This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa
File:                     323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa (raw, json)
Hash identifier:          3TtQCBObhCqQUVM6gi6dMXwDktIwJXskTVotNeR28yA=
Subject key identifier:   EF:DC:3D:59:7F:22:CF:06:91:84:12:A3:4D:13:F3:D2:9B:46:CF:53
Certificate issuer:       /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Certificate serial:       061F042D9D0EAC98548DDF2AE8C0883ACE208B69
Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa
Signing time:             Wed 17 Dec 2025 03:35:52 +0000
ROA not before:           Wed 17 Dec 2025 03:30:52 +0000
ROA not after:            Wed 16 Dec 2026 03:35:52 +0000
asID:                     268707
IP address blocks:        2804:5984:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 19:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1f:04:2d:9d:0e:ac:98:54:8d:df:2a:e8:c0:88:3a:ce:20:8b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
        Validity
            Not Before: Dec 17 03:30:52 2025 GMT
            Not After : Dec 16 03:35:52 2026 GMT
        Subject: CN=EFDC3D597F22CF06918412A34D13F3D29B46CF53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:35:0b:0e:a0:46:90:8e:d7:93:21:94:81:
                    23:09:48:04:4c:3e:35:46:cf:ac:9c:95:9e:70:2b:
                    dd:a0:14:ed:ec:a0:88:5f:24:1a:39:21:b0:7a:65:
                    e7:26:f5:1d:93:a0:e8:30:ba:22:d5:00:e4:9e:be:
                    14:fc:f7:3b:85:72:0c:fc:72:b1:4f:1d:65:0a:9d:
                    16:57:a4:e2:d8:42:c5:94:79:03:59:cf:95:99:00:
                    16:b3:08:a2:c8:be:23:ee:de:38:2d:0b:3e:3f:20:
                    61:89:64:3f:fe:92:96:ff:3c:62:9d:81:c8:52:f5:
                    a9:3e:38:f4:6a:c2:0b:ad:b2:97:3b:e0:ee:03:41:
                    80:fb:13:df:5e:53:50:12:dd:27:18:ac:dd:31:0f:
                    9a:98:d9:aa:a4:99:11:f5:e9:00:21:45:75:1c:8a:
                    d2:f0:6d:d1:e5:8b:22:46:e1:75:d8:3f:65:49:f3:
                    c5:f5:2a:3f:d6:e9:52:5a:17:5a:da:60:7a:8c:55:
                    fa:1b:a0:b9:17:9b:bd:c9:af:ca:7a:95:37:a9:31:
                    33:3a:db:76:c0:fe:f2:c9:64:bc:f8:fb:b8:2c:f8:
                    04:22:f3:4b:82:04:4e:c0:3d:d1:be:7d:09:b3:20:
                    01:21:62:96:96:76:12:fe:ff:8d:c3:d4:05:91:19:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DC:3D:59:7F:22:CF:06:91:84:12:A3:4D:13:F3:D2:9B:46:CF:53
            X509v3 Authority Key Identifier:
                keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         46:77:b8:e4:04:67:8d:25:63:37:9c:6a:db:b5:60:d4:a4:df:
         48:9e:c3:3a:df:a1:25:46:e3:59:1e:93:1b:b1:f6:ca:df:5f:
         ce:2e:3b:04:c7:6d:2d:fd:1a:82:75:bf:48:10:80:29:ac:55:
         c9:96:24:09:06:04:3b:4a:05:9a:29:1d:50:e1:80:59:14:b5:
         a0:db:f7:50:b3:35:54:f7:f0:5f:d0:4a:7a:a5:b8:4e:7a:20:
         a8:47:95:d3:b8:b7:13:49:bd:af:15:09:9a:26:0d:81:07:e7:
         57:13:b4:c6:2e:ec:31:1f:94:d8:74:d7:45:3a:65:0b:08:0e:
         7a:14:45:6e:65:c9:9a:c4:82:28:84:99:8a:d8:b4:a7:70:61:
         cd:76:94:50:dd:9b:10:7b:d1:06:c4:81:e2:04:25:00:3d:7d:
         22:17:e3:ab:d3:3d:ec:47:17:30:70:8e:d8:f9:09:c2:d7:66:
         2e:81:fe:54:fb:77:63:12:e7:0f:82:8d:4a:c0:3c:10:42:4f:
         45:df:a4:c6:17:c1:a7:9e:25:f8:ec:62:58:47:b0:8b:6e:f2:
         c2:e0:c6:15:ae:11:ca:96:2d:c6:cd:a1:da:9b:46:7d:17:de:
         93:ae:16:00:24:b7:78:d8:3c:ac:d4:d6:8d:4f:9a:6b:56:90:
         82:e9:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:03:12 2025 by rpki-client