This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a3a2f33352d3335203d3e20323633323930.roa
File:                     323830343a313638383a3a2f33352d3335203d3e20323633323930.roa (raw, json)
Hash identifier:          37uqMDsvIWIwqYG7E5iZAUdBYLrd5/c825crmuEdfcc=
Subject key identifier:   79:C8:E9:21:FB:6E:97:49:07:E1:85:F4:BF:DA:FB:2B:C6:2F:5C:CF
Certificate issuer:       /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial:       69E88F037BF6C1ED64FC89605EB660C931DD6DCD
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a3a2f33352d3335203d3e20323633323930.roa
Signing time:             Mon 17 Nov 2025 17:12:52 +0000
ROA not before:           Mon 17 Nov 2025 17:07:52 +0000
ROA not after:            Mon 16 Nov 2026 17:12:52 +0000
asID:                     263290
IP address blocks:        2804:1688::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e8:8f:03:7b:f6:c1:ed:64:fc:89:60:5e:b6:60:c9:31:dd:6d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
        Validity
            Not Before: Nov 17 17:07:52 2025 GMT
            Not After : Nov 16 17:12:52 2026 GMT
        Subject: CN=79C8E921FB6E974907E185F4BFDAFB2BC62F5CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:60:38:6e:91:d2:03:a0:71:b6:ff:ac:dd:
                    5c:93:49:b9:29:69:b3:e8:54:69:5f:ef:6c:d5:f6:
                    35:51:95:d9:6c:e1:83:55:61:3c:45:e3:41:12:ed:
                    20:e9:1b:16:17:66:5f:09:44:65:e0:47:6f:10:08:
                    59:8a:c8:c7:57:7c:ad:83:f8:57:ce:95:f9:e1:5d:
                    89:98:43:75:cb:8f:c2:d2:1f:65:ec:7a:4e:3c:ad:
                    e3:10:24:df:fb:63:fa:98:a6:80:3b:72:6f:bf:29:
                    76:56:8f:a5:97:42:1d:49:04:0f:d9:ac:7a:eb:86:
                    eb:44:8f:4b:c4:70:8f:9e:1f:53:57:1e:81:f3:3f:
                    06:f7:cd:27:0d:1b:e7:87:35:cc:6c:f2:b2:72:b5:
                    4c:71:e6:8e:ed:4f:9c:b3:21:d6:b0:41:79:cd:d3:
                    b7:ec:a4:23:dd:8d:6e:bb:9c:6b:7c:0b:21:8a:17:
                    6b:31:88:6e:63:47:4e:29:72:f0:d4:e5:92:af:02:
                    68:a0:fa:75:65:5e:10:2e:af:fa:df:22:ac:3b:7c:
                    b2:69:e5:c5:60:17:b9:8b:b2:22:19:8c:1b:87:c2:
                    bb:b9:87:a3:18:91:5a:fa:eb:62:1b:5a:7b:6b:87:
                    f4:21:00:88:b7:a1:1d:72:ec:69:cb:99:92:aa:00:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C8:E9:21:FB:6E:97:49:07:E1:85:F4:BF:DA:FB:2B:C6:2F:5C:CF
            X509v3 Authority Key Identifier:
                keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a3a2f33352d3335203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1688::/35

    Signature Algorithm: sha256WithRSAEncryption
         6a:11:37:c8:89:12:64:10:00:1a:53:2d:7c:4c:86:28:a8:32:
         56:3f:e4:fe:c9:32:4b:c7:2b:df:95:e5:fd:a8:f7:d6:6f:7d:
         c8:9a:5e:d1:24:44:2b:18:85:ff:a6:b3:42:85:2a:a4:e6:7e:
         9a:34:20:34:12:f3:12:53:b8:91:14:70:fe:fe:86:fc:f0:0a:
         38:a2:c6:6a:24:05:0c:e1:30:43:91:ef:ca:66:34:49:5b:78:
         a0:e0:ca:b2:c8:cc:c8:cf:af:d2:f2:90:ba:28:3c:23:6c:1c:
         34:89:45:55:78:17:b5:35:65:a7:cf:0a:62:86:ec:a2:a1:92:
         72:5a:9d:6a:3e:ad:8a:47:21:75:b0:12:9c:07:0f:35:9a:7c:
         8c:08:55:f2:ed:66:e2:d0:96:cc:f6:65:e1:aa:02:29:95:79:
         14:f9:41:01:8a:30:fa:74:09:2a:4a:e6:71:e1:7b:63:29:ae:
         3d:ca:26:35:a1:5c:51:50:5d:1d:cd:74:bf:09:47:3b:b1:d1:
         19:ea:17:61:f3:8c:27:d3:4a:1b:fc:81:45:9c:ea:a0:e6:df:
         e5:12:af:7f:6f:a3:43:02:9f:4f:2b:84:c8:06:d0:e4:3e:35:
         f1:9a:47:fd:fd:9f:45:ef:8e:39:e1:22:10:5b:95:22:06:14:
         c2:22:10:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:46 2025 by rpki-client