This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa
File:                     323830343a373334383a3a2f33322d3332203d3e20323632363930.roa (raw, json)
Hash identifier:          e3lrvg7CgixAeU64DjVBEw4H2bKYRR81se1ywJuj3QA=
Subject key identifier:   00:AB:1D:9D:A0:51:90:50:C4:DA:5D:83:07:E9:B1:25:32:DE:C2:92
Certificate issuer:       /CN=7BDBC337C92FD00887738D70F5C844F569B22491
Certificate serial:       47EEDD711B23EC2811C422DFD3C0D4846160791C
Authority key identifier: 7B:DB:C3:37:C9:2F:D0:08:87:73:8D:70:F5:C8:44:F5:69:B2:24:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa
Signing time:             Fri 21 Nov 2025 17:08:57 +0000
ROA not before:           Fri 21 Nov 2025 17:03:57 +0000
ROA not after:            Fri 20 Nov 2026 17:08:57 +0000
asID:                     262690
IP address blocks:        2804:7348::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.crl
                          rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ee:dd:71:1b:23:ec:28:11:c4:22:df:d3:c0:d4:84:61:60:79:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BDBC337C92FD00887738D70F5C844F569B22491
        Validity
            Not Before: Nov 21 17:03:57 2025 GMT
            Not After : Nov 20 17:08:57 2026 GMT
        Subject: CN=00AB1D9DA0519050C4DA5D8307E9B12532DEC292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:01:a7:b1:24:72:27:88:a8:f9:b6:de:51:
                    c2:09:b8:50:84:bf:90:e0:73:92:5c:7e:57:04:64:
                    99:5c:27:4f:41:ca:b1:b9:8a:62:b6:d8:3f:e1:0c:
                    6c:61:80:ca:fb:70:1f:13:20:b9:f7:50:a5:3f:11:
                    1e:9b:67:79:3f:74:d8:ac:bc:1a:da:da:0b:70:77:
                    db:d2:cb:1a:94:d0:e7:da:d7:ea:ad:ce:d1:f8:f6:
                    00:b4:ac:1f:c9:75:3a:7f:1e:0a:f0:c1:c7:f2:b9:
                    23:a1:cf:b9:d2:cf:de:a8:61:6d:82:b4:65:54:49:
                    11:71:c1:64:b2:80:97:43:95:b3:2d:58:86:7a:0c:
                    58:d4:b1:e4:8b:f7:f4:da:7f:ba:7a:f9:73:49:27:
                    16:ec:c1:8d:3a:cd:89:0a:04:d4:64:f4:d0:f7:f3:
                    40:96:f8:02:68:dd:64:3a:7d:34:a7:11:0c:d2:c7:
                    33:59:ed:b1:ee:83:14:6a:26:0c:69:21:7e:3d:a3:
                    00:96:c4:ca:9f:7f:75:d5:d4:2d:67:9b:72:b1:81:
                    76:77:58:67:ca:e8:f2:5d:5e:fb:3d:f1:73:99:36:
                    d5:11:11:6b:96:cb:9a:5b:d1:60:0e:02:5f:ee:82:
                    a0:02:c6:58:bf:17:87:82:97:48:93:27:18:0d:49:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AB:1D:9D:A0:51:90:50:C4:DA:5D:83:07:E9:B1:25:32:DE:C2:92
            X509v3 Authority Key Identifier:
                keyid:7B:DB:C3:37:C9:2F:D0:08:87:73:8D:70:F5:C8:44:F5:69:B2:24:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/323830343a373334383a3a2f33322d3332203d3e20323632363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7348::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:cf:b6:42:f2:87:29:36:25:50:0d:31:91:33:3e:1d:66:d9:
         24:26:48:e1:44:47:69:59:6d:e2:cd:a2:f0:9f:ea:a5:88:14:
         63:79:44:f6:b6:04:c0:aa:47:f3:a1:b2:ca:fc:c3:9f:09:9d:
         90:93:8c:5a:3a:80:77:ae:c7:c9:e7:15:69:ad:9c:b3:a9:86:
         11:50:7e:e0:eb:09:e2:77:00:64:9f:10:53:62:6c:75:56:4b:
         5a:7b:7a:83:f2:0d:b8:77:6d:a5:52:4b:fb:fb:82:74:d3:2a:
         ea:bd:cb:f5:97:f2:24:d5:73:fd:cb:b7:a7:77:0a:b0:5d:e3:
         a3:2b:f5:f3:bd:84:c4:8d:00:82:f2:5f:df:22:31:62:17:f6:
         ae:2d:e7:c7:04:28:b0:d9:a1:2c:c0:fb:2d:7d:77:67:5f:90:
         57:0f:14:89:07:38:9f:bb:84:f7:03:be:ac:80:60:f8:5f:18:
         48:89:cc:41:5b:49:f4:b9:56:83:72:2c:dc:39:57:61:dd:14:
         34:cf:b2:d3:df:66:9c:f4:2a:06:29:27:41:01:09:1f:86:cf:
         dc:8d:23:55:61:8d:f0:fe:3c:95:20:18:52:76:c0:d6:3d:d4:
         b6:ce:f9:d3:5e:61:88:e1:bc:52:35:81:c8:09:37:c3:f5:5c:
         d2:32:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:35:12 2025 by rpki-client