This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a3a2f33322d3332203d3e20323632353033.roa
File:                     323830343a326265303a3a2f33322d3332203d3e20323632353033.roa (raw, json)
Hash identifier:          MIrnI2NbO7wlot2WHtisBWdhPtUEgKPZoeTWHbR5j6I=
Subject key identifier:   31:50:C4:6E:DC:C3:56:AE:12:E0:51:F8:06:A5:8E:A0:3D:D9:6B:6A
Certificate issuer:       /CN=D81C632D11CBA93C6FA08E30C713D5A272098906
Certificate serial:       3416D1513B175858D7EAB66A5298B281E3AF70FC
Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a3a2f33322d3332203d3e20323632353033.roa
Signing time:             Sun 16 Nov 2025 12:41:14 +0000
ROA not before:           Sun 16 Nov 2025 12:36:14 +0000
ROA not after:            Sun 15 Nov 2026 12:41:14 +0000
asID:                     262503
IP address blocks:        2804:2be0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:16:d1:51:3b:17:58:58:d7:ea:b6:6a:52:98:b2:81:e3:af:70:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906
        Validity
            Not Before: Nov 16 12:36:14 2025 GMT
            Not After : Nov 15 12:41:14 2026 GMT
        Subject: CN=3150C46EDCC356AE12E051F806A58EA03DD96B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:73:34:4f:3a:31:cf:07:f1:c9:d1:37:23:
                    4f:6f:7b:61:ab:d8:5f:1a:7a:5a:e7:3f:ab:25:d9:
                    8a:a0:cb:a5:19:23:13:4f:13:17:ed:5d:21:16:80:
                    8b:fc:09:a2:b9:3f:8d:ed:ca:78:b1:bd:13:ed:48:
                    37:25:6f:fd:77:1c:f2:6a:b3:cc:09:64:38:4c:82:
                    e2:32:94:38:8f:e3:f2:19:b5:99:66:0b:8e:ec:75:
                    5e:e5:8f:a7:e9:76:95:49:62:54:02:0c:ba:5d:54:
                    12:2f:96:94:4f:93:14:18:46:c8:6f:df:a5:8d:03:
                    27:23:9b:d5:74:b0:cc:31:a0:88:ac:75:ad:5e:8f:
                    69:1d:ea:62:a5:2b:c2:3f:6f:16:88:14:47:c1:b4:
                    9d:89:62:36:c7:97:00:f9:93:f3:67:1e:bc:f3:c4:
                    36:94:d7:5a:33:c7:7e:6c:65:74:af:05:9c:e9:2f:
                    3e:2e:29:6a:03:a0:6e:e9:18:b3:42:76:f4:f6:a6:
                    a9:41:8a:d8:1c:40:4f:c9:c7:a4:9e:97:44:db:f5:
                    6d:39:9a:b2:d3:d9:8b:6d:c6:9a:c0:6d:c0:21:11:
                    af:a5:dc:fc:e1:21:47:c9:a2:da:38:7a:fc:ea:f9:
                    85:51:b3:5a:d4:42:72:07:48:7c:2d:0b:19:13:e3:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:C4:6E:DC:C3:56:AE:12:E0:51:F8:06:A5:8E:A0:3D:D9:6B:6A
            X509v3 Authority Key Identifier:
                keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a3a2f33322d3332203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:ac:14:4e:38:e5:6b:a2:c8:aa:2c:ce:4b:11:d9:c8:b0:e2:
         db:5d:49:b2:60:62:5b:3e:af:5f:96:9a:ef:cd:ab:fb:39:47:
         04:ee:cf:f3:a0:e7:18:91:62:5a:b2:40:24:4b:61:ea:e6:53:
         c1:5b:59:a6:35:de:f0:e4:9b:c9:d7:87:66:a3:eb:1d:79:00:
         f7:41:ac:6d:82:6e:43:a7:a4:d4:ef:2d:15:72:57:09:ae:08:
         93:42:15:c1:19:95:d6:85:b5:89:8b:d1:a8:d7:7d:7c:00:88:
         99:c0:1e:39:d1:66:61:cf:c2:7e:3b:7b:5f:62:8e:26:fa:6f:
         d9:1e:df:81:dc:76:a2:87:46:88:05:fc:ee:70:9f:a4:7a:90:
         49:35:8a:7a:b2:27:27:dd:e9:fc:31:29:7e:dc:f7:76:35:bd:
         57:49:6c:9f:d3:8e:7d:7c:84:e6:b4:1f:dc:0a:27:9d:3b:23:
         eb:c5:9e:f0:93:fe:a6:0b:bc:30:93:4c:97:50:6f:12:77:0c:
         1f:31:50:bd:39:0c:a7:2a:d9:6d:45:dd:6f:df:ec:16:52:c9:
         2c:2e:ff:21:fd:ad:cf:29:d1:06:46:15:74:77:ed:27:95:e8:
         18:54:3c:6e:70:71:9e:12:4e:55:fa:3d:54:88:99:58:67:1b:
         c8:6a:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:30 2025 by rpki-client