This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/323830343a363366343a3a2f33322d3438203d3e20323639333934.roa
File:                     323830343a363366343a3a2f33322d3438203d3e20323639333934.roa (raw, json)
Hash identifier:          4ieIy3fdxHU2sxFCNaUCexc62wTWLJ/vn4lxut7kj+M=
Subject key identifier:   34:05:E2:AC:2F:97:2D:BD:97:B2:9E:B8:E3:75:B5:40:E4:7B:2B:FE
Certificate issuer:       /CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
Certificate serial:       2C6529AF25A4CC00D8A9F3CC809DBAB19EEC5D16
Authority key identifier: CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/323830343a363366343a3a2f33322d3438203d3e20323639333934.roa
Signing time:             Fri 05 Dec 2025 19:03:47 +0000
ROA not before:           Fri 05 Dec 2025 18:58:47 +0000
ROA not after:            Fri 04 Dec 2026 19:03:47 +0000
asID:                     269394
IP address blocks:        2804:63f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl
                          rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:65:29:af:25:a4:cc:00:d8:a9:f3:cc:80:9d:ba:b1:9e:ec:5d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
        Validity
            Not Before: Dec  5 18:58:47 2025 GMT
            Not After : Dec  4 19:03:47 2026 GMT
        Subject: CN=3405E2AC2F972DBD97B29EB8E375B540E47B2BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:3c:80:ca:3b:a0:2d:ee:40:c9:42:d5:7a:
                    2a:04:ce:20:4a:c9:bc:45:f2:e5:20:00:2a:b4:fb:
                    97:ef:e1:14:4d:6f:45:a7:a3:d1:6f:7b:7a:61:cc:
                    68:2a:70:67:58:22:7a:63:52:b1:be:0e:35:9e:15:
                    2b:d9:62:72:55:04:c9:08:01:62:9a:e3:97:e2:2a:
                    08:58:24:c7:ec:c9:11:3b:3d:e1:52:17:67:64:4c:
                    82:51:29:10:e1:7c:87:20:d9:9e:d1:63:09:a8:d3:
                    99:41:d7:eb:f7:74:db:6e:a5:01:87:ba:23:f8:2f:
                    bc:d4:f8:d0:82:03:9e:61:07:07:05:11:25:f5:1f:
                    74:c7:c1:26:ba:a6:2e:df:1c:1d:cd:0b:3a:7d:61:
                    8c:eb:54:3f:1e:7c:6b:cb:fc:fb:32:d7:1d:6f:b9:
                    af:9e:cb:26:17:72:5f:80:e5:51:04:8b:70:e4:7a:
                    4a:cc:e1:2f:52:85:99:a0:cc:4a:7a:a4:7b:6b:8d:
                    56:9b:77:a3:81:91:64:b9:f6:63:90:1f:8c:fb:28:
                    fc:d3:02:d4:3b:83:58:01:fc:c5:7c:a7:73:95:88:
                    a1:fd:74:1d:3d:8d:bc:03:b1:65:46:09:1a:3c:52:
                    79:f1:f0:e9:79:e7:b8:3d:80:52:e9:68:f9:a9:a5:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:05:E2:AC:2F:97:2D:BD:97:B2:9E:B8:E3:75:B5:40:E4:7B:2B:FE
            X509v3 Authority Key Identifier:
                keyid:CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/323830343a363366343a3a2f33322d3438203d3e20323639333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:99:00:be:cc:5b:1f:17:01:62:92:2b:ce:57:d8:cc:c7:
         de:2b:5a:a3:78:65:07:ec:44:d7:8f:11:4f:d0:38:0b:c5:8f:
         47:86:1c:5a:ec:41:bb:ee:0d:20:2d:ea:c9:0e:ef:45:7e:d6:
         bd:36:15:e1:aa:f3:45:53:6f:2e:3c:3d:6d:a8:c0:67:e1:db:
         38:3b:b7:2c:32:78:35:e7:df:d5:f4:9b:97:a1:3b:8e:07:cd:
         3a:eb:68:1c:8b:45:df:7d:8b:8a:e2:34:54:6c:7e:52:4d:c6:
         77:78:82:d5:22:b0:df:34:ae:46:56:a1:3a:29:0e:7f:4d:a2:
         9a:e4:84:78:9c:fa:3c:39:19:ca:59:32:75:6a:08:0a:16:89:
         ab:6c:77:4c:c6:b8:c9:e3:2a:55:4f:a9:26:45:93:ee:e5:a8:
         7b:8d:41:fe:44:b0:68:ab:83:c1:80:a2:53:d7:67:6d:5a:39:
         6b:15:ad:2f:d8:c2:33:07:6d:aa:0a:66:e9:c9:e4:ce:a6:69:
         99:f8:f6:37:63:a4:b6:ea:b0:95:bf:2b:de:bc:7e:3b:7a:d3:
         70:ef:89:da:3a:d4:4e:fc:de:db:d9:4a:0c:47:50:aa:5f:48:
         34:e8:4d:9d:50:03:22:1d:97:95:98:6e:22:30:00:8a:af:2d:
         e0:e3:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:35:04 2025 by rpki-client