This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33362d3336203d3e20323634313431.roa
File:                     323830343a316530633a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier:          zqF0mg7SF4YjSZL7Zz5I2bOU3EU+IJ5yJCfp8qbNitE=
Subject key identifier:   FD:FE:9F:93:14:65:41:12:77:9E:4B:88:F2:D8:F8:FC:62:79:F0:50
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       753A71920D3A8D680C7CED26857670BB39932B5A
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33362d3336203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:50 +0000
ROA not before:           Thu 04 Dec 2025 20:33:50 +0000
ROA not after:            Thu 03 Dec 2026 20:38:50 +0000
asID:                     264141
IP address blocks:        2804:1e0c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3a:71:92:0d:3a:8d:68:0c:7c:ed:26:85:76:70:bb:39:93:2b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:50 2025 GMT
            Not After : Dec  3 20:38:50 2026 GMT
        Subject: CN=FDFE9F9314654112779E4B88F2D8F8FC6279F050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:61:34:4d:c8:fa:ec:a2:11:a8:6e:53:a6:a9:
                    78:1a:32:aa:e0:46:e2:f9:28:69:67:d3:f8:e1:10:
                    eb:08:41:5e:2f:58:06:31:a6:19:41:e3:72:6f:09:
                    10:ba:c2:a0:80:37:1d:16:c1:c3:f1:f1:7f:c1:8a:
                    42:55:af:a3:ca:e4:ef:24:3c:17:e2:9a:5e:24:c5:
                    a3:53:57:68:75:4c:49:30:78:ce:6e:8d:a3:a1:68:
                    8b:2e:cb:94:2b:9a:e9:d7:51:69:d9:d6:e3:22:21:
                    6f:67:41:83:37:b1:21:c4:a6:9d:7e:a5:dd:d1:7d:
                    f4:1a:00:d9:ec:f7:bc:b2:9f:46:ba:b1:38:1f:82:
                    70:ce:08:f5:bb:76:dd:77:40:d2:90:bf:f2:41:32:
                    fc:d9:b3:a2:ea:e0:02:dd:3d:22:16:89:f7:1a:cd:
                    7c:d1:92:6f:d9:a4:c1:62:7f:bf:96:24:ea:fd:ce:
                    3c:07:0a:0a:9b:1a:eb:ec:90:3a:f3:32:f8:d7:bf:
                    38:45:7c:64:bf:02:5a:df:54:22:f7:55:58:3c:a9:
                    7b:19:84:71:3e:dc:4d:ad:63:72:08:6e:ce:a0:13:
                    91:3f:1e:28:48:22:53:0a:db:d2:a2:be:e3:d1:11:
                    4e:cf:f3:bf:58:09:50:b4:cb:c1:3d:f1:db:a9:43:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FE:9F:93:14:65:41:12:77:9E:4B:88:F2:D8:F8:FC:62:79:F0:50
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33362d3336203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:54:4a:e4:f5:54:a5:6a:5e:86:ca:22:fa:66:3c:17:59:57:
         bd:a3:fa:aa:e4:1e:26:a5:80:ef:53:09:5a:e8:26:74:1e:d8:
         63:77:80:94:9f:a2:b7:28:b5:98:17:a6:aa:f6:10:36:5f:e3:
         60:f3:8c:10:b5:4b:06:2b:14:6c:e0:64:d7:c4:d1:56:77:7d:
         cd:3e:01:ab:a1:9b:19:83:ee:8f:72:67:6b:98:52:f3:0a:15:
         e8:eb:76:ad:38:7e:74:f1:60:90:5d:3e:a5:a7:60:e2:b8:e0:
         38:00:df:20:57:c1:52:4a:9f:a6:b3:37:c1:6d:d9:6b:30:ce:
         1f:0f:e6:2a:f2:d2:51:9a:20:00:1b:e3:ea:82:e6:82:96:87:
         2b:99:f1:25:eb:c1:8e:fb:0a:ca:80:5d:ad:70:a0:58:ec:77:
         6c:dd:83:0b:fc:87:cf:8e:ac:16:61:64:87:7e:8b:13:cc:c5:
         a4:ef:d5:27:d7:82:dc:70:84:af:95:31:27:4b:e9:b0:69:88:
         95:10:80:51:c9:78:81:f0:50:7c:95:5d:bf:8b:83:00:16:a9:
         7d:47:cd:ae:48:bb:f1:b1:24:30:89:50:b0:bb:43:fa:0f:22:
         06:b2:af:42:ce:84:26:3f:49:6d:0f:4e:3a:fe:a6:3c:6a:a9:
         41:06:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:11 2025 by rpki-client