This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/323830343a313865343a3a2f33322d313238203d3e203631373631.roa
File:                     323830343a313865343a3a2f33322d313238203d3e203631373631.roa (raw, json)
Hash identifier:          18YwBbRWwHlR0eBUfqkps7utV5wOE3BbjJDUuXKbFIs=
Subject key identifier:   F8:F4:12:9A:CD:A1:D1:5D:46:33:0E:28:B4:A1:74:58:BB:76:8A:CB
Certificate issuer:       /CN=2F465B4D67B798728D086175292AF9A5CE3F28B9
Certificate serial:       5BB904A898B89AAD6636C7929908F2DA0BD32933
Authority key identifier: 2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/323830343a313865343a3a2f33322d313238203d3e203631373631.roa
Signing time:             Tue 11 Nov 2025 14:56:02 +0000
ROA not before:           Tue 11 Nov 2025 14:51:02 +0000
ROA not after:            Tue 10 Nov 2026 14:56:02 +0000
asID:                     61761
IP address blocks:        2804:18e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl
                          rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b9:04:a8:98:b8:9a:ad:66:36:c7:92:99:08:f2:da:0b:d3:29:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F465B4D67B798728D086175292AF9A5CE3F28B9
        Validity
            Not Before: Nov 11 14:51:02 2025 GMT
            Not After : Nov 10 14:56:02 2026 GMT
        Subject: CN=F8F4129ACDA1D15D46330E28B4A17458BB768ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:42:f3:da:13:f6:a4:23:6e:58:6e:e8:3a:
                    65:af:13:ec:50:96:a4:e4:da:8d:3f:df:00:e5:fa:
                    66:89:56:f2:b6:52:a6:36:17:c8:39:98:bf:7e:a5:
                    8a:7c:17:f1:83:2c:43:2c:f8:64:4f:55:64:10:54:
                    91:6f:22:f0:59:ec:f7:9a:66:bc:08:a9:a2:75:5d:
                    54:52:b6:39:5b:02:30:09:72:fc:24:64:c9:de:aa:
                    6d:bf:99:7d:93:d5:5d:c8:59:5c:a6:46:7d:cf:f6:
                    b6:c7:db:22:d4:a5:ae:f1:0e:25:f1:5b:53:3e:ce:
                    b1:a9:4b:11:e9:7b:a6:81:0c:97:3c:58:ca:15:e6:
                    7e:6c:ee:2a:d8:8c:02:c1:9b:2c:87:bb:11:7c:01:
                    d7:d2:23:1f:28:14:ea:2b:2a:60:d1:dd:9a:6b:c7:
                    2c:8a:5b:87:b6:33:5c:40:4c:e3:3e:36:f5:43:ce:
                    d9:09:0b:9e:fb:ea:16:eb:95:f3:fb:66:72:f2:eb:
                    6f:9d:3f:e9:b5:b9:c7:09:1b:39:88:f1:53:bc:89:
                    32:c9:22:31:bc:d6:e2:17:3d:71:76:ad:1e:3b:e9:
                    17:19:90:b5:2b:33:0b:d0:63:18:b0:7d:41:91:64:
                    13:be:39:f3:e9:d8:a3:fc:68:20:ce:55:b7:2b:07:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F4:12:9A:CD:A1:D1:5D:46:33:0E:28:B4:A1:74:58:BB:76:8A:CB
            X509v3 Authority Key Identifier:
                keyid:2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/323830343a313865343a3a2f33322d313238203d3e203631373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:21:e7:7b:fb:bf:c4:5a:11:9c:f7:eb:58:f5:fe:b3:16:
         02:b3:0a:58:14:44:0c:0e:16:ed:b3:a7:ff:21:aa:ad:c0:dd:
         2e:9f:3b:20:13:6a:97:61:37:15:30:bc:e1:e4:c0:50:87:eb:
         ff:90:80:fc:c0:b1:0f:0d:8b:66:27:03:b5:e8:00:ec:39:7c:
         87:3e:c4:51:99:4a:47:a5:1b:c6:b9:66:bb:ff:85:96:3f:30:
         f1:92:ec:19:ab:a1:bc:38:9d:4f:ba:1a:03:bc:e1:6d:76:1e:
         06:be:ae:da:ad:04:05:b6:4b:fd:e3:cc:b0:57:a1:9e:f2:0d:
         f9:6f:b5:30:fa:ce:72:ca:bf:c8:63:ef:06:41:10:0e:87:be:
         25:bc:74:94:39:79:d0:af:68:f4:9f:16:09:85:39:d0:8f:be:
         05:d9:a8:85:b5:6d:4b:d3:cf:d2:54:cb:4c:6d:e0:b2:a1:35:
         58:1b:41:29:e5:fb:6a:a8:48:9c:8e:4e:92:6f:1e:c8:71:75:
         39:a0:c9:2c:a4:5c:be:03:d3:1f:90:1d:5d:3c:31:a8:ef:43:
         b0:b0:a2:d9:c0:bd:6d:63:c4:23:18:08:60:9f:56:04:1e:58:
         0c:e2:8d:95:b3:af:d4:3b:7e:ed:72:16:c5:cb:46:7e:ea:92:
         8f:58:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:10 2025 by rpki-client