This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa
File:                     323830343a333835633a3a2f33332d3333203d3e20323632363837.roa (raw, json)
Hash identifier:          J0lCm2hxyfYLbbnW8U75FE+jVQK9Dj6Ya1BtpHmfiwY=
Subject key identifier:   11:0C:9A:8C:C4:EB:26:7C:FF:7F:6A:31:0E:30:09:7F:CB:0F:63:BA
Certificate issuer:       /CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
Certificate serial:       6F688A0B0257AD43C3BC8449E2EAB088D33D687D
Authority key identifier: 70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa
Signing time:             Thu 04 Dec 2025 14:47:44 +0000
ROA not before:           Thu 04 Dec 2025 14:42:44 +0000
ROA not after:            Thu 03 Dec 2026 14:47:44 +0000
asID:                     262687
IP address blocks:        2804:385c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:68:8a:0b:02:57:ad:43:c3:bc:84:49:e2:ea:b0:88:d3:3d:68:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
        Validity
            Not Before: Dec  4 14:42:44 2025 GMT
            Not After : Dec  3 14:47:44 2026 GMT
        Subject: CN=110C9A8CC4EB267CFF7F6A310E30097FCB0F63BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:6e:ee:c2:9f:90:da:6b:72:27:1f:99:d0:
                    b3:45:f8:20:13:68:53:0a:f1:df:89:0d:1f:e5:c4:
                    b8:90:58:23:59:2b:bc:24:7b:5a:6d:11:be:bb:3e:
                    4b:0c:ab:d6:d9:62:ad:1d:37:e7:50:88:48:93:b6:
                    56:93:2d:31:b4:77:50:8a:11:f4:92:bd:e9:5f:d1:
                    fe:94:28:29:d4:cf:06:a0:71:63:6d:ee:c0:d6:09:
                    f1:a7:37:c2:f7:60:25:c4:30:2d:33:87:ed:65:68:
                    1d:99:00:65:53:ae:cf:52:ed:c2:fa:cb:08:ae:3f:
                    9d:38:ce:87:ce:9f:a9:88:d1:20:7d:ac:90:c2:a7:
                    cf:d3:e1:53:18:be:60:89:63:19:11:dd:9b:00:a2:
                    e2:ba:47:ef:1c:0e:aa:db:01:d8:14:2e:82:d4:88:
                    ff:61:ce:70:69:f6:05:8b:48:fb:3f:c0:f3:78:e1:
                    da:fe:83:88:27:8a:bf:a1:bd:a9:64:ff:b6:3b:42:
                    6c:cb:bb:d7:81:c3:fd:6c:1e:9a:8f:e5:d0:b5:4d:
                    bf:4d:52:73:e8:f5:2d:94:02:e1:17:88:eb:31:f3:
                    11:37:d2:b2:0d:12:bc:44:ed:ab:40:b2:40:fe:14:
                    46:b8:42:49:6e:92:36:f8:29:ad:c1:4e:1e:4e:02:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0C:9A:8C:C4:EB:26:7C:FF:7F:6A:31:0E:30:09:7F:CB:0F:63:BA
            X509v3 Authority Key Identifier:
                keyid:70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3a2f33332d3333203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c::/33

    Signature Algorithm: sha256WithRSAEncryption
         b8:c8:fb:45:01:36:a9:df:46:2a:50:22:ab:e4:71:52:79:8d:
         1e:12:8f:1b:41:7b:47:23:d6:5b:a3:c0:87:8b:70:37:e6:11:
         03:5b:a7:0e:64:0f:30:6e:5c:1c:ea:27:55:f1:6f:16:d0:b6:
         82:2e:c4:33:c1:e2:f4:a0:e2:70:6a:27:67:26:d9:33:2b:9c:
         33:94:fa:c5:62:01:3b:c9:67:41:24:ff:40:7a:1a:e4:49:51:
         2d:4d:f4:f9:b4:03:0f:e4:a6:02:07:28:2c:c6:29:18:b2:59:
         f0:fc:b8:85:fb:34:f9:ab:f9:84:73:f8:79:d0:b3:18:8b:18:
         22:1c:d8:e9:01:2d:98:cd:5b:11:9f:49:f4:49:0a:64:41:fe:
         ce:ec:92:4b:ac:4d:98:cb:83:73:9e:f4:3f:26:bf:96:f1:23:
         f9:bf:b8:c3:e3:85:b6:21:96:ed:e9:c9:f2:70:c8:47:54:51:
         2f:d3:a6:37:87:2a:b8:f5:5e:bd:f9:2c:6f:95:0f:dc:37:b2:
         08:17:91:57:6f:9f:38:bf:37:76:50:e2:d9:4f:b7:b0:aa:83:
         1b:00:c7:6a:cc:4b:b0:9e:e2:af:5d:6a:c8:a4:f8:cf:3b:02:
         4a:c3:9c:8e:47:1f:39:c2:e6:71:62:73:a9:df:d2:46:7e:f4:
         f6:6b:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:39 2025 by rpki-client