This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a643030303a3a2f33362d3336203d3e20323639363536.roa
File:                     323830343a363765303a643030303a3a2f33362d3336203d3e20323639363536.roa (raw, json)
Hash identifier:          3Hcdr6poKvH5JBGMFpAIfdMTWS3BUuOFaGvWhMJUADU=
Subject key identifier:   04:A1:D4:DC:8E:7D:E1:98:A7:23:AD:83:5D:EA:63:04:0A:46:95:7B
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       79272F0C290FE24078D386459853E5243736C970
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a643030303a3a2f33362d3336203d3e20323639363536.roa
Signing time:             Thu 06 Nov 2025 18:18:40 +0000
ROA not before:           Thu 06 Nov 2025 18:13:40 +0000
ROA not after:            Thu 05 Nov 2026 18:18:40 +0000
asID:                     269656
IP address blocks:        2804:67e0:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:27:2f:0c:29:0f:e2:40:78:d3:86:45:98:53:e5:24:37:36:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Nov  6 18:13:40 2025 GMT
            Not After : Nov  5 18:18:40 2026 GMT
        Subject: CN=04A1D4DC8E7DE198A723AD835DEA63040A46957B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:fc:07:05:31:d6:34:20:c5:72:92:53:9e:
                    20:85:22:19:f2:63:9a:de:2c:5d:80:d4:70:13:55:
                    7a:72:1c:05:d7:cb:a2:68:85:23:f5:bf:fd:e3:f3:
                    47:46:e9:43:76:ca:e2:6e:59:7e:f9:b0:1b:69:27:
                    38:2f:c5:54:43:ac:1a:f2:3f:04:b8:63:2a:cb:92:
                    4d:da:aa:d2:2c:d2:f4:f3:00:51:0b:68:71:b0:7a:
                    6e:db:38:d7:5e:3f:fa:51:d7:5c:7b:ff:f8:41:0a:
                    7c:c3:d0:b3:24:24:42:57:76:14:65:db:a8:7c:c6:
                    cd:9a:b9:e5:25:bb:57:ee:73:ad:da:5d:7a:b4:a1:
                    fb:4a:af:5b:61:7b:6a:18:63:90:ae:63:b4:20:d8:
                    8c:0b:23:a2:97:2f:8c:7f:de:e0:d6:14:69:d1:eb:
                    eb:e2:b8:f5:bd:bf:ce:bc:13:a8:c1:cc:3b:b5:e4:
                    0f:75:4c:5e:d9:a2:24:21:36:74:90:b5:ee:92:58:
                    94:12:f6:53:03:84:34:ea:9c:cf:3c:ad:61:5b:2e:
                    cb:0b:e3:a5:1e:bf:c6:42:a5:29:3e:50:c5:88:3e:
                    2c:cc:8b:27:62:69:cd:42:3b:55:8f:d6:72:b5:79:
                    47:88:f0:90:ac:01:64:9d:9b:90:6b:c0:ec:be:6f:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A1:D4:DC:8E:7D:E1:98:A7:23:AD:83:5D:EA:63:04:0A:46:95:7B
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a643030303a3a2f33362d3336203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:a3:46:53:93:4c:02:55:9e:98:e4:09:83:89:e9:9b:aa:06:
         8d:bb:b2:a9:f0:ef:14:af:8b:48:c6:0e:ce:78:26:30:81:fa:
