This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a663830303a3a2f33372d3337203d3e20323634313431.roa
File:                     323830343a316530633a663830303a3a2f33372d3337203d3e20323634313431.roa (raw, json)
Hash identifier:          P3TT75knVm7426/hZC9arlr8YU7YER1zngtlnfrGwL8=
Subject key identifier:   11:01:88:D6:2F:79:D4:BE:45:21:86:6C:63:BB:D2:7C:D8:89:15:1F
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       33948FBE561FCA3C7EC4AC5E707EDCCC5FB11E77
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a663830303a3a2f33372d3337203d3e20323634313431.roa
Signing time:             Thu 04 Dec 2025 20:38:50 +0000
ROA not before:           Thu 04 Dec 2025 20:33:50 +0000
ROA not after:            Thu 03 Dec 2026 20:38:50 +0000
asID:                     264141
IP address blocks:        2804:1e0c:f800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:94:8f:be:56:1f:ca:3c:7e:c4:ac:5e:70:7e:dc:cc:5f:b1:1e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Dec  4 20:33:50 2025 GMT
            Not After : Dec  3 20:38:50 2026 GMT
        Subject: CN=110188D62F79D4BE4521866C63BBD27CD889151F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3a:29:62:5c:f8:a1:17:77:49:f8:93:21:a4:
                    a7:15:cd:4a:4d:ac:19:75:5d:3e:8b:04:2a:0b:c5:
                    8c:df:fc:96:db:83:5d:1c:e5:56:ef:73:d1:fa:53:
                    86:e6:f1:50:2c:9f:27:7f:15:63:b6:e3:26:66:09:
                    4f:8d:c8:29:2d:41:f9:e8:cf:f9:81:ee:a4:92:5a:
                    1f:4b:08:e6:f1:a9:24:40:d6:9e:e0:96:57:b4:43:
                    b6:2a:8f:a0:e8:78:60:92:b5:66:70:ba:85:ed:67:
                    0e:d3:a9:3c:9f:bd:b5:e9:7d:00:7f:65:fa:a9:2e:
                    64:57:4c:eb:ac:d1:54:8e:c7:86:f8:37:8d:71:1c:
                    8e:6d:1b:a1:d9:26:b7:1d:d4:98:57:56:f3:f2:fe:
                    54:3c:e0:d1:17:a4:75:22:21:20:74:5b:48:04:85:
                    f8:bb:56:8e:23:62:0d:8b:9e:77:94:27:18:d1:12:
                    63:39:c3:81:e4:79:ed:a1:59:c5:90:01:9e:f4:0d:
                    c6:67:8a:0a:b2:7c:5c:d7:d5:a0:9f:b7:dc:34:41:
                    8d:3a:39:e0:58:1a:ac:3e:c8:ea:a3:c5:7e:0f:e8:
                    f5:2f:e0:ca:b4:8f:13:16:43:6e:15:bf:c2:ed:6e:
                    67:65:d1:46:1a:06:98:bf:bb:f1:89:19:73:5e:70:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:88:D6:2F:79:D4:BE:45:21:86:6C:63:BB:D2:7C:D8:89:15:1F
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a663830303a3a2f33372d3337203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:f800::/37

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:43:ae:5f:63:28:cb:ad:2f:9d:0f:85:97:21:75:d5:78:
