This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/323830343a353936633a3a2f33322d313238203d3e20323638373031.roa
File:                     323830343a353936633a3a2f33322d313238203d3e20323638373031.roa (raw, json)
Hash identifier:          b7CXIsbZNr28fAIIDRDKKYTvdSl4ceaJ4DVvhRxvTsI=
Subject key identifier:   87:52:50:BF:AC:10:3A:D4:07:AE:CB:7E:BD:12:A2:E3:7D:AB:74:4D
Certificate issuer:       /CN=CA46B42FB0BBF428F33303D970954360F960AD2B
Certificate serial:       1E9DE47F05E696F9310B32115E96F6EE78F129E6
Authority key identifier: CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/323830343a353936633a3a2f33322d313238203d3e20323638373031.roa
Signing time:             Thu 06 Nov 2025 17:54:14 +0000
ROA not before:           Thu 06 Nov 2025 17:49:14 +0000
ROA not after:            Thu 05 Nov 2026 17:54:14 +0000
asID:                     268701
IP address blocks:        2804:596c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl
                          rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9d:e4:7f:05:e6:96:f9:31:0b:32:11:5e:96:f6:ee:78:f1:29:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA46B42FB0BBF428F33303D970954360F960AD2B
        Validity
            Not Before: Nov  6 17:49:14 2025 GMT
            Not After : Nov  5 17:54:14 2026 GMT
        Subject: CN=875250BFAC103AD407AECB7EBD12A2E37DAB744D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:8c:70:b1:66:34:20:6b:d5:80:ab:ae:2e:
                    30:a4:ba:59:60:5c:12:cb:56:32:40:15:d2:cb:ce:
                    bd:1e:fe:7f:6e:5a:1b:3f:fd:7f:e7:4f:f2:b3:5e:
                    35:20:99:82:93:e6:68:b8:6b:cf:09:a4:2c:77:69:
                    88:56:f1:12:4d:5f:c6:1b:cb:53:c9:73:b7:49:b7:
                    31:eb:54:fc:3e:80:9a:ec:ab:a9:bf:43:bc:ed:e5:
                    30:9e:11:4a:53:73:30:33:15:df:fb:86:ab:bb:dd:
                    a5:2b:a1:f9:84:fe:47:af:41:7b:a4:69:ba:20:cc:
                    15:5a:76:e6:6b:fe:d5:b1:f8:10:cc:2d:c2:97:ec:
                    6b:26:c2:f5:e5:e8:f7:90:1e:15:97:ff:f2:3a:f7:
                    c1:25:67:f2:06:31:13:11:9f:5d:60:01:86:9d:d7:
                    87:2e:da:d9:05:92:65:15:ee:ad:13:fc:ba:48:7d:
                    5d:31:8f:bf:1b:f8:9d:af:64:95:f8:e3:a2:be:b2:
                    54:ed:af:6c:a0:69:17:55:97:c2:bc:6e:82:02:99:
                    ed:99:bd:71:97:c0:ec:14:cf:18:5e:45:33:d1:19:
                    b9:34:70:07:0c:8b:95:38:c3:95:28:7c:6f:81:57:
                    ac:cc:74:1b:f2:64:35:cb:6b:94:d2:16:8e:ce:4e:
                    fa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:52:50:BF:AC:10:3A:D4:07:AE:CB:7E:BD:12:A2:E3:7D:AB:74:4D
            X509v3 Authority Key Identifier:
                keyid:CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/323830343a353936633a3a2f33322d313238203d3e20323638373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:596c::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:c8:e3:d4:df:db:3b:fb:aa:b7:b0:03:16:e5:55:72:bb:d3:
         72:54:af:37:05:5a:0b:25:dc:fc:6f:8c:36:28:ad:14:e4:91:
         16:f4:9a:16:13:c8:ba:7c:47:ca:33:a1:f5:9e:de:9b:69:8f:
         25:3c:9f:ce:02:c7:55:6c:85:d2:17:4d:95:dc:17:0a:a2:b7:
         a5:56:ec:66:71:47:1f:0c:0f:82:a7:10:f9:39:9b:4f:52:d7:
         72:3e:21:c2:2d:f3:19:25:36:b0:b3:47:72:45:07:63:c8:1f:
         1e:e4:b9:82:bf:e4:e6:fc:db:bf:ed:54:a6:09:19:15:1e:9d:
         1c:1c:63:98:8a:9c:19:8b:30:86:b0:95:c5:54:3f:85:0d:0b:
         bb:4b:08:ce:72:00:42:bb:df:23:7d:06:f7:f5:4e:f8:ff:db:
         ce:ba:47:b5:9d:12:02:f3:82:17:8c:d7:38:d4:91:af:fd:bd:
         b7:bd:f2:6f:cf:c4:fe:0d:bb:0c:46:08:6c:44:d0:ac:00:c6:
         b3:16:9a:b2:ec:77:93:de:a9:0c:7c:1d:1d:e7:14:5a:4d:e2:
         bd:b2:2f:83:43:0c:1f:02:ed:ad:bb:a0:66:35:43:92:09:32:
         77:14:0c:a1:48:53:a3:b3:0a:a7:f2:73:7e:97:22:22:56:0f:
         6d:d7:e4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:14 2025 by rpki-client