This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33372d3337203d3e20323632373739.roa
File:                     323830343a333231303a3a2f33372d3337203d3e20323632373739.roa (raw, json)
Hash identifier:          BHh9WshBS1uLQ0LltP/Wij5qY08rP7sW85HFC9BKb+w=
Subject key identifier:   3E:1E:0C:EC:9E:F3:09:94:48:CB:1B:22:35:EA:86:D0:85:F8:04:15
Certificate issuer:       /CN=E132E5111ED9D50EC92DF7DA6C45792F1165AB85
Certificate serial:       19EEFD58CF5B6EA7AFE9DE98083B803CD59EA04E
Authority key identifier: E1:32:E5:11:1E:D9:D5:0E:C9:2D:F7:DA:6C:45:79:2F:11:65:AB:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33372d3337203d3e20323632373739.roa
Signing time:             Mon 17 Nov 2025 12:21:03 +0000
ROA not before:           Mon 17 Nov 2025 12:16:03 +0000
ROA not after:            Mon 16 Nov 2026 12:21:03 +0000
asID:                     262779
IP address blocks:        2804:3210::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ee:fd:58:cf:5b:6e:a7:af:e9:de:98:08:3b:80:3c:d5:9e:a0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E132E5111ED9D50EC92DF7DA6C45792F1165AB85
        Validity
            Not Before: Nov 17 12:16:03 2025 GMT
            Not After : Nov 16 12:21:03 2026 GMT
        Subject: CN=3E1E0CEC9EF3099448CB1B2235EA86D085F80415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:81:44:4c:c8:bf:00:1f:2e:88:03:35:43:34:
                    c1:42:de:89:82:98:8c:54:08:a6:d5:6f:0c:09:f9:
                    47:7f:6d:b7:05:df:8f:87:17:10:a2:e4:6b:2a:32:
                    ba:09:98:81:c1:7d:e2:2a:eb:cc:5a:64:f4:c9:3e:
                    dd:60:7e:4f:a9:db:16:49:60:55:cd:97:09:cc:e2:
                    81:35:2d:19:cb:fb:ab:d8:f7:4f:6e:ae:a9:79:31:
                    4e:eb:97:17:29:5c:cf:65:80:9e:52:17:f8:83:bd:
                    80:30:1e:41:41:f4:0a:5b:2b:ce:aa:04:2e:68:1b:
                    70:81:a5:61:1c:14:8a:8b:75:c3:61:ce:73:10:c8:
                    40:c5:f3:ca:8a:18:50:58:77:03:10:69:5b:4e:7a:
                    c4:90:55:1f:01:c8:b5:51:30:f4:20:76:ef:37:94:
                    a0:58:73:69:90:cf:32:f0:a0:9c:e1:67:fe:9b:e3:
                    92:f0:52:bf:a6:a3:55:f8:34:2f:8c:22:f7:af:3d:
                    93:0e:24:77:ad:c6:a5:f3:37:d5:7d:f2:c2:42:17:
                    77:00:11:78:bd:9d:53:94:19:71:76:ae:6c:99:46:
                    91:24:74:b9:2f:b9:8c:02:0c:44:80:cf:86:89:5b:
                    06:26:bd:d4:c4:95:bf:71:5d:7d:c6:44:2e:17:81:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1E:0C:EC:9E:F3:09:94:48:CB:1B:22:35:EA:86:D0:85:F8:04:15
            X509v3 Authority Key Identifier:
                keyid:E1:32:E5:11:1E:D9:D5:0E:C9:2D:F7:DA:6C:45:79:2F:11:65:AB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E132E5111ED9D50EC92DF7DA6C45792F1165AB85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33372d3337203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3210::/37

    Signature Algorithm: sha256WithRSAEncryption
         7e:70:2c:41:22:78:f5:db:37:ff:c1:0b:31:a7:f8:f3:9e:4c:
         76:ae:77:ad:64:61:1f:44:1b:41:15:05:53:43:87:6a:23:92:
         72:1d:7b:01:2d:6b:75:6c:a7:e9:f9:29:c8:e5:29:78:9c:75:
         7d:66:d6:73:09:22:25:68:37:ea:3c:e6:29:8f:50:76:42:90:
         8d:21:b0:b3:af:c1:23:31:8d:f1:99:21:07:c6:e8:20:d5:0f:
         b2:8b:56:80:0f:aa:de:fd:66:00:79:ee:3a:a2:fd:61:72:00:
         ad:b0:d2:27:1e:03:4a:85:6a:88:e7:a9:87:63:5c:7d:0a:ae:
         ca:1a:ea:0d:70:ca:95:a0:6e:8f:d6:9f:74:1d:83:af:f1:5c:
         13:54:14:e6:95:72:bf:eb:02:f0:10:da:ac:9b:7f:eb:13:62:
         10:ae:6f:73:9f:ff:da:1c:b6:6c:56:1d:c4:1b:a1:19:cd:f0:
         4a:6c:50:83:17:87:94:50:0b:ff:85:9e:b3:df:d8:8f:ab:2b:
         c8:72:f0:ee:bb:a1:37:64:b3:f7:8b:4f:19:93:2b:31:0b:58:
         31:ea:b2:ff:e6:2e:96:44:c8:ef:6a:3c:6e:b5:e2:c4:ea:8b:
         b7:ac:9c:bb:6d:7e:6a:d7:d8:fe:bf:a8:e6:9c:e2:9f:4c:78:
         71:5e:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:26 2025 by rpki-client