This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33332d3333203d3e20323634313431.roa
File:                     323830343a316530633a3a2f33332d3333203d3e20323634313431.roa (raw, json)
Hash identifier:          GzDexzn6unJlBaU/lFZe/x9gu6RMzCIqXmBWUAsAm2o=
Subject key identifier:   75:19:48:69:6A:A8:BA:24:AC:D8:5C:D8:D1:D4:7A:AA:1B:D8:61:99
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       503EC587A9B87671E97E9581BDE876296C403643
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33332d3333203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:50 +0000
ROA not before:           Thu 04 Dec 2025 20:33:50 +0000
ROA not after:            Thu 03 Dec 2026 20:38:50 +0000
asID:                     264141
IP address blocks:        2804:1e0c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3e:c5:87:a9:b8:76:71:e9:7e:95:81:bd:e8:76:29:6c:40:36:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:50 2025 GMT
            Not After : Dec  3 20:38:50 2026 GMT
        Subject: CN=751948696AA8BA24ACD85CD8D1D47AAA1BD86199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:d3:9c:ea:1b:a3:94:7a:74:d3:37:24:54:
                    73:21:f6:6c:f4:0c:7a:09:cd:bb:1b:b2:2f:fd:1c:
                    30:12:01:12:31:23:f6:f7:5d:dc:34:a0:69:4c:c1:
                    58:77:82:d2:02:65:d8:73:ab:31:d7:bb:c9:79:eb:
                    49:04:29:8c:56:b7:d8:93:2e:22:fd:c5:e9:1c:e9:
                    65:12:fb:6c:3e:1b:51:b3:20:72:d9:6d:03:63:7a:
                    a3:4e:f7:22:c4:de:f5:ca:44:58:48:76:87:11:6c:
                    68:64:7f:d6:da:68:87:78:4b:0e:f6:48:7b:81:09:
                    99:51:02:94:a2:87:8a:47:a6:e5:7a:3d:5a:2d:6e:
                    a4:13:96:d3:3e:b6:6f:fe:4c:77:40:b5:c6:ff:a1:
                    40:70:82:b9:d7:94:06:1d:74:52:af:43:da:dd:c3:
                    01:9b:42:ca:00:c6:dc:0d:3d:9f:a1:f0:3e:ef:de:
                    78:71:c6:e5:55:19:9d:ba:fb:69:15:04:a3:84:a5:
                    ba:f0:1c:80:9c:cf:ce:0a:f9:51:89:11:9d:49:f6:
                    3e:8e:c4:e2:e0:31:c6:5a:72:8b:a9:1f:88:7c:b3:
                    94:64:18:8d:e9:bf:84:bd:f7:da:f9:d6:be:96:60:
                    8e:2d:5c:fe:4c:e7:8e:27:eb:e6:b3:d9:41:b4:91:
                    61:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:19:48:69:6A:A8:BA:24:AC:D8:5C:D8:D1:D4:7A:AA:1B:D8:61:99
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33332d3333203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:4e:47:34:6c:21:2c:82:44:c0:22:4b:ad:f4:46:15:e2:af:
         b6:52:d3:89:cd:15:89:0a:df:a4:43:36:d4:bd:35:b8:e1:1e:
         70:82:62:d4:21:5a:29:4a:ba:cc:99:25:61:92:23:60:f0:0e:
         18:d9:b9:3d:b6:0f:06:db:ee:5c:ce:32:5f:99:fd:fb:c6:f5:
         58:bf:cf:b2:55:73:a0:54:7a:2d:f4:63:b3:43:90:db:53:fe:
         5b:c9:07:75:75:92:ba:e5:b1:ef:8d:78:29:e3:9e:9a:66:38:
         56:dd:31:f9:c4:ee:e6:77:a3:3e:a5:5f:f1:e0:14:17:50:4b:
         2a:e4:0a:5a:01:b8:83:4f:35:66:89:29:19:ad:6a:36:b8:f5:
         5b:b2:32:9b:0f:0b:85:eb:1d:67:b4:72:c9:4d:ab:b3:af:22:
         6b:be:c9:1c:c3:62:3d:04:09:98:0e:64:40:ac:09:1e:1c:5d:
         be:9c:74:6e:f2:22:4d:1b:2f:76:13:ee:de:d0:1f:84:0a:a2:
         b3:17:1a:c8:1c:71:d6:b7:e2:87:07:98:79:57:ae:57:7a:0b:
         4d:a5:c3:ed:84:90:92:d6:79:ab:21:8f:1b:d3:9b:b2:59:e3:
         30:c2:08:d9:dc:37:56:b9:41:d6:1a:22:e8:7c:0a:c2:6c:3e:
         3b:4e:2b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:34:08 2025 by rpki-client