This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a613030303a3a2f33352d3335203d3e20323634313431.roa
File:                     323830343a316530633a613030303a3a2f33352d3335203d3e20323634313431.roa (raw, json)
Hash identifier:          NIDF+Y6YS8hRY1kan2MD55NvuSl7WcM8Xtrjvpm6a+M=
Subject key identifier:   0B:7E:99:B7:79:46:AD:02:6D:AA:EE:C7:43:F5:C1:47:FE:11:EF:92
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       68C9F12849E45384107EA6FD58F264D51998470C
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a613030303a3a2f33352d3335203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:50 +0000
ROA not before:           Thu 04 Dec 2025 20:33:50 +0000
ROA not after:            Thu 03 Dec 2026 20:38:50 +0000
asID:                     264141
IP address blocks:        2804:1e0c:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c9:f1:28:49:e4:53:84:10:7e:a6:fd:58:f2:64:d5:19:98:47:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:50 2025 GMT
            Not After : Dec  3 20:38:50 2026 GMT
        Subject: CN=0B7E99B77946AD026DAAEEC743F5C147FE11EF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:7f:dc:42:96:d2:0e:a6:e0:2e:1e:45:c6:
                    59:61:db:e9:55:cc:36:dc:4a:c4:f2:43:22:a5:49:
                    cd:4b:0e:7c:f5:3d:48:9b:f6:86:04:96:6f:c8:d9:
                    f5:be:cd:36:d1:a8:19:89:51:6f:c0:fe:ec:4a:30:
                    22:2f:8b:7b:d5:4e:14:7e:c6:f7:f9:29:61:57:27:
                    bb:ce:ec:bd:5d:ae:3f:ee:69:02:43:d9:73:d8:bc:
                    a8:a5:7d:0b:bf:fd:2a:4b:b8:a5:d3:1f:06:65:c6:
                    4f:d7:04:a4:2f:ca:2e:be:0f:ac:cb:01:61:49:8f:
                    59:67:6e:08:bd:7b:4f:ed:a8:f7:4b:dd:b8:17:70:
                    70:a4:58:e9:41:33:b0:5e:56:43:7c:b1:0c:53:f8:
                    f1:a9:7c:6b:95:b2:22:9e:d3:e6:d8:84:13:b1:61:
                    cf:9a:e2:7e:a1:67:a4:e2:92:dc:d9:22:31:b0:40:
                    8a:50:61:f1:94:3a:83:34:2b:4a:05:1b:e0:5c:30:
                    ea:54:d4:d0:64:23:0e:1e:31:ce:ef:db:57:28:8c:
                    09:1f:cd:bf:52:4f:38:7a:b3:f9:f3:6b:fe:47:91:
                    0d:fa:10:5b:b4:46:a5:b9:c1:72:25:b4:27:99:66:
                    18:c0:19:45:41:93:e4:de:fa:69:d7:15:1e:94:30:
                    24:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7E:99:B7:79:46:AD:02:6D:AA:EE:C7:43:F5:C1:47:FE:11:EF:92
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a613030303a3a2f33352d3335203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         88:81:df:af:75:94:de:01:c7:21:45:aa:71:8b:5a:45:ed:42:
         14:5e:b7:13:0e:f2:ba:30:f6:3a:17:b2:59:88:62:a9:20:81:
         33:8f:f7:8f:16:c8:b1:2d:dc:54:16:ce:35:f2:e7:a3:42:a6:
         86:58:5b:d1:a6:ca:95:92:90:e0:32:50:49:0b:09:b1:ef:50:
         20:cd:41:f3:e6:7f:de:8f:3c:4c:38:8a:a2:a8:24:26:76:07:
         f2:05:5a:dd:e0:ac:0f:6a:48:de:5b:ad:d5:60:2e:bf:76:62:
         60:36:a0:a2:e0:02:51:83:7b:63:67:f6:f0:76:a0:22:2d:e8:
         e6:6b:ce:96:3b:1d:14:56:eb:ee:e4:07:15:b5:74:e5:6f:18:
         a3:e5:7b:cf:a9:4f:b7:55:86:d1:a7:30:73:a2:c1:ba:51:b6:
         cc:02:b9:0a:c9:32:ce:41:5e:dd:35:9b:9e:d4:c7:d1:af:e8:
         97:bb:74:dc:c1:48:a0:22:15:a4:e7:ce:98:3f:70:be:3f:db:
         cf:b5:7b:1b:2f:6a:50:90:66:df:b8:4b:b2:1a:49:35:9b:03:
         c1:36:93:97:90:b9:80:e0:f4:01:fd:19:41:26:ff:a0:43:ca:
         79:5d:0b:90:16:07:88:f6:58:95:9a:26:2f:36:2f:a5:04:10:
         fd:28:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:34:09 2025 by rpki-client