This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3438203d3e20323733333530.roa
File:                     323830343a386435343a3a2f33322d3438203d3e20323733333530.roa (raw, json)
Hash identifier:          iKhZ9KokUcfIg5JLe4zTyBgv/gp+WtU6MBaPXrlEWKM=
Subject key identifier:   E5:27:AE:79:3D:54:17:8D:53:C3:DB:91:F6:20:E1:70:05:63:BE:F6
Certificate issuer:       /CN=613FAA413557F145002B707154580B79D61AF413
Certificate serial:       391AC0DD3FF5A5C1F73C292B3741A8F25C032ECA
Authority key identifier: 61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3438203d3e20323733333530.roa
Signing time:             Mon 10 Nov 2025 17:36:09 +0000
ROA not before:           Mon 10 Nov 2025 17:31:09 +0000
ROA not after:            Mon 09 Nov 2026 17:36:09 +0000
asID:                     273350
IP address blocks:        2804:8d54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl
                          rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1a:c0:dd:3f:f5:a5:c1:f7:3c:29:2b:37:41:a8:f2:5c:03:2e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613FAA413557F145002B707154580B79D61AF413
        Validity
            Not Before: Nov 10 17:31:09 2025 GMT
            Not After : Nov  9 17:36:09 2026 GMT
        Subject: CN=E527AE793D54178D53C3DB91F620E1700563BEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:ff:9a:2e:29:75:e7:09:18:3f:51:a1:e6:
                    7a:3b:88:63:95:58:65:6e:4c:fe:5b:b5:d4:d7:d1:
                    88:72:be:3f:78:15:68:a9:ca:3f:65:77:1a:3c:0b:
                    c6:34:ca:00:3b:b4:22:cd:c4:ec:67:fe:d6:b8:3d:
                    35:86:61:6c:65:74:c4:78:40:8e:fc:ee:61:8e:6e:
                    57:0b:09:38:b8:83:15:85:82:71:0b:fa:4e:44:20:
                    e6:0e:b4:03:62:4c:2a:13:0d:4b:36:e5:d6:1d:fa:
                    6f:ac:f8:37:2d:65:13:d2:53:cf:64:b3:7f:b3:75:
                    cf:0a:97:eb:7c:6e:65:00:cf:cb:b2:b1:42:12:da:
                    da:89:5e:6e:94:6a:0a:f9:8d:0a:98:8e:a4:c3:a6:
                    8d:f8:85:40:aa:6b:f2:98:85:75:99:d9:30:35:48:
                    1f:41:7e:ac:52:47:7f:99:ea:c9:a6:cf:ae:e0:a7:
                    70:1b:48:fc:8f:cb:c1:c2:aa:c5:1e:68:f5:20:ca:
                    b4:26:d9:80:66:43:48:ed:79:32:cb:34:41:42:63:
                    81:3d:4a:02:69:b0:a2:09:50:a1:1c:9e:1b:5a:41:
                    ed:54:66:5a:03:94:50:22:b1:98:ca:d0:7d:fb:6b:
                    f9:0b:23:ca:83:2f:d9:63:39:b2:a5:77:cc:33:de:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:27:AE:79:3D:54:17:8D:53:C3:DB:91:F6:20:E1:70:05:63:BE:F6
            X509v3 Authority Key Identifier:
                keyid:61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3438203d3e20323733333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:4e:ea:82:77:5b:1d:3d:bb:cc:36:64:42:7e:8b:fb:9f:18:
         65:05:f8:93:15:64:a6:95:cc:08:14:65:79:39:ba:67:ca:4a:
         d5:61:93:05:b3:84:9a:ab:8a:d0:57:71:c5:60:91:f4:c8:81:
         b6:8e:c9:b0:0d:58:0c:eb:77:2a:f0:6b:35:10:d2:19:58:fd:
         08:85:34:f3:40:7b:43:ed:c5:e5:7a:36:9c:6e:b7:42:21:d9:
         4d:cb:cd:88:40:ea:61:87:b3:2c:7c:9c:07:27:95:d6:e7:16:
         e3:95:f2:22:26:e5:bb:37:6f:ca:58:be:a5:09:19:bd:a3:89:
         4d:b8:70:ec:ce:8b:2a:49:47:c2:b8:d2:18:95:70:cf:13:be:
         fc:7e:ed:06:d3:a6:9d:2d:fa:e3:ba:57:51:a7:47:0b:7f:6d:
         91:c6:3f:3e:67:ce:68:a5:49:68:a0:a8:00:3e:e2:58:2a:81:
         24:b2:7d:cd:8e:cc:15:92:b5:5e:ee:83:ea:5d:9f:df:d5:73:
         bd:19:6d:69:1d:5b:bf:fa:3d:42:4f:be:ad:31:06:55:80:a6:
         71:5e:7e:41:36:57:63:a4:e2:32:f9:f7:85:8e:ea:3f:29:a5:
         c2:f2:f5:7b:fd:b0:14:a4:09:d0:24:ea:93:f0:df:fd:f1:c5:
         dc:6b:e1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:35:10 2025 by rpki-client