This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33322d3332203d3e20323734373131.roa
File:                     323830343a393237303a3a2f33322d3332203d3e20323734373131.roa (raw, json)
Hash identifier:          HCieFsH+c2cz73rXTUYGesyfU3JJBnR5j4WX73iNTk8=
Subject key identifier:   29:C0:CF:DE:0D:5C:02:64:B1:EE:EA:54:B9:66:AB:85:F8:58:FF:27
Certificate issuer:       /CN=1932081613DBF095CDDA29001B59601F881F5568
Certificate serial:       6FD79EFF3D747A7EFE5D7295478942714BFF4CF4
Authority key identifier: 19:32:08:16:13:DB:F0:95:CD:DA:29:00:1B:59:60:1F:88:1F:55:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1932081613DBF095CDDA29001B59601F881F5568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33322d3332203d3e20323734373131.roa
Signing time:             Tue 25 Nov 2025 11:35:12 +0000
ROA not before:           Tue 25 Nov 2025 11:30:12 +0000
ROA not after:            Tue 24 Nov 2026 11:35:12 +0000
asID:                     274711
IP address blocks:        2804:9270::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/1932081613DBF095CDDA29001B59601F881F5568.crl
                          rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/1932081613DBF095CDDA29001B59601F881F5568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1932081613DBF095CDDA29001B59601F881F5568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d7:9e:ff:3d:74:7a:7e:fe:5d:72:95:47:89:42:71:4b:ff:4c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1932081613DBF095CDDA29001B59601F881F5568
        Validity
            Not Before: Nov 25 11:30:12 2025 GMT
            Not After : Nov 24 11:35:12 2026 GMT
        Subject: CN=29C0CFDE0D5C0264B1EEEA54B966AB85F858FF27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:45:7f:29:96:76:a7:26:b6:de:cc:cd:1d:
                    a0:42:81:79:4c:b6:38:83:bd:e1:04:50:43:29:14:
                    bc:0b:ea:74:df:1b:b3:1c:7d:37:82:fe:50:6c:5a:
                    84:52:93:32:04:67:9e:cc:3c:0c:38:d4:f8:1a:06:
                    e3:1f:e0:18:96:8f:0f:95:e3:f3:cc:a6:3c:86:f7:
                    b0:f5:82:0c:7d:a2:38:d7:df:14:3f:00:3e:f3:b0:
                    e4:0c:94:2c:46:09:f3:31:88:ac:56:ab:e0:5b:ca:
                    5b:ee:8d:02:97:3b:06:34:de:ae:7c:e9:1e:e6:17:
                    9b:a6:45:5e:a6:af:1e:a5:cb:40:d2:f0:e6:d1:40:
                    3e:97:fd:02:bd:cb:f9:db:27:48:5f:3d:b8:e5:b5:
                    87:86:88:54:2a:98:30:0a:b8:a9:3d:ab:75:3e:f6:
                    a4:ac:05:c6:ee:ac:2d:df:06:03:61:d4:6b:f8:11:
                    91:36:26:cc:79:f4:34:ab:29:09:07:79:e6:ec:9d:
                    df:60:5e:b3:68:fd:5d:23:a6:ea:2a:81:ab:9f:20:
                    4b:32:be:79:7a:44:55:e5:df:0f:e8:6b:0b:65:0c:
                    5f:fe:78:8c:37:0e:86:1b:98:c5:54:b7:98:ce:0a:
                    09:5a:9c:7e:79:ed:ab:ea:97:c1:53:65:74:99:40:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C0:CF:DE:0D:5C:02:64:B1:EE:EA:54:B9:66:AB:85:F8:58:FF:27
            X509v3 Authority Key Identifier:
                keyid:19:32:08:16:13:DB:F0:95:CD:DA:29:00:1B:59:60:1F:88:1F:55:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/1932081613DBF095CDDA29001B59601F881F5568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1932081613DBF095CDDA29001B59601F881F5568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33322d3332203d3e20323734373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9270::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:9b:27:1e:8d:41:6e:14:de:bf:77:6b:c1:35:d0:6f:eb:66:
         bf:8f:c5:f5:f1:b7:61:2e:6b:25:6d:c8:90:43:a3:ac:b9:46:
         1f:aa:41:e0:31:59:57:06:1e:5b:84:2f:4e:b9:26:c4:6e:4a:
         e9:85:02:ae:72:12:89:40:34:23:32:bf:21:87:1f:22:6b:08:
         1d:a5:91:b5:31:2e:2c:a0:8e:6d:d6:5c:53:f7:6a:6d:76:fb:
         29:0b:45:fc:f4:87:cd:ba:79:e8:8d:17:dc:b9:a7:61:2e:74:
         5c:97:0f:25:8e:37:55:b4:97:e4:44:1a:ed:3b:82:a2:e5:8f:
         14:fb:08:b5:e4:a6:92:14:b2:60:f8:52:14:21:95:ac:0d:78:
         25:a2:e8:62:1e:a1:e9:fa:03:4f:de:2d:3f:f3:e7:df:50:e7:
         35:cf:05:41:35:95:18:08:4b:1e:79:46:a1:bc:ef:4b:57:f6:
         f8:1d:87:a4:b8:69:2e:3d:3a:7c:09:ce:a2:57:84:dc:2a:52:
         19:f3:04:39:d8:31:db:6e:aa:63:26:01:02:05:4b:ac:02:50:
         27:94:2b:e6:20:79:3d:fd:8f:00:80:cb:6b:70:35:65:5e:41:
         99:f8:58:38:d0:e2:d7:77:0d:ec:aa:8d:cc:c6:57:7c:c1:a3:
         ca:f2:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:32:37 2025 by rpki-client