This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a653030303a3a2f33362d3336203d3e20323634313431.roa
File:                     323830343a316530633a653030303a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier:          rzcrI5SQIu18BzHbGS8Ke/xLWxnjbTdnEIz7X/1ZUqY=
Subject key identifier:   35:B9:A1:8C:01:D8:5A:91:E3:9C:B3:89:C3:AA:7A:53:86:EF:66:89
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       03EB636EFDF64CD580C1CCAD1182441D344F302D
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a653030303a3a2f33362d3336203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:50 +0000
ROA not before:           Thu 04 Dec 2025 20:33:50 +0000
ROA not after:            Thu 03 Dec 2026 20:38:50 +0000
asID:                     264141
IP address blocks:        2804:1e0c:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:eb:63:6e:fd:f6:4c:d5:80:c1:cc:ad:11:82:44:1d:34:4f:30:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:50 2025 GMT
            Not After : Dec  3 20:38:50 2026 GMT
        Subject: CN=35B9A18C01D85A91E39CB389C3AA7A5386EF6689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:6b:1b:3a:3a:d2:2d:1b:56:5c:3e:20:57:
                    e5:94:14:37:3c:17:e5:68:31:a4:01:93:7f:9c:fd:
                    82:eb:29:dc:82:5e:62:68:f6:b6:d7:91:9e:f4:54:
                    1b:30:2e:32:03:e6:15:b1:cf:02:e4:3c:98:c2:43:
                    cd:5f:77:9a:f6:0d:e8:61:f2:56:74:90:2e:4e:15:
                    25:8b:d0:b2:b7:56:5e:22:7d:9f:17:8a:bc:98:d4:
                    5b:81:ed:47:e9:ec:80:b3:32:80:82:b6:d1:ab:14:
                    6e:3f:ad:32:17:38:c8:f7:40:1d:8d:ff:16:9d:be:
                    b2:e5:01:ec:6b:e0:38:c8:02:6d:d0:d2:32:e6:62:
                    29:5e:e1:b0:b3:4a:13:89:79:66:ce:26:f2:77:92:
                    55:2e:4f:d6:9a:ba:85:f2:ef:7a:05:55:b5:d4:ad:
                    e6:f6:f7:1f:74:b2:31:c8:47:22:ab:44:a8:00:21:
                    a3:8f:25:bc:93:30:e0:f8:52:51:d2:5b:5b:25:4e:
                    6a:3d:5b:6c:3f:70:e3:08:66:fb:b3:01:6c:75:01:
                    91:8f:29:32:e8:16:6d:7e:aa:17:05:c4:ce:0f:ef:
                    41:62:83:d8:e6:ed:b3:1c:7a:85:89:6d:85:2f:c4:
                    18:c3:f2:ba:c8:5a:c7:c3:c8:aa:57:8c:f4:5a:24:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B9:A1:8C:01:D8:5A:91:E3:9C:B3:89:C3:AA:7A:53:86:EF:66:89
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a653030303a3a2f33362d3336203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         54:32:f0:35:13:9f:9d:c9:f6:54:c0:ac:37:70:8e:dd:6e:b7:
         0c:43:04:48:53:ca:03:53:9f:ac:1b:87:ae:51:37:ba:f3:db:
         67:bb:68:01:72:84:16:b6:74:31:df:0a:17:3f:45:34:bc:ba:
         a1:8e:16:c6:4a:3c:0b:20:56:ea:e8:1d:24:71:cf:58:62:4d:
         b5:52:6b:9e:3f:ca:aa:e3:a4:e1:78:aa:c4:08:6b:90:24:40:
         ac:3d:a6:b8:ab:ba:3b:e3:54:e8:ad:38:3e:fc:6b:17:43:8a:
         d1:32:c5:b0:4b:7a:2c:5f:17:b8:d5:7e:d9:5f:0e:11:1f:85:
         5c:8f:4b:1d:0d:18:4c:2e:36:61:c2:d0:b5:a7:e2:de:6b:85:
         86:42:80:0e:94:24:a7:3d:f8:d7:42:2f:fe:7a:a0:21:c9:86:
         39:de:3d:c1:f3:26:64:6e:ba:9d:9a:9d:0d:49:07:20:09:d6:
         f3:87:84:b7:65:b1:51:b7:ea:83:b2:7d:63:ea:6d:4e:d7:f4:
         e8:71:07:6a:e1:2d:e5:1e:bc:93:5c:1a:62:e3:64:ec:af:26:
         53:db:87:ef:8e:58:18:ed:2b:28:34:f2:11:72:45:cf:4b:9e:
         ac:dc:cd:fb:71:7d:13:7f:b3:ed:63:6b:97:a8:d1:33:f3:ba:
         1e:9f:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:19 2025 by rpki-client