This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33322d3332203d3e20323638373933.roa
File:                     323830343a356163303a3a2f33322d3332203d3e20323638373933.roa (raw, json)
Hash identifier:          9u9MJyex/fZ9Eb+aIdhi2C10Lphxc+KK1W7nsKWXMl8=
Subject key identifier:   16:4D:6F:97:7E:CA:A5:A3:06:CF:63:8B:0B:20:37:59:31:12:29:57
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       204668DB10F8074F0B8C32562026C4DDDB6AAF2B
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33322d3332203d3e20323638373933.roa
Signing time:             Tue 18 Nov 2025 13:12:08 +0000
ROA not before:           Tue 18 Nov 2025 13:07:08 +0000
ROA not after:            Tue 17 Nov 2026 13:12:08 +0000
asID:                     268793
IP address blocks:        2804:5ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
                          rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:46:68:db:10:f8:07:4f:0b:8c:32:56:20:26:c4:dd:db:6a:af:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Nov 18 13:07:08 2025 GMT
            Not After : Nov 17 13:12:08 2026 GMT
        Subject: CN=164D6F977ECAA5A306CF638B0B20375931122957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0d:e9:4c:62:2d:1a:73:d2:33:cc:9d:b7:e4:
                    a5:b5:d0:bb:73:18:9b:3c:66:bb:90:92:4e:2f:d2:
                    4d:5f:92:dc:0d:e3:0d:b6:e6:17:dd:16:00:60:79:
                    ea:b9:2c:51:46:a3:f6:7a:7a:52:95:7a:8d:c3:04:
                    31:6d:ce:bd:b1:a9:e6:5c:ac:87:6a:fc:3c:87:9e:
                    c9:48:3a:1d:16:3b:8d:ec:96:79:82:a1:51:45:9f:
                    51:3a:f3:ac:f5:69:fd:57:ac:06:36:ab:bb:ba:f5:
                    7f:e8:24:ab:a6:c8:21:0a:10:87:29:b7:af:66:ab:
                    47:46:e1:ca:4d:33:4d:b8:65:28:65:f4:1c:de:e0:
                    d8:83:15:68:7d:06:5c:f7:0e:cf:ae:bf:9b:15:ee:
                    78:b9:5a:17:84:93:04:9c:38:dc:05:25:1d:f7:95:
                    fe:b3:9b:97:40:a2:5c:dd:d4:10:9d:7e:b5:40:44:
                    b4:2b:81:f0:77:76:d4:91:c8:11:dc:fb:a4:0e:3a:
                    67:b6:09:ff:08:a0:77:41:1c:1b:37:43:bf:e9:e4:
                    26:3e:35:26:cc:f7:bc:ca:b5:66:87:a6:1d:87:33:
                    ab:d7:ef:8c:79:e0:af:05:63:6e:d4:cb:91:59:73:
                    0e:e7:8a:96:3c:50:9c:57:22:cd:9f:e6:70:7b:3c:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4D:6F:97:7E:CA:A5:A3:06:CF:63:8B:0B:20:37:59:31:12:29:57
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33322d3332203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:64:54:7f:82:43:1a:03:96:73:69:06:37:a8:54:af:ab:e0:
         04:1f:d3:e4:78:84:d9:45:fe:15:eb:95:ca:37:4c:cb:13:6a:
         6f:40:7a:2a:83:ff:c9:88:c8:a5:f6:06:21:22:a6:30:0f:47:
         f8:9f:a2:bd:b1:ce:1a:aa:14:66:10:40:44:f3:4d:07:31:65:
         47:8b:48:38:03:e5:02:a6:7b:4d:85:18:36:7b:ba:2c:7c:f0:
         0b:78:27:63:c6:31:1a:94:e1:a5:21:44:a2:60:29:82:ed:f0:
         e0:73:12:88:1a:f3:f9:67:f8:e4:0b:91:98:4f:59:62:4e:4c:
         46:81:8b:7d:ce:5d:c2:b7:6e:46:05:e5:bb:64:e7:55:22:6d:
         e6:d4:3e:4d:9f:de:c1:f1:4e:ba:e9:8e:67:56:c7:a8:12:60:
         4f:c0:d3:93:2e:8b:c5:5d:6f:06:d0:8f:69:6b:56:86:00:00:
         09:74:59:8d:cc:7e:07:6a:4a:ff:67:9f:57:9a:e7:5b:79:2e:
         ba:e4:f5:92:eb:98:59:85:24:a2:2f:3b:b0:9c:6c:79:b1:81:
         da:eb:2f:e4:09:8e:b2:d0:4c:f0:f1:c7:49:c4:15:ef:e6:6a:
         d7:35:f5:7f:6c:7d:6d:4f:f5:f8:ac:f1:7c:92:2a:f5:6b:9e:
         6d:12:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:00:47 2025 by rpki-client