This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33332d3333203d3e203532383631.roa
File:                     323830343a3762633a3a2f33332d3333203d3e203532383631.roa (raw, json)
Hash identifier:          wz4sgxBf/FQKoOURlf57vBwH8PIOaRsSND+EmVxUGHg=
Subject key identifier:   CE:54:80:1F:8D:6C:26:8B:0B:F6:75:0A:65:5C:9B:A4:C0:A4:62:54
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       39C3A8EF3BBFDAD8E16073C6A3B2388A41D67401
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33332d3333203d3e203532383631.roa
Signing time:             Tue 25 Nov 2025 14:46:54 +0000
ROA not before:           Tue 25 Nov 2025 14:41:54 +0000
ROA not after:            Tue 24 Nov 2026 14:46:54 +0000
asID:                     52861
IP address blocks:        2804:7bc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 21:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c3:a8:ef:3b:bf:da:d8:e1:60:73:c6:a3:b2:38:8a:41:d6:74:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Nov 25 14:41:54 2025 GMT
            Not After : Nov 24 14:46:54 2026 GMT
        Subject: CN=CE54801F8D6C268B0BF6750A655C9BA4C0A46254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:6d:8a:58:4d:3e:9c:47:57:6c:88:0d:53:
                    17:10:84:6e:cb:b3:ec:45:ca:42:40:e5:a1:53:90:
                    55:e6:9e:d5:ce:6d:5c:26:6d:dc:27:dd:f8:08:50:
                    19:eb:91:ed:4b:bf:f6:6f:08:7d:00:44:17:d2:4f:
                    35:ac:c2:5e:ea:18:e2:3d:42:41:c1:8a:28:7f:88:
                    7f:82:31:60:ef:ea:a7:14:55:c1:62:90:d6:85:f8:
                    70:91:18:99:7a:ec:8d:4b:1e:e6:b9:eb:f9:ad:24:
                    82:a9:26:31:4d:ac:3a:06:fc:75:f7:62:03:8f:e8:
                    22:e0:90:d5:50:a9:32:ba:99:63:f2:71:3a:33:e5:
                    fd:dc:2b:65:34:02:91:bf:38:40:7b:78:d8:ef:27:
                    7a:67:15:86:f2:90:fa:15:64:1f:47:aa:46:da:72:
                    6b:8d:97:4f:77:49:70:38:e6:fe:20:a5:59:13:89:
                    e6:30:15:51:29:a2:a5:a4:32:6c:c4:72:6d:bc:c8:
                    36:8a:2e:28:03:5a:25:ef:72:8d:e9:a6:3b:1b:d1:
                    64:92:19:39:c4:a8:0f:7c:2e:1a:dd:ad:35:9a:53:
                    15:ca:bf:f8:69:92:57:fa:d7:60:29:ed:1a:10:f7:
                    12:91:bc:c0:33:29:f7:9b:de:1b:b1:88:b4:7e:aa:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:54:80:1F:8D:6C:26:8B:0B:F6:75:0A:65:5C:9B:A4:C0:A4:62:54
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33332d3333203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:20:7a:8e:0d:e8:d2:9f:65:ad:7b:e3:65:41:d4:7d:e9:cf:
         6c:cd:8d:3c:5c:07:73:c6:a1:0f:e7:c3:f7:85:74:89:26:7d:
         70:b6:c7:01:89:bf:f0:1f:55:13:58:d4:ae:63:3a:25:66:bf:
         7c:d2:ab:c9:b8:a9:28:79:bd:f6:40:8b:7a:d9:da:5f:7f:f1:
         97:f0:8d:19:4d:8c:e1:be:45:ef:09:1b:a7:2c:49:9e:05:20:
         12:48:d4:f1:ee:52:36:2d:23:bf:3d:f1:90:3b:35:44:a5:0a:
         08:bd:e5:83:18:9c:8f:4e:73:8a:4d:7b:c6:b3:2e:4d:77:f3:
         13:a6:e3:14:4a:97:c6:54:ab:77:33:25:0f:96:28:cf:c6:78:
         45:38:af:13:9e:87:9a:18:be:57:35:3b:ba:08:07:ac:a5:37:
         75:52:e6:67:ca:c1:94:0f:43:44:d3:bf:6b:90:c0:57:a2:ba:
         15:e7:2a:80:7d:26:db:0e:c2:26:87:2f:04:38:a4:d1:7d:fb:
         b6:09:77:af:44:1e:ef:60:06:f3:5e:93:e3:2d:76:7b:ae:16:
         a3:bb:c3:4e:c9:f9:23:2c:ce:8c:2b:6b:93:9a:8f:8b:42:dc:
         36:ec:b1:aa:6c:ec:98:8a:a2:b6:8f:b3:fa:db:6a:6a:b6:af:
         a5:5c:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:08 2025 by rpki-client