This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a313830303a3a2f33372d3337203d3e20323632373739.roa
File:                     323830343a333231303a313830303a3a2f33372d3337203d3e20323632373739.roa (raw, json)
Hash identifier:          1K6nigH77Nq3bYRlp8N9XiVOfcUICNeXxQJU1olUpwA=
Subject key identifier:   88:3E:41:64:F8:77:D3:18:6A:5A:31:CB:EE:61:7C:60:F4:04:33:CE
Certificate issuer:       /CN=E132E5111ED9D50EC92DF7DA6C45792F1165AB85
Certificate serial:       08C15C7F05C37489384338E132F0C957EF5529CA
Authority key identifier: E1:32:E5:11:1E:D9:D5:0E:C9:2D:F7:DA:6C:45:79:2F:11:65:AB:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a313830303a3a2f33372d3337203d3e20323632373739.roa
Signing time:             Mon 17 Nov 2025 12:21:48 +0000
ROA not before:           Mon 17 Nov 2025 12:16:48 +0000
ROA not after:            Mon 16 Nov 2026 12:21:48 +0000
asID:                     262779
IP address blocks:        2804:3210:1800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c1:5c:7f:05:c3:74:89:38:43:38:e1:32:f0:c9:57:ef:55:29:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E132E5111ED9D50EC92DF7DA6C45792F1165AB85
        Validity
            Not Before: Nov 17 12:16:48 2025 GMT
            Not After : Nov 16 12:21:48 2026 GMT
        Subject: CN=883E4164F877D3186A5A31CBEE617C60F40433CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:c7:89:80:18:2d:e1:91:b2:0a:7c:5a:64:
                    ae:30:02:66:ce:18:f1:ee:d2:39:a7:38:be:bc:35:
                    29:86:6c:fb:2c:4e:e0:75:d4:01:88:3c:41:0b:de:
                    85:f3:1b:45:76:ce:54:bc:29:d5:51:e0:77:e9:40:
                    89:69:ca:f5:99:79:cf:dd:43:79:c3:57:d7:97:db:
                    48:3b:5a:5f:f4:35:d5:ed:ff:7d:b5:57:4c:c9:8d:
                    66:66:ed:e6:fb:26:8d:e3:31:0d:8c:a6:1b:87:48:
                    c9:1b:d2:69:cc:7c:cf:40:c7:39:2b:1d:69:59:6b:
                    4a:36:09:de:c5:00:46:0b:35:f3:4f:c9:38:ae:14:
                    2d:0e:0a:b9:3e:17:f2:73:82:6b:04:d8:52:90:c2:
                    76:c3:6b:d9:45:91:df:22:8a:74:a9:ca:c7:01:b1:
                    cf:36:ca:6a:4d:0b:c8:fb:66:fc:e5:90:96:ce:78:
                    04:2f:97:97:b2:30:7f:4b:0c:a5:ce:d4:06:70:ee:
                    90:42:da:74:49:89:18:29:e5:bf:00:d9:99:24:cd:
                    47:af:ef:f6:70:66:02:40:42:5e:91:d6:c9:de:c8:
                    f3:f3:bb:66:75:85:07:b2:e1:6d:3d:33:bb:aa:31:
                    26:8a:34:9f:ac:cc:b0:1c:1f:d8:0c:6b:00:05:e8:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3E:41:64:F8:77:D3:18:6A:5A:31:CB:EE:61:7C:60:F4:04:33:CE
            X509v3 Authority Key Identifier:
                keyid:E1:32:E5:11:1E:D9:D5:0E:C9:2D:F7:DA:6C:45:79:2F:11:65:AB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a313830303a3a2f33372d3337203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3210:1800::/37

    Signature Algorithm: sha256WithRSAEncryption
         11:e8:94:dc:fb:b7:7a:00:09:e6:5c:26:fb:98:a1:c5:95:a9:
         27:6f:f0:03:a1:36:99:00:95:08:f9:f2:6e:55:85:cf:58:7b:
         a1:04:f3:40:76:30:f9:9b:67:c6:bf:5c:fe:f4:25:c4:a7:5a:
         f7:d8:dc:d4:f8:fe:26:b1:dd:ed:a1:4f:6a:57:74:49:f4:fd:
         c5:f4:3b:3e:09:06:39:f7:a6:52:cd:4a:24:1a:f6:71:00:74:
         ab:bf:b0:1c:74:14:b9:bf:e3:db:07:29:c6:ad:72:d5:e0:34:
         0c:ca:c8:8e:36:e9:ac:8d:c2:a9:b4:69:8e:71:18:50:e1:7b:
         17:ce:be:e1:00:3c:0c:73:14:f7:e7:11:06:6f:26:87:3a:92:
         18:4f:ad:dd:54:d6:7e:81:9e:34:0f:bb:e8:67:08:9a:51:cf:
         08:e1:e6:7a:b2:96:33:6d:4c:09:f8:4c:b3:e2:2c:bc:b8:4c:
         57:3a:1c:8c:7f:9e:8e:b7:76:ec:2b:ac:12:58:c0:bc:4d:e2:
         bf:1e:bb:6c:03:23:6e:77:4f:f2:8b:e3:69:f3:d6:78:f5:7a:
         eb:f6:fd:e2:a4:e4:d5:25:8b:da:e1:7e:34:4a:78:9c:06:ff:
         24:9a:00:2a:e4:5f:a4:0a:9a:e4:69:b0:1c:46:6d:8e:c9:0a:
         61:3b:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:35:01 2025 by rpki-client