         48:48:72:d3:35:f5:8e:49:c6:2d:a6:02:48:90:f4:1a:43:23:
         31:82:cb:5e:a0:d2:73:f1:f0:36:1d:26:f0:94:f9:cf:aa:ae:
         f2:bc:e2:71:1c:7b:59:89:7e:67:2e:4f:af:08:0a:6c:3f:2a:
         f1:f3:8c:67:f3:4b:38:24:85:f6:ef:c7:27:ed:e8:51:6a:95:
         8f:66:42:aa:09:d0:1f:fc:63:a7:62:c8:05:34:63:39:7a:10:
         89:3d:96:37:56:3e:c1:30:5f:7e:8b:dc:14:c2:cf:91:f8:d8:
         b7:d8:61:37:3d:7a:d8:40:ad:c7:99:21:51:b5:49:57:73:51:
         59:8d:06:79:7a:ee:81:54:46:0f:a2:21:d7:df:d3:fa:dc:0e:
         88:a4:c7:ca:55:55:01:af:e7:cc:6d:4b:02:e1:52:20:79:d7:
         5c:ac:83:5c:69:7d:a8:c8:ab:58:54:55:47:16:a3:93:d3:33:
         4f:f9:de:5b:ec:84:18:3f:d7:59:83:bd:cc:2b:db:29:92:b8:
         b4:fe:ee:2d:6b:93:c9:96:58:2e:73:37:d2:b0:87:b4:1a:b3:
         87:7a:7c:14
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeScvDCkP4kB404ZFmFPlJDc2yXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDNzA4RDAxM0Q1RkU3NDk5OTgwMEZCMjY1QjE2RkRG
ODk4NjFEMzAeFw0yNTExMDYxODEzNDBaFw0yNjExMDUxODE4NDBaMDMxMTAvBgNV
BAMTKDA0QTFENERDOEU3REUxOThBNzIzQUQ4MzVERUE2MzA0MEE0Njk1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLvwHBTHWNCDFcpJTniCFIhny
Y5reLF2A1HATVXpyHAXXy6JohSP1v/3j80dG6UN2yuJuWX75sBtpJzgvxVRDrBry
PwS4YyrLkk3aqtIs0vTzAFELaHGwem7bONdeP/pR11x7//hBCnzD0LMkJEJXdhRl
26h8xs2aueUlu1fuc63aXXq0oftKr1the2oYY5CuY7Qg2IwLI6KXL4x/3uDWFGnR
6+viuPW9v868E6jBzDu15A91TF7ZoiQhNnSQte6SWJQS9lMDhDTqnM88rWFbLssL
46Uev8ZCpSk+UMWIPizMiydiac1CO1WP1nK1eUeI8JCsAWSdm5BrwOy+b3FBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUBKHU3I594ZinI62DXepjBApGlXswHwYDVR0j
BBgwFoAUSccI0BPV/nSZmAD7JlsW/fiYYdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkQ1S3FRamlyaWhZNkJURFJnb3F1MkpocjZYV3BFekd2cFhURGVmS0hG
OHYvMC80OUM3MDhEMDEzRDVGRTc0OTk5ODAwRkIyNjVCMTZGREY4OTg2MUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5QzcwOEQwMTNENUZFNzQ5
OTk4MDBGQjI2NUIxNkZERjg5ODYxRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JENUtxUWppcmloWTZCVERSZ29xdTJKaHI2WFdwRXpHdnBYVERlZktIRjh2LzAv
MzIzODMwMzQzYTM2Mzc2NTMwM2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzOTM2MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEZ+DQMA0GCSqGSIb3DQEBCwUA
A4IBAQBto0ZTk0wCVZ6Y5AmDiembqgaNu7Kp8O8Ur4tIxg7OeCYwgfpISHLTNfWO
ScYtpgJIkPQaQyMxgsteoNJz8fA2HSbwlPnPqq7yvOJxHHtZiX5nLk+vCApsPyrx
84xn80s4JIX278cn7ehRapWPZkKqCdAf/GOnYsgFNGM5ehCJPZY3Vj7BMF9+i9wU
ws+R+Ni32GE3PXrYQK3HmSFRtUlXc1FZjQZ5eu6BVEYPoiHX39P63A6IpMfKVVUB
r+fMbUsC4VIgeddcrINcaX2oyKtYVFVHFqOT0zNP+d5b7IQYP9dZg73MK9spkri0
/u4ta5PJllguczfSsIe0GrOHenwU
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:51 2025 by rpki-client