This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/323830313a38303a3336303a3a2f34382d3438203d3e20323632363535.roa
File:                     323830313a38303a3336303a3a2f34382d3438203d3e20323632363535.roa (raw, json)
Hash identifier:          cih6Ckki3Mbejg9zcJhZnnjD90X9aPLw0ENb+1uP0I8=
Subject key identifier:   65:65:4D:18:E5:12:BC:7C:95:CF:1F:19:68:E7:59:85:25:E5:99:27
Certificate issuer:       /CN=7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6
Certificate serial:       7286483C2B39746D427826751868DD9D8D65BE
Authority key identifier: 7A:44:42:6C:B5:48:DB:76:94:BB:AC:8B:36:1B:5D:7C:13:EC:9B:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/323830313a38303a3336303a3a2f34382d3438203d3e20323632363535.roa
Signing time:             Fri 14 Nov 2025 13:11:46 +0000
ROA not before:           Fri 14 Nov 2025 13:06:46 +0000
ROA not after:            Fri 13 Nov 2026 13:11:46 +0000
asID:                     262655
IP address blocks:        2801:80:360::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.crl
                          rsync://rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:86:48:3c:2b:39:74:6d:42:78:26:75:18:68:dd:9d:8d:65:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6
        Validity
            Not Before: Nov 14 13:06:46 2025 GMT
            Not After : Nov 13 13:11:46 2026 GMT
        Subject: CN=65654D18E512BC7C95CF1F1968E7598525E59927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:88:10:85:cb:f2:f0:d8:ca:bb:2a:08:d1:
                    83:ed:a2:29:98:07:d6:2e:4c:e0:11:3d:93:4c:a3:
                    f9:6c:b5:a9:39:4f:18:81:14:b9:1b:31:2d:46:2c:
                    76:62:47:35:5e:7d:ce:9e:c2:55:65:21:14:6a:e0:
                    e3:36:5a:b2:51:fd:d2:f2:17:77:3f:6c:ef:d0:f1:
                    dd:b5:90:cd:51:a6:95:30:b4:6e:52:7b:82:d3:eb:
                    4d:34:3a:9d:ec:e6:49:4d:8e:af:39:ea:aa:64:96:
                    c4:c6:11:d2:53:75:08:01:35:af:7c:f9:32:65:7c:
                    db:87:44:a0:5a:02:09:b7:db:c0:cf:07:52:9b:a9:
                    91:ad:e5:d8:22:fb:47:cd:10:94:a1:83:4a:94:29:
                    98:01:84:50:a3:ca:86:d9:45:87:5e:a0:14:89:91:
                    51:1f:01:71:f2:ca:1d:40:f7:e1:10:6c:7b:bf:31:
                    e5:95:17:c2:92:c5:1e:83:08:fb:40:99:7b:b1:29:
                    4c:54:83:e4:f0:c6:37:e0:7f:9b:5f:cc:d8:7c:e2:
                    97:06:9a:68:0c:cd:b5:c4:5f:a2:aa:17:23:60:b7:
                    58:06:eb:d4:e3:e8:55:ff:af:de:6d:24:93:6c:7d:
                    b2:54:3b:8a:a9:db:93:b2:73:ac:ee:dc:70:63:cf:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:65:4D:18:E5:12:BC:7C:95:CF:1F:19:68:E7:59:85:25:E5:99:27
            X509v3 Authority Key Identifier:
                keyid:7A:44:42:6C:B5:48:DB:76:94:BB:AC:8B:36:1B:5D:7C:13:EC:9B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/323830313a38303a3336303a3a2f34382d3438203d3e20323632363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:360::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:a2:57:4f:73:ec:01:ec:6c:83:11:6d:1b:cc:6f:d5:b2:
