This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030303a3a2f33362d3336203d3e20323638373037.roa
File:                     323830343a353938343a623030303a3a2f33362d3336203d3e20323638373037.roa (raw, json)
Hash identifier:          4BDrTRk1UtCHoemUAIh6vrDCYH2pVwftfZ9H9RqodAE=
Subject key identifier:   66:F4:B2:20:C0:B5:28:B2:19:A1:04:CF:AE:35:85:81:6D:D3:19:96
Certificate issuer:       /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Certificate serial:       5F40FC3BE8F7675A8547D64A674C45DB03AC10C1
Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030303a3a2f33362d3336203d3e20323638373037.roa
Signing time:             Wed 17 Dec 2025 03:36:07 +0000
ROA not before:           Wed 17 Dec 2025 03:31:07 +0000
ROA not after:            Wed 16 Dec 2026 03:36:07 +0000
asID:                     268707
IP address blocks:        2804:5984:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 19:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:40:fc:3b:e8:f7:67:5a:85:47:d6:4a:67:4c:45:db:03:ac:10:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
        Validity
            Not Before: Dec 17 03:31:07 2025 GMT
            Not After : Dec 16 03:36:07 2026 GMT
        Subject: CN=66F4B220C0B528B219A104CFAE3585816DD31996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:2f:b9:87:6f:de:49:bd:0b:5f:8c:3e:01:
                    5e:01:02:49:91:6e:5e:36:ae:dc:a3:d3:e3:49:bc:
                    bb:bc:83:38:67:a6:66:ca:1b:7f:58:ac:25:54:5e:
                    82:b8:cd:02:88:07:55:14:b2:b4:6b:a0:c7:59:2f:
                    64:50:b4:ad:90:11:38:f8:2d:90:f1:5b:29:d1:1d:
                    09:94:67:a4:c1:8f:d2:2f:65:00:57:88:f3:8e:58:
                    17:54:35:0c:33:f5:5b:09:de:94:01:21:99:99:06:
                    00:3e:44:17:3e:99:d6:c3:59:de:b6:fe:22:34:67:
                    c2:1c:9a:09:0d:3f:ee:b8:1d:f9:dd:1b:30:d9:02:
                    71:e4:ac:4f:c3:0d:18:0f:30:9d:38:b7:cf:9e:e1:
                    29:57:71:32:6c:45:07:e2:d6:1f:fa:31:89:59:a1:
                    4a:21:53:52:fe:a7:1f:02:66:1d:97:ad:bc:2c:d3:
                    1b:3f:5f:9f:26:f9:dd:29:67:b9:c0:d3:57:1e:6d:
                    17:13:7b:bf:2c:3d:09:60:9c:63:ab:19:c5:8a:65:
                    5c:74:bf:f1:c5:47:57:0b:40:5b:a0:71:f1:56:5f:
                    32:48:42:76:d0:31:bb:d7:0d:f7:9d:f3:cb:65:1f:
                    a6:c7:2e:16:0b:15:04:7c:4c:5c:14:fd:6e:ab:65:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F4:B2:20:C0:B5:28:B2:19:A1:04:CF:AE:35:85:81:6D:D3:19:96
            X509v3 Authority Key Identifier:
                keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623030303a3a2f33362d3336203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:41:27:93:c1:a4:3a:85:9c:e2:9f:de:d3:e4:77:9a:6a:e1:
         c0:8b:b9:b2:4b:55:4c:02:80:5a:a2:dd:ef:d9:9d:2f:3a:eb:
         da:d6:e0:b1:55:1b:07:16:9a:89:df:57:fb:66:b9:bf:78:10:
         7a:7b:13:8f:c7:86:61:ad:07:3a:56:f2:73:21:e6:00:e4:37:
         c6:81:fc:33:b9:0a:93:02:ef:36:54:8b:87:fa:4d:c9:47:cb:
         16:f7:00:7b:f0:c1:fd:21:74:e1:2b:de:87:41:51:08:39:eb:
         16:ab:10:5f:e4:76:70:3a:b9:e1:07:15:9c:22:d7:51:66:fa:
         cb:b8:74:ad:bf:41:e9:ee:43:b1:b4:61:c1:41:d2:f6:44:6c:
         e5:93:0c:8f:96:06:2d:fa:e8:fe:a3:b4:6b:97:2d:2f:89:ce:
         2e:30:6f:6f:fc:a3:fd:83:c3:1d:3c:6b:df:28:af:92:bb:7e:
         85:d9:40:1f:11:b9:45:0b:fc:7b:87:1a:3a:d2:40:73:f1:8c:
         d6:25:6e:3c:94:d4:d6:04:b1:e2:d4:d4:24:f9:6f:bb:d5:64:
         53:48:56:af:e7:4d:88:27:d3:8f:4f:8b:0d:3e:14:74:27:8c:
         74:09:2c:00:34:58:a6:2a:0d:a7:9e:22:61:98:bb:d2:33:3d:
         d3:e9:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:03:13 2025 by rpki-client