This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33322d3332203d3e20323634313431.roa
File:                     323830343a316530633a3a2f33322d3332203d3e20323634313431.roa (raw, json)
Hash identifier:          nuolm8E8ZxkcTq65Wf+reT5n5PL8WwoNTdIQZQOO7sQ=
Subject key identifier:   1C:BD:E4:D1:4F:2A:FA:A1:D4:5D:24:7C:AF:D5:E9:2C:B4:5B:1F:B9
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       5D708220C2A42D65DC9FCFE91AE6B498EB57C485
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33322d3332203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:50 +0000
ROA not before:           Thu 04 Dec 2025 20:33:50 +0000
ROA not after:            Thu 03 Dec 2026 20:38:50 +0000
asID:                     264141
IP address blocks:        2804:1e0c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:70:82:20:c2:a4:2d:65:dc:9f:cf:e9:1a:e6:b4:98:eb:57:c4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:50 2025 GMT
            Not After : Dec  3 20:38:50 2026 GMT
        Subject: CN=1CBDE4D14F2AFAA1D45D247CAFD5E92CB45B1FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:51:87:62:87:bf:d4:63:58:13:99:f8:5c:
                    1d:a0:05:a3:dd:b0:e7:5e:3e:b2:fe:f1:f4:b6:f5:
                    e2:02:bd:e4:ab:9d:9d:91:25:bd:e5:35:d5:44:e9:
                    62:8f:5f:b4:69:32:b7:1d:a0:27:7c:a7:3b:2f:77:
                    0a:35:25:f1:74:3c:0f:fe:de:16:a1:fa:3e:b3:77:
                    a1:91:b7:1e:9b:47:d9:6e:c0:1f:a7:2b:10:d4:ed:
                    26:62:ac:81:0e:e0:54:ae:c0:c0:54:97:d5:ec:88:
                    9c:0a:0d:6c:f3:93:9e:92:e3:58:8d:be:bd:84:91:
                    74:a4:bc:ef:2d:0c:5b:0f:b7:e2:98:cf:25:be:ea:
                    2f:8e:97:2c:51:cd:5e:fb:ad:26:d6:d7:7f:14:c4:
                    5e:7c:6c:89:de:4e:bb:23:20:66:22:4f:2b:a5:c4:
                    c4:7f:70:f7:7d:9f:1c:ed:4c:e4:82:0f:f2:5a:fb:
                    76:56:ca:52:56:d2:e3:b0:25:f8:45:6a:cc:b4:45:
                    92:64:15:35:68:ad:86:32:b9:25:10:a9:26:e9:a5:
                    02:a0:0a:f4:9e:d5:e8:34:50:ef:f7:b2:bc:6f:0f:
                    10:a9:c9:b7:17:c4:b3:59:c3:fb:b1:7e:ce:38:c8:
                    42:b1:8f:20:0f:b0:da:ae:99:e9:e0:7d:b2:0c:9e:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BD:E4:D1:4F:2A:FA:A1:D4:5D:24:7C:AF:D5:E9:2C:B4:5B:1F:B9
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33322d3332203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:05:4b:f9:94:f6:c1:65:c3:a6:7e:63:30:49:d1:82:7d:09:
         b4:4f:d6:ea:a2:26:cf:d6:32:80:7f:82:3c:2c:95:86:cb:2e:
         e8:2a:d3:1d:1b:c6:54:32:c1:5a:60:05:88:7a:41:13:49:7e:
         94:19:d5:72:46:ea:f5:e6:54:4e:7a:cc:c0:22:03:7d:0c:cd:
         73:6d:20:b4:08:6c:b1:42:c0:98:5e:32:52:74:c3:46:79:d3:
         9b:a7:c1:84:6c:e9:34:d3:7c:c0:bd:7b:5c:2a:bf:6d:b7:2c:
         b0:23:b9:65:bc:33:43:c6:b7:42:6b:8d:30:63:5b:24:5d:25:
         a1:0a:2c:77:1c:c9:37:77:1f:7c:4e:d2:15:65:62:4a:8f:ec:
         d1:4e:d2:39:be:a9:a1:14:cc:bd:c7:61:4d:df:46:71:06:b4:
         ab:26:f9:22:3e:fd:2b:98:07:f5:c7:cd:82:d3:a1:54:23:d7:
         29:e3:d9:e1:e0:eb:8d:d6:d5:66:71:91:ae:aa:ff:a2:9b:39:
         32:57:43:75:dd:3d:0b:0a:1c:c2:c1:a2:ee:43:b0:30:57:19:
         22:ce:80:89:bf:59:b4:7a:aa:16:7c:99:23:b9:03:01:da:15:
         9d:61:b2:73:43:6a:8a:19:36:d8:6a:7d:89:e0:48:61:e4:cc:
         58:37:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:30:24 2025 by rpki-client