This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa
File:                     323830343a353363343a3a2f33322d313238203d3e20323638363035.roa (raw, json)
Hash identifier:          NLGktuAPJW4q+Ti4bCVRpKmKSjS2OzsPuORZns3bIQw=
Subject key identifier:   3C:FC:A7:8D:DA:FD:3F:C6:03:12:F4:16:9B:C4:3F:85:13:93:D4:D5
Certificate issuer:       /CN=AF45988BFE3871400272802950F4AB2084728E57
Certificate serial:       21A304B29D1905E650711F0D2C1FAD88EBE0A05B
Authority key identifier: AF:45:98:8B:FE:38:71:40:02:72:80:29:50:F4:AB:20:84:72:8E:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF45988BFE3871400272802950F4AB2084728E57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa
Signing time:             Thu 04 Dec 2025 12:59:45 +0000
ROA not before:           Thu 04 Dec 2025 12:54:45 +0000
ROA not after:            Thu 03 Dec 2026 12:59:45 +0000
asID:                     268605
IP address blocks:        2804:53c4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/AF45988BFE3871400272802950F4AB2084728E57.crl
                          rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/AF45988BFE3871400272802950F4AB2084728E57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF45988BFE3871400272802950F4AB2084728E57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a3:04:b2:9d:19:05:e6:50:71:1f:0d:2c:1f:ad:88:eb:e0:a0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF45988BFE3871400272802950F4AB2084728E57
        Validity
            Not Before: Dec  4 12:54:45 2025 GMT
            Not After : Dec  3 12:59:45 2026 GMT
        Subject: CN=3CFCA78DDAFD3FC60312F4169BC43F851393D4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:ba:58:c2:41:b7:df:40:4d:da:b0:40:67:
                    04:7c:0e:50:7c:96:36:68:80:af:af:df:1e:ed:89:
                    94:a7:74:22:a6:98:3f:c0:8e:cd:ee:52:ec:13:29:
                    02:e6:4a:82:8b:0f:2a:55:17:f4:1f:7a:fa:bb:42:
                    39:c3:48:2a:c3:b8:73:e0:0a:7e:e0:d3:e2:75:a2:
                    4f:e1:80:77:bc:d6:c8:e6:ea:f9:be:31:96:68:02:
                    ae:ff:51:9d:7f:2a:f9:b0:bc:65:b6:b6:a2:5e:6b:
                    81:59:c1:79:cf:0f:31:25:8c:cd:61:2f:0b:21:e6:
                    60:fb:b8:58:f3:18:91:20:87:54:ae:8b:af:73:f4:
                    d1:d0:d4:e6:94:fb:ea:7e:5c:ea:92:2e:62:60:16:
                    fb:15:b3:b8:93:10:05:de:f4:5f:cf:26:b9:4e:11:
                    1b:3f:ec:7f:b6:f8:ff:75:a8:cf:17:fa:3c:66:da:
                    e8:d8:f9:5f:cd:6d:c5:90:a2:39:93:92:0e:ca:f0:
                    d2:ca:1c:5e:96:3b:ae:de:fe:42:5a:81:fb:5d:14:
                    8e:21:4b:0c:59:e9:6e:62:d0:b3:a8:d9:fd:48:48:
                    f6:d2:2f:21:c0:3c:55:f1:2c:71:eb:44:d0:b7:27:
                    09:ac:80:23:ad:c4:ac:fd:1e:4f:5c:b4:61:6e:eb:
                    46:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FC:A7:8D:DA:FD:3F:C6:03:12:F4:16:9B:C4:3F:85:13:93:D4:D5
            X509v3 Authority Key Identifier:
                keyid:AF:45:98:8B:FE:38:71:40:02:72:80:29:50:F4:AB:20:84:72:8E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/AF45988BFE3871400272802950F4AB2084728E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF45988BFE3871400272802950F4AB2084728E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:7e:eb:4a:12:2a:02:f7:12:94:ca:97:88:35:62:7c:43:31:
         17:d6:73:7f:0f:05:0c:0e:10:b9:18:65:84:d9:c2:92:2c:3c:
         49:2f:6e:23:8a:1a:dd:9b:59:09:4f:09:4c:43:4c:80:44:fe:
         82:42:71:bc:80:1e:96:5a:04:72:4c:bf:7b:23:37:2b:0a:c6:
         1b:5b:94:ea:90:d6:86:7a:07:02:e5:ca:3e:73:26:f6:2e:ec:
         a9:28:ce:bf:f5:02:5d:b3:47:fa:83:cb:a4:d1:3b:3d:54:b9:
         a7:ad:1c:6e:04:65:04:ad:42:45:f4:86:7d:a5:51:07:15:95:
         c1:63:98:63:ca:6c:3d:2f:5a:31:bc:cd:e1:71:19:3e:07:f1:
         54:04:2b:03:2f:14:f4:fa:0d:12:2b:c4:7f:c9:44:c8:75:80:
         67:7c:35:07:c6:0b:10:33:f1:26:1e:b1:5e:db:10:d0:7d:c4:
         92:0e:c4:f6:ae:3b:6b:47:fe:b3:02:e4:14:54:61:d1:c8:97:
         c8:78:19:0e:63:28:7a:0a:5d:7b:3d:05:48:c4:61:f1:d2:2a:
         8a:c5:e5:34:be:c5:06:8b:4f:c8:63:52:92:da:dd:a5:d6:01:
         25:6c:5a:a8:89:52:c8:70:61:7c:e1:c0:fb:f6:e6:be:9d:b5:
         20:69:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:45:24 2025 by rpki-client