This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa
File:                     323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa (raw, json)
Hash identifier:          Noqy1ZdGoOeGJW75wmiyXQOc2RXkiEmWAOKhsuxiG1I=
Subject key identifier:   31:50:CE:09:5A:B6:30:A8:A0:C9:B6:32:B0:73:52:0A:5B:8E:EE:85
Certificate issuer:       /CN=29714F97A53F69A40841F2805D919FCAC517F546
Certificate serial:       185413DDC6759CAA8FBCCA00E049056A02CFF271
Authority key identifier: 29:71:4F:97:A5:3F:69:A4:08:41:F2:80:5D:91:9F:CA:C5:17:F5:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa
Signing time:             Thu 13 Nov 2025 19:17:59 +0000
ROA not before:           Thu 13 Nov 2025 19:12:59 +0000
ROA not after:            Thu 12 Nov 2026 19:17:59 +0000
asID:                     265468
IP address blocks:        2804:349c:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:54:13:dd:c6:75:9c:aa:8f:bc:ca:00:e0:49:05:6a:02:cf:f2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29714F97A53F69A40841F2805D919FCAC517F546
        Validity
            Not Before: Nov 13 19:12:59 2025 GMT
            Not After : Nov 12 19:17:59 2026 GMT
        Subject: CN=3150CE095AB630A8A0C9B632B073520A5B8EEE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:19:0a:49:15:ed:c6:c1:1f:47:18:41:ea:
                    e1:70:c5:55:5b:d3:6c:db:52:c1:b5:42:9f:cb:ca:
                    09:dd:39:e9:82:3f:61:4f:9a:50:77:60:85:ff:e9:
                    9d:74:32:7b:73:3c:a1:30:09:9c:63:6f:a0:48:80:
                    f6:76:ef:7e:80:90:51:32:57:4f:e5:b8:1f:78:ef:
                    3c:e5:49:dc:ca:bc:ca:89:5a:fd:c1:63:e5:5c:95:
                    08:b6:a5:9d:d1:58:92:04:7e:94:08:fd:57:d5:db:
                    a1:8f:39:19:cb:87:53:20:3f:97:6d:9e:7e:f5:57:
                    06:ef:0b:da:40:6b:ef:29:13:72:98:21:6b:b9:43:
                    0d:58:59:5d:73:3d:1a:05:d6:bc:2e:4b:1c:84:e5:
                    16:39:c2:a3:e0:89:85:74:58:4d:07:25:71:eb:03:
                    ad:f7:a4:fe:39:6a:58:0d:34:fb:03:bf:15:5a:1c:
                    3a:4e:21:16:88:c9:ec:ac:e1:48:86:e8:ac:14:b7:
                    16:ab:3d:ed:ce:ad:36:9c:45:41:2f:68:05:b8:50:
                    6a:45:da:f4:07:f9:43:1d:a1:6d:17:6d:a7:31:8b:
                    3d:e2:d4:b4:83:11:18:70:b2:ef:f1:91:3f:5b:47:
                    11:38:31:dd:6d:7c:82:e3:64:c5:b5:c3:04:36:f7:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:CE:09:5A:B6:30:A8:A0:C9:B6:32:B0:73:52:0A:5B:8E:EE:85
            X509v3 Authority Key Identifier:
                keyid:29:71:4F:97:A5:3F:69:A4:08:41:F2:80:5D:91:9F:CA:C5:17:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:349c:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d7:88:e8:8e:97:cb:2c:91:09:74:67:03:d6:51:af:21:ec:fc:
         c6:7e:ba:70:47:65:4d:55:7c:37:39:06:89:66:ce:e5:22:4d:
         5b:f3:39:b7:f3:01:29:4d:c5:87:cc:d0:a4:27:21:40:1b:d1:
         f2:53:b4:75:a7:8e:f6:e0:39:b6:f2:fd:18:c9:19:85:13:04:
         c5:b7:af:39:7b:6e:d0:46:bb:f1:fb:b8:a0:d2:0a:e8:77:6a:
         7f:03:c8:cd:0a:c9:6d:0a:5a:dc:f5:83:93:6b:2d:50:71:4b:
         0d:27:6d:94:d1:de:29:74:fc:0d:79:f8:86:61:a7:5e:c1:11:
         fa:28:4a:34:24:cd:b3:59:0d:c7:91:ba:ea:68:41:0c:d3:1d:
         94:b5:5d:6f:b7:ea:a3:1b:a1:b3:7a:9d:65:33:6b:f6:95:de:
         ef:b2:f9:b5:db:3a:68:41:65:b5:ca:5b:bc:81:4b:dc:b2:17:
         8b:8a:8e:19:31:26:11:d6:2c:13:c4:04:ce:57:9a:02:f1:b6:
         56:48:cc:bb:1c:6a:1f:c3:75:18:33:3d:dc:d6:12:8c:29:11:
         e6:82:65:d5:05:94:47:9a:7e:31:7a:13:1c:d9:6f:4d:01:06:
         e9:4f:9d:0a:6d:b3:da:d2:9b:f8:18:73:c6:97:f0:2d:05:96:
         ef:86:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:31 2025 by rpki-client