This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa
File:                     323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa (raw, json)
Hash identifier:          tUqjfhlxSAAyztlF/+Y/33beZfcd047OPzPrZrwT2Wg=
Subject key identifier:   26:8B:00:B0:D1:12:8D:AE:43:BE:76:0E:3F:98:55:DB:58:2E:B1:5E
Certificate issuer:       /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial:       61ADDBA8416840DE053C9CA102E0727E4CF7CD48
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa
Signing time:             Mon 17 Nov 2025 17:12:53 +0000
ROA not before:           Mon 17 Nov 2025 17:07:53 +0000
ROA not after:            Mon 16 Nov 2026 17:12:53 +0000
asID:                     263290
IP address blocks:        2804:1688:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ad:db:a8:41:68:40:de:05:3c:9c:a1:02:e0:72:7e:4c:f7:cd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
        Validity
            Not Before: Nov 17 17:07:53 2025 GMT
            Not After : Nov 16 17:12:53 2026 GMT
        Subject: CN=268B00B0D1128DAE43BE760E3F9855DB582EB15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:bb:04:26:c8:2d:dd:f3:43:bd:51:6e:68:
                    c9:0c:26:45:2f:80:5a:bc:58:26:d4:f9:f0:ec:c5:
                    cf:59:74:87:8a:4d:81:e7:78:d5:08:84:54:03:26:
                    f0:ff:b8:9d:b5:28:f1:a8:3f:bd:72:70:57:84:16:
                    eb:c4:8f:39:a8:1d:d7:14:60:5e:64:53:9c:c4:b4:
                    55:21:a8:37:26:a7:d2:e8:50:2b:fa:8e:75:09:4b:
                    7f:8f:2a:53:98:c1:b9:8b:c6:9e:38:0e:6a:8c:14:
                    54:63:3a:96:af:56:a2:40:ed:2b:1b:33:00:9f:e1:
                    3a:78:ef:75:92:19:a9:e5:ce:6c:5b:fa:ba:d1:7e:
                    08:12:74:18:f4:f8:de:11:f2:14:bb:6a:71:a2:60:
                    85:5f:53:9f:ac:9f:8c:20:d2:6a:b2:e0:fd:a6:c0:
                    73:d0:19:15:eb:36:b9:e6:b1:86:ed:5c:40:36:66:
                    86:b5:74:94:b4:cd:86:05:71:78:34:5e:55:53:1d:
                    5a:8a:47:b9:02:1d:4c:d2:eb:f2:67:34:9b:71:df:
                    4c:bb:e7:f2:5c:e6:64:af:e7:e3:49:3f:77:08:3a:
                    26:74:48:83:5d:a3:91:94:84:b2:52:3d:e0:e3:a0:
                    b4:ca:d5:8b:ee:14:7d:f3:df:7e:15:59:03:8d:51:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8B:00:B0:D1:12:8D:AE:43:BE:76:0E:3F:98:55:DB:58:2E:B1:5E
            X509v3 Authority Key Identifier:
                keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1688:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a7:6c:7b:7b:00:30:f5:e0:84:39:1e:1e:b9:24:c8:cb:e1:5f:
         e1:fb:db:52:37:60:aa:eb:39:95:74:14:66:a7:8d:0d:94:65:
         82:8f:6f:ca:06:2d:38:b0:ff:bf:d0:03:a8:74:e4:7c:07:ed:
         5a:e5:82:46:9a:0b:5e:08:98:9b:66:a0:42:09:dc:60:79:ac:
         59:3e:92:79:f4:fe:ce:9a:fb:75:38:34:e9:2b:de:56:fd:94:
         c9:35:5d:94:0b:01:42:ad:39:41:fa:cd:ed:32:85:1d:56:53:
         aa:04:38:02:a8:fa:96:d0:9b:ce:61:3e:71:ba:2c:be:10:7a:
         03:26:10:02:2d:1d:4b:1d:c1:83:1e:2a:c1:8a:ae:a5:66:a3:
         27:01:90:5b:35:20:47:74:69:36:38:4d:42:17:35:7d:14:65:
         cd:88:01:ef:04:c1:1b:08:13:03:7b:50:a7:8c:5e:9a:37:1d:
         ed:c7:05:35:2c:6a:6a:76:4f:bb:8c:c2:37:ee:0c:7b:14:b5:
         8e:3b:09:6e:ae:0c:72:d5:3b:6c:7b:d6:f3:c4:6e:d6:f5:86:
         5c:5b:ec:ba:2c:cb:55:21:2f:ba:ef:eb:51:80:53:16:73:be:
         12:8e:5c:19:96:b0:22:9c:7e:25:82:e4:64:47:c6:8a:13:ad:
         54:24:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:47:04 2025 by rpki-client