This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa
File:                     323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa (raw, json)
Hash identifier:          M6mzwrjz9nq35wkWZV/QnNVuiGRjCv7LSdNS6FLVRCc=
Subject key identifier:   EB:FD:7C:22:2D:D7:57:6C:31:A5:67:94:76:C6:5A:25:17:8E:E5:30
Certificate issuer:       /CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
Certificate serial:       3BE34FC31996BCA3ECF6CF7F65D80C0E983CEE3D
Authority key identifier: B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa
Signing time:             Mon 17 Nov 2025 17:12:54 +0000
ROA not before:           Mon 17 Nov 2025 17:07:54 +0000
ROA not after:            Mon 16 Nov 2026 17:12:54 +0000
asID:                     263290
IP address blocks:        2804:1688:e400::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e3:4f:c3:19:96:bc:a3:ec:f6:cf:7f:65:d8:0c:0e:98:3c:ee:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
        Validity
            Not Before: Nov 17 17:07:54 2025 GMT
            Not After : Nov 16 17:12:54 2026 GMT
        Subject: CN=EBFD7C222DD7576C31A5679476C65A25178EE530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:e7:bc:68:86:fb:35:b1:63:95:23:dd:fe:
                    60:d1:2d:b5:1b:0c:48:80:f5:77:5d:ff:48:f3:75:
                    a1:b1:99:0a:d8:06:e6:61:a6:c1:60:9d:0a:97:45:
                    22:51:02:54:79:46:30:1c:fa:e3:ee:a4:6e:af:ae:
                    36:8d:61:41:be:98:f6:4a:41:7d:88:f4:88:89:88:
                    c5:4c:19:65:33:cb:14:e4:d0:25:f6:84:c6:87:00:
                    13:7c:e4:4a:ef:5b:f6:7d:b6:68:51:bb:5a:62:1e:
                    67:f3:99:62:b5:70:13:19:3f:c7:6b:d4:d0:df:e8:
                    3b:b3:6c:54:69:58:46:94:f8:01:93:3d:5b:9e:e8:
                    4b:ef:97:80:06:ad:4e:32:4b:0c:ce:17:99:05:78:
                    68:49:4b:da:8d:10:df:3c:f1:27:3a:93:a2:3f:03:
                    36:55:87:85:bf:77:f9:96:3b:6c:5f:e3:bd:01:b1:
                    7c:19:3e:f0:df:fb:27:68:97:12:7a:94:c8:10:11:
                    e7:ce:f7:b2:85:53:3c:3c:1b:a5:0e:87:2f:f5:74:
                    d5:1d:4b:de:32:90:3f:45:ed:13:56:97:01:35:40:
                    69:5f:93:c8:9c:08:40:e3:47:7a:6b:d4:52:ed:a5:
                    47:da:be:23:40:ec:d8:70:75:76:ae:4a:11:4e:fe:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:7C:22:2D:D7:57:6C:31:A5:67:94:76:C6:5A:25:17:8E:E5:30
            X509v3 Authority Key Identifier:
                keyid:B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653430303a3a2f33392d3339203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1688:e400::/39

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:a4:0e:f5:a5:b1:cb:22:0d:7c:9d:e6:49:4f:54:83:a8:
         68:11:74:05:0f:f9:32:3c:b3:11:e9:d2:67:31:f7:7c:38:12:
         c3:e1:ba:e0:2c:c4:e6:c3:bd:27:5b:f7:1c:cb:d2:14:33:ad:
         64:f6:c7:e8:17:da:e2:38:1d:40:c0:ab:d7:d5:56:38:fe:17:
         29:d0:29:64:e1:6a:c6:57:d3:ad:a8:a6:14:73:e3:55:23:aa:
         b9:af:3e:73:84:6d:4c:3a:8f:04:71:5a:6e:80:64:6c:7d:d5:
         5d:5e:d3:c2:1b:06:ce:76:6c:2a:a0:19:0e:d0:03:ff:b7:36:
         3d:98:e6:73:bf:24:0e:55:cd:ad:bc:ae:f5:08:33:5c:54:bd:
         15:56:2b:06:c9:71:47:e8:95:ca:a7:4a:54:ce:c6:95:6a:9f:
         53:f6:33:5e:90:d0:43:34:f1:bc:10:42:65:ef:bf:5b:98:f1:
         f5:5d:fc:8b:b5:f5:99:a7:f8:bd:d7:8d:d1:cc:d5:06:ec:c6:
         2a:9d:67:eb:3e:23:db:ba:2e:ab:d9:fb:db:04:dd:d0:72:b1:
         ab:ce:8a:80:c4:61:bd:4f:fa:0e:eb:d9:83:46:00:29:96:24:
         1b:2d:ee:a2:0a:99:a2:c6:05:1b:56:31:a8:bd:61:1b:96:9c:
         da:73:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:40 2025 by rpki-client