         35:f4:b7:47:3b:c0:04:6d:c9:60:7d:36:d5:d4:56:f6:05:75:
         74:bf:2e:c5:a5:5b:8d:4e:f1:07:cb:36:4d:81:ff:cb:c1:4b:
         d0:4f:cc:23:bd:9d:c4:d8:7a:e7:43:cb:33:32:52:58:cd:ce:
         78:80:e2:e0:98:2d:ce:4d:06:b3:46:a8:89:4c:2d:8e:68:44:
         3d:88:76:f0:19:53:ce:7f:2d:0d:26:90:86:82:81:f9:74:c5:
         67:8a:a5:46:a7:cc:16:4e:61:1d:4d:5e:c3:03:87:a2:00:07:
         2c:94:26:11:33:58:06:95:be:4b:85:1e:f0:7d:03:41:81:a6:
         eb:9b:41:e6:8b:a9:6c:0d:de:81:63:52:32:ef:c7:e6:d6:5d:
         2f:f1:98:93:1f:9d:ac:1e:cc:b7:19:da:0c:63:62:83:06:eb:
         ad:22:bc:13:d3:ff:41:b7:6b:11:4a:e2:7e:77:1c:ba:67:6e:
         14:fa:2a:bd:ad:34:c9:59:b5:0f:3c:1a:29:9f:28:6d:7a:89:
         35:27:5c:61:a6:6c:df:f0:20:e7:c6:bf:27:89:b3:08:a3:e2:
         4a:44:4f:f5:7a:65:4e:03:89:53:71:0f:49:2e:1e:b4:b4:9e:
         8f:c4:47:41
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUM5SPvlYfyjx+xKxecH7czF+xHncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJCOTZGOEI1M0IwNkVFNDQ4QTUxNzA5QjhEMjMwQUU0
OURCRjMwRDAeFw0yNTEyMDQyMDMzNTBaFw0yNjEyMDMyMDM4NTBaMDMxMTAvBgNV
BAMTKDExMDE4OEQ2MkY3OUQ0QkU0NTIxODY2QzYzQkJEMjdDRDg4OTE1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXOiliXPihF3dJ+JMhpKcVzUpN
rBl1XT6LBCoLxYzf/Jbbg10c5Vbvc9H6U4bm8VAsnyd/FWO24yZmCU+NyCktQfno
z/mB7qSSWh9LCObxqSRA1p7glle0Q7Yqj6DoeGCStWZwuoXtZw7TqTyfvbXpfQB/
ZfqpLmRXTOus0VSOx4b4N41xHI5tG6HZJrcd1JhXVvPy/lQ84NEXpHUiISB0W0gE
hfi7Vo4jYg2LnneUJxjREmM5w4Hkee2hWcWQAZ70DcZnigqyfFzX1aCft9w0QY06
OeBYGqw+yOqjxX4P6PUv4Mq0jxMWQ24Vv8Ltbmdl0UYaBpi/u/GJGXNecG8hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEQGI1i951L5FIYZsY7vSfNiJFR8wHwYDVR0j
BBgwFoAUorlvi1OwbuRIpRcJuNIwrknb8w0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjVrQVVZanBwS2ppOWNWY01kTlR4d052ZGtZbzEzejJqRnV5Wm81OHVY
ZmkvMC9BMkI5NkY4QjUzQjA2RUU0NDhBNTE3MDlCOEQyMzBBRTQ5REJGMzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQjk2RjhCNTNCMDZFRTQ0
OEE1MTcwOUI4RDIzMEFFNDlEQkYzMEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I1a0FVWWpwcEtqaTljVmNNZE5UeHdOdmRrWW8xM3oyakZ1eVpvNTh1WGZpLzAv
MzIzODMwMzQzYTMxNjUzMDYzM2E2NjM4MzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDMyMzYzNDMxMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEHgz4MA0GCSqGSIb3DQEBCwUA
A4IBAQCQ1EOuX2Moy60vnQ+FlyF11Xg19LdHO8AEbclgfTbV1Fb2BXV0vy7FpVuN
TvEHyzZNgf/LwUvQT8wjvZ3E2HrnQ8szMlJYzc54gOLgmC3OTQazRqiJTC2OaEQ9
iHbwGVPOfy0NJpCGgoH5dMVniqVGp8wWTmEdTV7DA4eiAAcslCYRM1gGlb5LhR7w
fQNBgabrm0Hmi6lsDd6BY1Iy78fm1l0v8ZiTH52sHsy3GdoMY2KDBuutIrwT0/9B
t2sRSuJ+dxy6Z24U+iq9rTTJWbUPPBopnyhteok1J1xhpmzf8CDnxr8nibMIo+JK
RE/1emVOA4lTcQ9JLh60tJ6PxEdB
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:43 2025 by rpki-client