         74:95:75:65:32:24:b8:be:4a:09:e9:ab:13:59:ea:8f:07:e8:
         84:79:4d:4f:5b:71:bd:dd:73:0e:da:20:81:85:4d:2d:40:5e:
         2d:2d:e7:4e:17:83:72:65:25:1b:2e:02:d4:3e:1f:e4:03:a4:
         2d:dd:cd:e2:cc:2d:33:ca:ae:23:31:13:37:43:35:e4:8c:09:
         1f:b1:d0:87:24:4c:76:a7:e0:97:f2:be:20:5a:e6:1d:da:d4:
         c8:6f:ca:0f:02:7b:ae:b6:95:f3:79:60:39:76:08:bc:ff:61:
         47:f3:2a:49:4d:12:ad:c8:2c:9e:10:ac:0a:14:b5:26:fd:6f:
         75:48:ca:bb:b8:33:01:68:97:e2:f7:e5:aa:df:84:f1:01:24:
         09:23:5c:c5:15:30:f2:82:39:76:a3:b2:ea:4d:c0:ed:1b:ab:
         75:2a:93:c7:b1:0b:90:34:e3:b5:27:14:cd:ed:4d:3a:a9:a8:
         b2:92:3b:aa:b9:1a:ae:b0:4a:70:b9:15:cb:6b:c8:42:cf:e8:
         9f:1a:2e:84:d9:e5:41:8c:42:f7:fd:c6:1a:b1:ac:d3:e4:db:
         ac:8d:ab:b9:8f:d2:88:bf:39:91:79:df:1c:0a:60:c1:ab:9a:
         be:84:8c:2d
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgITcoZIPCs5dG1CeCZ1GGjdnY1lvjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg3QTQ0NDI2Q0I1NDhEQjc2OTRCQkFDOEIzNjFCNUQ3QzEz
RUM5QkI2MB4XDTI1MTExNDEzMDY0NloXDTI2MTExMzEzMTE0NlowMzExMC8GA1UE
AxMoNjU2NTREMThFNTEyQkM3Qzk1Q0YxRjE5NjhFNzU5ODUyNUU1OTkyNzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJXiBCFy/Lw2Mq7KgjRg+2iKZgH
1i5M4BE9k0yj+Wy1qTlPGIEUuRsxLUYsdmJHNV59zp7CVWUhFGrg4zZaslH90vIX
dz9s79Dx3bWQzVGmlTC0blJ7gtPrTTQ6nezmSU2OrznqqmSWxMYR0lN1CAE1r3z5
MmV824dEoFoCCbfbwM8HUpupka3l2CL7R80QlKGDSpQpmAGEUKPKhtlFh16gFImR
UR8BcfLKHUD34RBse78x5ZUXwpLFHoMI+0CZe7EpTFSD5PDGN+B/m1/M2Hzilwaa
aAzNtcRfoqoXI2C3WAbr1OPoVf+v3m0kk2x9slQ7iqnbk7JzrO7ccGPP8FMCAwEA
AaOCAlYwggJSMB0GA1UdDgQWBBRlZU0Y5RK8fJXPHxlo51mFJeWZJzAfBgNVHSME
GDAWgBR6REJstUjbdpS7rIs2G118E+ybtjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BeGQzTHdTSEJnblQ2d0M0N2g5Y292RGYxb296Tk1ES0hMM1JCSHkxS0Vt
Si8wLzdBNDQ0MjZDQjU0OERCNzY5NEJCQUM4QjM2MUI1RDdDMTNFQzlCQjYuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvN0E0NDQyNkNCNTQ4REI3Njk0
QkJBQzhCMzYxQjVEN0MxM0VDOUJCNi5jZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGd
BggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXhkM0x3U0hCZ25UNndDNDdoOWNvdkRmMW9vek5NREtITDNSQkh5MUtFbUovMC8z
MjM4MzAzMTNhMzgzMDNhMzMzNjMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
NjMyMzYzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKAEAgANgMA0GCSqGSIb3DQEBCwUAA4IBAQA0
aqJXT3PsAexsgxFtG8xv1bJ0lXVlMiS4vkoJ6asTWeqPB+iEeU1PW3G93XMO2iCB
hU0tQF4tLedOF4NyZSUbLgLUPh/kA6Qt3c3izC0zyq4jMRM3QzXkjAkfsdCHJEx2
p+CX8r4gWuYd2tTIb8oPAnuutpXzeWA5dgi8/2FH8ypJTRKtyCyeEKwKFLUm/W91
SMq7uDMBaJfi9+Wq34TxASQJI1zFFTDygjl2o7LqTcDtG6t1KpPHsQuQNOO1JxTN
7U06qaiykjuquRqusEpwuRXLa8hCz+ifGi6E2eVBjEL3/cYasazT5Nusjau5j9KI
vzmRed8cCmDBq5q+hIwt
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:55 2025 by rpki-client