This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a633030303a3a2f33362d3336203d3e20323634313431.roa
File:                     323830343a316530633a633030303a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier:          qU3nn7YcC960962rxgMhsIzLrJddmzeZLvc1CEZ2zPQ=
Subject key identifier:   6E:EA:14:54:42:74:CB:93:A0:ED:B0:36:34:BD:01:41:D8:CB:C0:CC
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       536238CC428D0AE588B382094AB309E813710178
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a633030303a3a2f33362d3336203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:51 +0000
ROA not before:           Thu 04 Dec 2025 20:33:51 +0000
ROA not after:            Thu 03 Dec 2026 20:38:51 +0000
asID:                     264141
IP address blocks:        2804:1e0c:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:62:38:cc:42:8d:0a:e5:88:b3:82:09:4a:b3:09:e8:13:71:01:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:51 2025 GMT
            Not After : Dec  3 20:38:51 2026 GMT
        Subject: CN=6EEA14544274CB93A0EDB03634BD0141D8CBC0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cf:0b:da:e1:fc:84:22:4e:2c:af:0b:e4:d3:
                    32:79:e0:80:ec:49:7c:97:c6:2e:80:f1:80:9c:12:
                    da:c8:3d:9d:87:e5:2d:13:b4:89:f1:f6:df:34:32:
                    d4:a7:23:f5:9f:db:ad:ba:4a:a5:28:ac:50:db:aa:
                    e0:32:4e:52:6a:9c:db:bf:7c:a2:0a:12:6c:ba:ed:
                    ac:b5:a6:d0:62:24:26:ad:88:88:39:75:4f:46:ba:
                    e6:c5:eb:c0:02:e0:4a:df:ef:44:f5:81:81:67:21:
                    8f:88:10:76:d7:86:d0:aa:18:9a:86:02:a4:d7:b8:
                    bb:6d:bd:83:9e:64:a6:66:bc:e5:79:06:4e:a2:a7:
                    9e:75:c1:e2:42:69:11:ce:02:c5:61:cd:a2:a5:39:
                    80:60:10:cd:13:da:fd:69:2c:d3:12:0e:42:c0:98:
                    ae:7a:6a:e6:e5:12:1b:c2:cf:ea:07:83:da:ca:2a:
                    f0:95:f8:a4:35:af:5c:93:96:88:a7:1b:5f:7e:e2:
                    ea:84:d5:8a:0d:4e:3c:92:9f:8d:3a:f0:99:70:4c:
                    11:8a:cb:a5:07:99:98:87:c8:61:39:f8:cf:d5:4b:
                    40:02:48:69:fb:95:71:1e:21:fb:21:6f:4b:7f:38:
                    f8:ee:0b:d5:9e:0a:89:fb:24:a7:6b:0e:27:fb:1f:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EA:14:54:42:74:CB:93:A0:ED:B0:36:34:BD:01:41:D8:CB:C0:CC
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a633030303a3a2f33362d3336203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         19:24:63:1a:c0:e9:3a:4d:ca:14:30:00:c2:2e:75:4c:44:0b:
         c3:2f:e2:27:27:d8:d6:20:5c:ed:42:1d:52:4e:ab:4f:e8:e5:
         43:de:6e:5e:85:af:32:50:0f:73:7e:c8:b3:b9:9b:0a:cb:27:
         54:12:bb:b2:c0:7c:60:df:f5:03:dc:b1:21:4f:57:28:b0:73:
         6a:b6:dd:2f:b3:24:e3:a3:f9:a0:53:09:af:b0:eb:61:fd:13:
         cf:a5:8a:8f:58:8e:e7:ce:44:54:70:72:be:89:92:53:13:07:
         56:5b:5a:46:b3:45:e7:1b:81:bf:1d:74:d4:18:b7:09:13:5e:
         ff:a5:69:4a:22:d3:fa:96:bd:c8:5a:cd:47:86:fc:59:46:15:
         2e:e0:94:d7:18:ea:38:23:ca:37:ec:2f:d1:e0:0d:99:fe:4b:
         32:69:9e:2b:45:79:81:9c:e6:0f:47:11:7c:ac:c5:79:59:38:
         87:b9:25:ce:ad:b5:3e:d9:7e:54:d2:7a:bc:8a:bb:9d:52:94:
         5c:ba:ae:1d:03:8e:75:29:bb:ff:e0:43:8d:d1:8f:aa:81:a3:
         20:46:9a:b4:03:db:8d:10:4b:e8:ca:0d:96:fe:ad:f1:bf:41:
         2c:9b:17:20:62:e6:98:65:02:a1:b7:8f:0a:9f:74:ce:9e:91:
         3f:45:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:48:16 2025 by rpki-client