This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3438203d3e203532353933.roa
File:                     323830343a6431303a3a2f33322d3438203d3e203532353933.roa (raw, json)
Hash identifier:          AJVGT2AHk+BWlBh3TWWbSiN2ghlgOHkKS9212HybSw0=
Subject key identifier:   B1:89:47:30:AB:95:70:25:E3:91:BD:D9:E6:72:75:68:9F:26:C0:A5
Certificate issuer:       /CN=5429A630D95311C5AADAF5AC62BF18BF86863194
Certificate serial:       1F1CBFB5B545D85B725F6E1AF673738BB979C8B2
Authority key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3438203d3e203532353933.roa
Signing time:             Thu 20 Nov 2025 20:20:48 +0000
ROA not before:           Thu 20 Nov 2025 20:15:48 +0000
ROA not after:            Thu 19 Nov 2026 20:20:48 +0000
asID:                     52593
IP address blocks:        2804:d10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl
                          rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1c:bf:b5:b5:45:d8:5b:72:5f:6e:1a:f6:73:73:8b:b9:79:c8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5429A630D95311C5AADAF5AC62BF18BF86863194
        Validity
            Not Before: Nov 20 20:15:48 2025 GMT
            Not After : Nov 19 20:20:48 2026 GMT
        Subject: CN=B1894730AB957025E391BDD9E67275689F26C0A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:e9:17:68:64:66:51:9b:4c:af:70:af:71:
                    32:a0:a1:22:ab:1c:39:d9:61:36:d1:06:e9:04:dd:
                    c8:26:1d:21:4e:17:7c:57:85:b9:a9:2a:e4:bd:00:
                    1b:db:dc:99:e9:10:e7:f4:37:b6:05:73:a8:81:b4:
                    f8:a3:38:cf:84:88:f8:38:cb:47:b6:a5:f1:ce:ab:
                    18:1b:4b:51:c1:46:6d:7e:44:2a:c8:9e:2c:f2:eb:
                    0c:3c:16:e3:0a:bf:99:57:1d:c0:b0:d8:d9:c0:a8:
                    b9:eb:66:b0:cd:8b:31:85:ab:75:17:fc:94:61:3b:
                    ba:c5:01:61:fe:b5:52:7d:be:bd:bc:c1:a0:a9:e1:
                    0a:d1:7b:91:f3:74:69:ac:45:78:6f:28:65:ce:26:
                    a2:5d:ee:4d:8f:4a:6f:84:b8:98:92:d5:f2:14:d5:
                    44:3c:69:86:d9:c1:57:0d:e7:49:0e:dc:4b:ca:07:
                    3c:e1:9c:17:96:08:11:b1:08:6e:ac:7d:1f:17:60:
                    be:9e:39:bf:dc:52:55:05:49:31:53:4b:84:cd:2c:
                    57:47:fe:88:13:37:9c:c1:f9:93:58:8e:86:e0:fd:
                    6a:5f:4a:33:b2:80:5e:17:4c:c0:e7:db:e4:25:ec:
                    6b:f9:b1:53:15:28:3f:b3:93:ff:b6:27:ff:83:2b:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:47:30:AB:95:70:25:E3:91:BD:D9:E6:72:75:68:9F:26:C0:A5
            X509v3 Authority Key Identifier:
                keyid:54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3438203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:c4:73:39:f8:23:01:c4:38:fb:7e:26:2a:72:6b:5f:79:
         bc:39:d7:0c:9b:2f:3e:4a:47:90:a4:d4:c9:7a:fc:fe:25:39:
         de:25:e3:5a:af:a4:e4:60:8d:82:ba:a5:ff:ac:59:e0:49:aa:
         34:84:26:ce:25:87:3f:e0:44:65:fc:53:7c:7e:b3:e2:58:61:
         87:6e:8e:98:98:06:5e:cc:47:a5:4b:e5:b3:1c:5b:44:4f:39:
         88:e6:38:ae:9a:e0:66:a7:80:24:94:cd:4f:4b:94:ab:80:a6:
         c1:cb:8c:d0:af:28:e1:b2:dd:83:f1:a9:06:64:21:e9:d8:c7:
         4a:af:3d:f8:01:f5:ce:a7:d9:9a:7e:49:ab:c2:15:12:66:14:
         41:6f:cd:99:49:68:2f:71:77:4e:0b:15:4b:12:0e:40:09:9b:
         af:c4:a4:cb:e5:bf:8a:bb:52:29:bd:01:13:fb:ea:f8:23:17:
         21:37:7e:09:78:ea:98:3a:d6:aa:d7:c5:a3:ea:ad:56:04:c5:
         a1:71:f9:fa:8e:5f:58:2a:36:de:a5:f6:1f:c1:6a:83:24:36:
         88:c1:f7:96:a2:69:c0:3d:a7:a6:bd:51:46:be:30:9f:d9:68:
         6f:96:18:95:01:9e:c4:07:41:ba:3d:41:a7:bc:1d:c2:10:55:
         48:9d:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:45 2025 by rpki-client