This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
File:                     323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa (raw, json)
Hash identifier:          zcuCeJNorCex2GLHTx3PQVeSi8tGxaopvtIc2It2tQE=
Subject key identifier:   30:8E:12:37:56:C4:FB:0F:06:CB:DC:BA:3C:10:C1:B4:59:54:61:28
Certificate issuer:       /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Certificate serial:       77662F6D88D205724DCA59ABFEEF2E3BF4A192B3
Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
Signing time:             Wed 17 Dec 2025 03:35:49 +0000
ROA not before:           Wed 17 Dec 2025 03:30:49 +0000
ROA not after:            Wed 16 Dec 2026 03:35:49 +0000
asID:                     268707
IP address blocks:        2804:5984:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 23:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:66:2f:6d:88:d2:05:72:4d:ca:59:ab:fe:ef:2e:3b:f4:a1:92:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
        Validity
            Not Before: Dec 17 03:30:49 2025 GMT
            Not After : Dec 16 03:35:49 2026 GMT
        Subject: CN=308E123756C4FB0F06CBDCBA3C10C1B459546128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:1a:99:5f:dd:4a:c5:9a:c3:13:55:ea:81:
                    0e:15:f1:0d:d7:1a:bc:88:2c:34:3c:7a:39:10:c1:
                    9d:52:0c:71:3e:d6:9c:65:52:13:20:4a:a3:9a:89:
                    f4:36:58:c7:48:39:8c:bd:67:4e:d0:88:f7:05:fc:
                    da:18:74:d8:36:ff:56:70:d2:46:59:cc:1a:f5:ca:
                    9e:11:65:9a:b7:99:bb:f9:7b:f4:d7:b3:61:b6:40:
                    23:5d:6b:7c:2d:01:c9:81:b6:9e:91:d1:5b:ee:fe:
                    cd:ac:2f:13:a0:2e:6a:e5:3a:9d:46:81:29:d5:84:
                    1b:e7:95:01:43:a7:d8:e5:75:3d:14:69:e6:ae:76:
                    da:dc:f7:39:d7:57:48:9a:e6:bb:3a:f1:84:30:d8:
                    6c:19:55:5d:be:bb:32:12:08:8f:e4:19:a7:25:2f:
                    d5:be:48:8a:2a:0a:02:5a:90:b5:df:8f:d6:a1:c2:
                    e2:34:6a:fd:45:98:3a:52:90:0d:18:46:ef:d0:fd:
                    4b:76:22:f1:54:fa:a0:57:1a:58:e6:2a:58:5a:7a:
                    2e:de:ec:04:a5:61:d4:d6:65:1d:77:30:bc:91:6a:
                    26:fb:5b:e4:84:1a:45:88:cc:09:73:40:be:9c:a1:
                    65:02:e3:e1:e6:51:11:c0:26:0e:45:74:bd:f0:22:
                    d4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8E:12:37:56:C4:FB:0F:06:CB:DC:BA:3C:10:C1:B4:59:54:61:28
            X509v3 Authority Key Identifier:
                keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:ca:dd:2d:af:0e:5b:f6:d1:3a:36:36:7a:e1:fb:83:06:f5:
         dd:d8:3f:27:d3:d0:cd:41:f7:44:96:bc:9e:2f:0f:c3:9e:5f:
         b1:de:13:47:58:2b:da:12:6f:39:25:0b:4e:95:8c:22:7c:71:
         af:4f:56:2d:84:59:22:26:60:57:b4:63:15:aa:db:d4:a5:e3:
         ca:7e:c3:ce:bb:58:2a:4e:99:14:71:79:a1:ec:c4:9f:79:1b:
         2f:f5:2f:a5:55:75:2e:2b:03:9a:cd:31:53:c8:7d:3b:60:aa:
         32:4f:2d:ee:4f:7c:55:09:3c:f4:94:05:0c:b3:87:0a:05:13:
         90:6d:2f:51:8e:cd:ef:47:f5:15:6f:21:21:a9:39:7d:49:0f:
         83:66:d1:75:9d:16:e6:a7:e5:fc:d7:fb:b7:58:cb:98:31:83:
         c0:f1:d6:35:e0:ae:85:c9:d1:3a:b1:fa:60:cc:39:eb:83:06:
         24:34:3f:49:b0:59:5f:22:c5:69:a1:e5:cd:1e:68:b5:02:19:
         aa:af:56:fe:ec:b1:98:af:3c:6c:94:a7:d1:cb:00:b5:d8:09:
         76:03:1b:1e:bf:d8:9f:43:82:71:78:df:22:89:38:e0:d8:11:
         80:db:65:42:30:e9:74:d8:21:2e:80:3f:b1:be:7c:64:c3:3d:
         f4:d8:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:05:37 2025 by rpki-client