This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a613030303a3a2f33362d3336203d3e20323638373037.roa
File:                     323830343a353938343a613030303a3a2f33362d3336203d3e20323638373037.roa (raw, json)
Hash identifier:          a/8evfASj5iA2ohWVzmycLw92ac0iIWShBb+VXpjQjo=
Subject key identifier:   51:32:71:9A:F3:46:48:EA:BA:0B:38:6D:C6:CA:38:8F:63:B7:31:A6
Certificate issuer:       /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Certificate serial:       38C4C4105E2923E4ADCACF5B8F0CCB88C7B49236
Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a613030303a3a2f33362d3336203d3e20323638373037.roa
Signing time:             Wed 17 Dec 2025 03:36:08 +0000
ROA not before:           Wed 17 Dec 2025 03:31:08 +0000
ROA not after:            Wed 16 Dec 2026 03:36:08 +0000
asID:                     268707
IP address blocks:        2804:5984:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 19:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c4:c4:10:5e:29:23:e4:ad:ca:cf:5b:8f:0c:cb:88:c7:b4:92:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
        Validity
            Not Before: Dec 17 03:31:08 2025 GMT
            Not After : Dec 16 03:36:08 2026 GMT
        Subject: CN=5132719AF34648EABA0B386DC6CA388F63B731A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2c:00:0f:2e:04:b2:d5:a0:9c:df:f5:67:55:
                    8d:d8:53:22:1f:87:0a:56:7a:3d:6f:6b:94:58:fe:
                    16:aa:ab:d8:95:c9:b7:6b:7a:fe:bb:31:a3:e7:18:
                    41:be:14:36:8c:37:65:e5:5d:3b:31:60:0b:f9:c5:
                    c5:7d:0f:b1:a4:da:c5:42:e0:07:9a:f4:60:33:5c:
                    81:cb:32:02:ed:a8:c2:91:0c:4f:7a:2e:f7:19:1b:
                    1b:56:ae:8a:8f:d4:d4:56:97:75:90:fa:10:ec:c5:
                    9d:a5:4c:86:c3:6a:ec:60:69:62:cf:44:0d:5b:7d:
                    f4:87:55:3d:71:04:07:28:5f:48:6c:cd:f4:4a:ee:
                    bd:7c:27:76:a6:7f:20:6f:68:5d:5e:cc:dc:b6:33:
                    b6:db:a3:f1:ae:c5:44:67:26:0d:da:49:89:92:6e:
                    68:0e:0f:f3:39:4a:a0:3c:0c:7d:3f:ca:3c:b5:98:
                    fa:54:4d:0c:ad:79:2c:52:9c:54:df:c5:81:ac:8e:
                    46:97:61:3a:d6:47:e3:11:3c:37:31:08:28:05:e9:
                    4f:ae:9a:f8:60:58:ba:21:53:5b:4f:96:a5:4b:6f:
                    3f:50:f8:86:a6:1b:21:42:07:62:f4:90:1f:06:bf:
                    a1:4b:40:7e:04:03:f9:8e:2f:76:f4:bf:75:00:8e:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:32:71:9A:F3:46:48:EA:BA:0B:38:6D:C6:CA:38:8F:63:B7:31:A6
            X509v3 Authority Key Identifier:
                keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a613030303a3a2f33362d3336203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:a5:da:d2:c7:05:8e:e2:d4:51:63:16:ef:8c:45:bb:8f:80:
         7e:7c:be:d1:cc:72:8c:7c:39:95:5a:79:0c:40:b7:82:8a:ba:
         71:d8:09:55:32:95:c9:d6:78:5f:72:3e:26:a9:4a:b8:46:81:
         23:0d:6b:fc:6e:40:96:55:9f:fc:e8:e2:c1:2a:7d:83:eb:85:
         4c:c8:46:da:fe:97:10:a5:c8:78:a6:d5:96:b5:2e:d2:5f:1e:
         0b:69:be:54:fe:c8:53:ca:9c:a5:7a:0c:5f:05:9d:cf:aa:19:
         28:80:74:b1:69:62:89:5d:0f:42:ab:bf:70:93:78:a2:08:6a:
         fd:a4:a5:3a:8c:e6:0d:6a:8b:22:b8:44:19:c4:ff:c5:44:69:
         82:f1:c6:16:ba:3a:2e:41:94:e9:8a:02:ed:28:b3:41:45:82:
         59:07:26:d6:14:8e:01:b8:04:60:49:fd:49:42:2b:65:f7:ce:
         fc:54:8c:9c:49:c2:80:7e:25:b1:70:71:f0:68:1f:ea:90:e1:
         6e:c6:73:98:07:2f:e9:52:5e:bb:31:c7:f4:fc:1c:d1:3a:86:
         5d:f2:ec:5b:72:55:bd:10:6e:b4:aa:27:6b:7e:1e:e2:27:0b:
         ed:03:7c:18:01:03:02:2a:12:da:2d:54:9a:89:bc:fd:62:02:
         bb:75:4a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:03:13 2025 by rpki-client