This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa
File:                     323830343a333439633a3a2f33322d3332203d3e20323635343638.roa (raw, json)
Hash identifier:          4avCkpihNBJAjwQqA5sZmlbgtysyy6ARx5gW4lUsl+U=
Subject key identifier:   F7:E1:8B:B9:21:22:97:63:9A:FC:3A:8A:1F:CD:A6:43:AF:61:D6:6C
Certificate issuer:       /CN=29714F97A53F69A40841F2805D919FCAC517F546
Certificate serial:       5C2964B0252557F28D58A97EAC5CB193E99788C1
Authority key identifier: 29:71:4F:97:A5:3F:69:A4:08:41:F2:80:5D:91:9F:CA:C5:17:F5:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa
Signing time:             Thu 13 Nov 2025 19:17:59 +0000
ROA not before:           Thu 13 Nov 2025 19:12:59 +0000
ROA not after:            Thu 12 Nov 2026 19:17:59 +0000
asID:                     265468
IP address blocks:        2804:349c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:29:64:b0:25:25:57:f2:8d:58:a9:7e:ac:5c:b1:93:e9:97:88:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29714F97A53F69A40841F2805D919FCAC517F546
        Validity
            Not Before: Nov 13 19:12:59 2025 GMT
            Not After : Nov 12 19:17:59 2026 GMT
        Subject: CN=F7E18BB9212297639AFC3A8A1FCDA643AF61D66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:a5:38:e9:24:2f:6b:20:91:d9:96:50:a5:
                    cf:da:ad:0d:d1:6d:d9:68:64:51:4d:72:3b:65:b9:
                    0d:b8:71:66:a1:56:10:64:f0:01:09:25:9d:7c:8a:
                    0e:eb:69:ea:94:68:5f:a2:1d:5c:9d:0c:8b:1a:f2:
                    34:5d:8a:e0:d0:f8:5b:a1:f7:46:3f:6c:c7:49:d4:
                    24:81:17:91:82:30:4c:f5:67:85:21:4b:54:89:97:
                    2d:49:cb:cb:f4:a7:64:cc:1f:f5:f6:55:fd:af:0d:
                    9a:a5:34:ac:30:26:4d:44:2a:ca:6b:dc:9a:49:eb:
                    4b:51:c5:45:cd:f2:cc:17:01:2c:2e:86:d3:3e:d8:
                    a8:6c:ee:c4:2b:1a:82:31:95:84:ac:06:ad:67:01:
                    2c:9c:f9:63:32:92:46:18:5c:e9:16:52:5b:0c:04:
                    cb:51:23:a8:4d:ed:a5:14:a3:a0:09:5c:66:0c:ba:
                    d8:fa:6f:a1:54:5f:2b:d6:f7:95:7f:63:51:41:f2:
                    13:8f:d9:e2:a6:55:47:f6:c1:e6:4f:ba:47:62:e2:
                    df:26:ab:4b:49:a9:96:f9:ae:03:1b:80:9d:bb:2f:
                    ab:41:d6:16:90:bc:86:61:29:4e:3d:dd:1a:9e:21:
                    e8:1f:9a:27:1f:8b:18:10:24:f0:89:40:27:c0:05:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E1:8B:B9:21:22:97:63:9A:FC:3A:8A:1F:CD:A6:43:AF:61:D6:6C
            X509v3 Authority Key Identifier:
                keyid:29:71:4F:97:A5:3F:69:A4:08:41:F2:80:5D:91:9F:CA:C5:17:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/29714F97A53F69A40841F2805D919FCAC517F546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29714F97A53F69A40841F2805D919FCAC517F546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:349c::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:d0:4d:2f:88:f5:5e:7f:ea:82:16:fa:b8:75:69:78:c5:75:
         94:63:11:f7:ea:5c:3e:58:a5:b6:5c:21:ca:a2:a9:d6:2c:c9:
         d7:94:02:45:20:c2:31:cd:91:d8:4b:4c:63:d1:c7:ad:8e:40:
         f5:2f:d5:35:1b:b8:95:07:e3:4e:3d:c5:cd:19:41:06:24:fb:
         46:bb:33:b5:77:2e:48:5a:7d:31:a3:56:3a:cd:9b:e9:e6:2d:
         21:b7:d9:c1:b1:36:a5:92:9a:a1:a2:ef:6f:82:8f:47:fd:e1:
         2e:80:54:a4:3f:c4:34:e9:ec:84:1c:d3:52:f5:74:ac:9b:c4:
         fc:7f:0b:ea:f5:1b:d4:a6:06:05:d9:b2:17:c9:f8:6f:c1:6d:
         3d:2a:c9:cd:48:e4:85:14:f4:8e:2e:db:24:e6:ff:7b:17:7a:
         ef:9f:c1:f9:fe:f1:00:c7:b8:a7:d7:71:3f:5c:23:85:71:5d:
         e2:95:ff:95:d4:69:52:a5:32:f3:6e:14:9f:d2:30:ac:f1:7b:
         aa:fb:06:10:68:b4:0e:08:55:b1:df:1e:3e:20:98:fe:61:b5:
         dd:62:a3:43:bb:e3:38:e6:3b:a4:98:51:f3:d1:53:84:9f:db:
         af:bc:77:21:e9:f8:55:bf:84:45:b7:2f:a2:a2:51:36:28:04:
         e4:1c:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:12 2025 by rpki-client