This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33332d3333203d3e20323734373131.roa
File:                     323830343a393237303a3a2f33332d3333203d3e20323734373131.roa (raw, json)
Hash identifier:          tp772olfNjrq4COFTFmNQUdPYvdSUEWMzZ2cXTT9EhI=
Subject key identifier:   D9:43:ED:FF:1A:BA:67:21:2E:53:80:B9:CE:68:A9:79:42:34:F7:ED
Certificate issuer:       /CN=1932081613DBF095CDDA29001B59601F881F5568
Certificate serial:       3F7A9091F772EA939451B904F789443237A35004
Authority key identifier: 19:32:08:16:13:DB:F0:95:CD:DA:29:00:1B:59:60:1F:88:1F:55:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1932081613DBF095CDDA29001B59601F881F5568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33332d3333203d3e20323734373131.roa
Signing time:             Tue 25 Nov 2025 11:35:13 +0000
ROA not before:           Tue 25 Nov 2025 11:30:13 +0000
ROA not after:            Tue 24 Nov 2026 11:35:13 +0000
asID:                     274711
IP address blocks:        2804:9270::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/1932081613DBF095CDDA29001B59601F881F5568.crl
                          rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/1932081613DBF095CDDA29001B59601F881F5568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1932081613DBF095CDDA29001B59601F881F5568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7a:90:91:f7:72:ea:93:94:51:b9:04:f7:89:44:32:37:a3:50:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1932081613DBF095CDDA29001B59601F881F5568
        Validity
            Not Before: Nov 25 11:30:13 2025 GMT
            Not After : Nov 24 11:35:13 2026 GMT
        Subject: CN=D943EDFF1ABA67212E5380B9CE68A9794234F7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:5d:89:28:9a:b2:51:12:ea:64:f5:c7:b1:
                    6c:fd:95:dc:1e:59:55:ad:55:cb:1c:73:d8:2c:4c:
                    8e:24:2d:b3:b6:35:ed:23:24:5c:19:37:03:91:57:
                    b4:56:c0:00:35:d8:47:5e:af:ae:2c:e6:7b:78:96:
                    fe:78:1b:81:45:e1:d9:3c:04:a8:34:26:cc:e1:08:
                    af:ab:0d:1c:14:51:fb:51:e4:41:0e:38:1c:14:13:
                    11:6d:ff:4a:ac:f5:a6:37:41:96:60:0f:45:94:40:
                    83:f6:02:f5:2b:b1:37:ca:0e:06:3a:f2:bb:01:21:
                    59:7d:3e:48:21:28:b9:9f:e6:43:8c:5a:a0:2f:1e:
                    e4:0b:66:53:33:ee:09:68:4b:65:34:b7:1e:20:fa:
                    5e:2e:a8:d3:5b:31:60:d8:04:96:6c:f4:db:4e:57:
                    05:3b:91:77:3a:01:1c:c8:60:ac:61:22:7c:46:a1:
                    51:d2:dc:b8:a8:98:e5:00:fd:d8:04:8b:61:2b:d3:
                    a8:af:42:df:19:3a:8a:16:80:39:1f:7f:05:4e:c7:
                    18:e3:54:02:f4:d9:32:75:14:4a:c2:e6:ab:a0:b7:
                    07:f6:d3:43:30:83:88:03:8f:a4:3f:1c:60:f5:15:
                    03:43:d3:30:b9:97:f3:c4:b1:26:ca:00:b4:c5:c6:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:ED:FF:1A:BA:67:21:2E:53:80:B9:CE:68:A9:79:42:34:F7:ED
            X509v3 Authority Key Identifier:
                keyid:19:32:08:16:13:DB:F0:95:CD:DA:29:00:1B:59:60:1F:88:1F:55:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/1932081613DBF095CDDA29001B59601F881F5568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1932081613DBF095CDDA29001B59601F881F5568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33332d3333203d3e20323734373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9270::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:72:86:39:81:9c:71:08:fc:d3:3a:20:ca:3d:35:05:f5:aa:
         c7:11:dd:87:f2:64:1e:9e:c6:79:b3:f3:07:5e:17:80:5b:96:
         a2:a4:17:de:b8:26:59:0d:16:a5:bc:0b:0c:98:0f:a5:99:5d:
         bc:cd:fa:01:05:b1:97:28:e9:07:5d:32:6e:43:6e:10:8c:1e:
         51:2c:b3:a2:f9:f1:10:66:e7:74:78:25:85:96:90:ae:82:ff:
         99:37:21:1c:06:6a:3e:6f:b4:99:82:8d:f8:76:7f:ee:90:1d:
         9a:d6:80:a5:0c:c4:89:07:0f:25:17:70:2a:e8:19:a2:fa:01:
         8d:e0:ab:53:45:43:b4:3b:1d:e5:99:ff:b4:18:74:5c:17:21:
         9b:fc:3f:d9:e5:c9:2b:2d:21:72:57:53:43:5b:88:25:de:10:
         a8:15:97:c5:84:52:3e:8f:7b:4f:30:a7:ab:b8:32:ef:39:9b:
         88:f2:e1:4d:fd:c9:00:14:c4:c8:5c:98:04:f5:c4:5d:da:d0:
         dc:c8:45:b3:1e:72:fb:d9:12:f9:ef:15:c3:ed:c7:0f:8a:9b:
         f6:c5:37:f4:ad:9f:f6:98:01:b5:31:83:9d:0c:12:4c:1e:80:
         45:e8:e1:ea:a3:fb:03:fd:6a:48:b4:e1:b7:36:ba:bf:21:16:
         a4:2f:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:32:13 2025 by rpki-client