fb:50:bf:b9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
        Validity
            Not Before: Nov 10 13:42:26 2025 GMT
            Not After : Nov  9 13:47:26 2026 GMT
        Subject: CN=5F3484F939A2ABF62672E0768CAAA13BFC207C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6b:22:71:f4:1d:d0:86:bc:5a:ec:26:72:6e:
                    8e:5b:eb:a0:f9:1b:ce:3b:ca:94:ef:10:0c:92:1d:
                    83:67:3c:e5:ef:a7:1b:cc:20:c5:80:e4:e5:a3:a7:
                    40:e2:18:60:ab:61:db:61:0c:ec:d4:6c:fb:90:89:
                    5f:ef:17:32:1d:6d:67:85:39:72:3e:a5:38:a7:ab:
                    48:35:41:0a:83:96:bf:c0:1d:4d:1c:94:69:a2:f8:
                    f1:59:de:c8:0b:06:1f:54:2c:96:e0:af:ac:be:73:
                    84:ce:7d:32:e5:aa:37:ee:3e:9d:43:db:25:1c:50:
                    61:57:95:52:0a:f5:3e:ce:66:93:97:e9:04:ed:92:
                    26:25:a4:c5:53:3f:9f:be:9c:50:f5:74:bb:92:5a:
                    5a:d8:55:c4:85:09:33:20:dc:55:70:c7:52:06:b0:
                    1b:7f:13:50:da:53:f9:1e:0c:67:1a:b7:a1:be:bc:
                    2e:4d:5d:96:40:71:ae:05:61:23:e7:fb:fe:83:1d:
                    e3:9a:48:12:67:32:c5:38:17:c8:04:a9:28:ca:83:
                    32:da:5a:03:a2:7f:b7:65:96:e0:a3:e1:d6:e0:ef:
                    91:cf:63:c7:5f:5b:b5:ee:c6:45:b8:c9:54:5a:eb:
                    11:e9:17:eb:19:33:54:72:05:12:ab:96:a4:62:b4:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:34:84:F9:39:A2:AB:F6:26:72:E0:76:8C:AA:A1:3B:FC:20:7C:98
            X509v3 Authority Key Identifier:
                keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         de:75:a8:37:9b:3b:40:38:6d:c1:20:62:0e:a8:7b:2a:b9:25:
         b0:b5:94:17:10:25:d4:49:bd:86:12:86:d2:9e:d8:0f:e5:25:
         75:2c:4d:7f:06:cb:6a:94:26:70:d8:81:6e:2d:ea:3e:a9:c4:
         85:d3:32:05:d1:ae:22:35:71:39:ea:7a:a1:3d:12:22:c5:65:
         e6:7f:e2:c8:85:59:f3:2a:43:26:03:28:b0:9f:72:78:b7:69:
         36:b6:ab:fa:2b:3a:a1:9a:e4:6b:e2:b5:4c:8b:7b:57:9c:16:
         41:59:49:30:35:90:f4:55:f5:1b:48:ad:31:d6:94:a3:bc:78:
         3a:8d:68:d1:71:e1:97:e9:c1:87:9c:59:83:b8:ae:61:64:75:
         15:98:44:c9:40:01:c5:58:a3:53:fc:aa:78:0b:43:40:21:19:
         7c:14:4a:64:3c:ad:c8:e5:1f:20:2f:54:87:e0:fb:08:5f:e0:
         8e:f1:8e:cb:25:7b:06:b9:c6:25:0d:48:d4:2d:b7:ac:5c:aa:
         23:44:18:40:f9:6e:0f:16:48:6c:5d:ba:17:f0:73:d3:f8:7e:
         74:f0:93:69:70:f6:a1:70:be:88:9f:83:53:37:8d:0a:a5:02:
         5e:28:c8:76:a1:08:3d:13:f6:2c:37:1d:cd:cd:40:8e:94:03:
         12:d6:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:41 2025 by rpki-client