This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/323830343a376538383a3a2f33322d3334203d3e20323731363330.roa
File:                     323830343a376538383a3a2f33322d3334203d3e20323731363330.roa (raw, json)
Hash identifier:          KE2uuUWLkCtJyf4VckhGAYHHmfZABJZ0Q1w5s8+5rVw=
Subject key identifier:   C2:DB:AB:B4:8E:38:71:7A:1F:71:61:4B:14:9F:C7:8C:92:0B:C8:2C
Certificate issuer:       /CN=E5202F9CD34E271BD75E3EFD06F888D3906752E7
Certificate serial:       14FE60371D7AC36A9D7BF483E00D03615DFE6630
Authority key identifier: E5:20:2F:9C:D3:4E:27:1B:D7:5E:3E:FD:06:F8:88:D3:90:67:52:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5202F9CD34E271BD75E3EFD06F888D3906752E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/323830343a376538383a3a2f33322d3334203d3e20323731363330.roa
Signing time:             Thu 13 Nov 2025 16:21:47 +0000
ROA not before:           Thu 13 Nov 2025 16:16:47 +0000
ROA not after:            Thu 12 Nov 2026 16:21:47 +0000
asID:                     271630
IP address blocks:        2804:7e88::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/E5202F9CD34E271BD75E3EFD06F888D3906752E7.crl
                          rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/E5202F9CD34E271BD75E3EFD06F888D3906752E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5202F9CD34E271BD75E3EFD06F888D3906752E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fe:60:37:1d:7a:c3:6a:9d:7b:f4:83:e0:0d:03:61:5d:fe:66:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5202F9CD34E271BD75E3EFD06F888D3906752E7
        Validity
            Not Before: Nov 13 16:16:47 2025 GMT
            Not After : Nov 12 16:21:47 2026 GMT
        Subject: CN=C2DBABB48E38717A1F71614B149FC78C920BC82C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:fb:6b:6d:49:28:49:a1:3d:ef:c3:e0:15:
                    6f:d9:e1:dc:a7:5f:0d:a3:c4:76:e5:62:00:06:34:
                    a8:b2:83:70:b1:fb:b3:9d:b5:9b:07:3c:21:d0:69:
                    73:b7:65:50:09:47:ed:c3:99:f3:f8:36:65:0a:0a:
                    6a:4f:89:53:16:ea:ae:19:fa:95:9c:13:5b:7f:b3:
                    f2:6a:be:72:38:3d:53:56:3e:45:04:d4:8e:b0:d3:
                    e1:34:76:9f:70:dc:1d:6a:bd:62:80:d4:a5:90:d9:
                    00:7c:a0:34:53:28:d1:80:be:f1:12:91:6e:e1:5d:
                    7f:17:9c:a5:30:84:92:2c:3d:fc:98:2c:15:4a:76:
                    26:c5:0a:21:3e:6e:70:86:87:09:01:8b:9b:06:00:
                    3b:60:f4:98:37:b0:69:49:d0:88:93:96:bb:77:3f:
                    7d:c0:33:09:44:23:13:f9:6f:ec:a7:41:d8:dd:cf:
                    60:c8:83:31:74:d3:cc:40:f5:d2:f1:f6:4d:05:a2:
                    92:43:8c:35:25:9a:ec:e8:78:b9:3f:cc:ab:a4:99:
                    42:59:9c:51:4e:fc:66:a5:fd:1b:15:a6:41:b1:e8:
                    9c:25:22:f9:d0:e1:84:f1:59:36:be:b1:6c:db:8a:
                    91:59:93:12:30:34:6f:7a:8d:0d:e2:c8:0f:02:90:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DB:AB:B4:8E:38:71:7A:1F:71:61:4B:14:9F:C7:8C:92:0B:C8:2C
            X509v3 Authority Key Identifier:
                keyid:E5:20:2F:9C:D3:4E:27:1B:D7:5E:3E:FD:06:F8:88:D3:90:67:52:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/E5202F9CD34E271BD75E3EFD06F888D3906752E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5202F9CD34E271BD75E3EFD06F888D3906752E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/323830343a376538383a3a2f33322d3334203d3e20323731363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:6a:04:c4:df:8c:76:44:02:a8:d4:95:c1:d7:e2:36:f9:25:
         fa:3b:8f:6b:55:7a:7c:4c:73:63:bf:3e:92:3c:86:ec:df:b6:
         24:2f:e5:48:7b:09:2a:db:dd:1c:e3:c5:3b:ea:c1:14:33:12:
         20:2b:cd:cd:79:b4:cd:34:a3:70:ef:bd:56:8b:b0:48:4c:81:
         b2:60:c6:b1:75:52:0d:ff:5a:1a:fe:2b:d8:bd:94:ec:43:3b:
         1d:56:15:9a:18:80:d1:da:1e:6d:99:1b:b0:da:b8:0c:f8:a1:
         7e:1f:f5:ac:40:e9:10:38:39:5b:e8:7d:1b:5c:75:9f:01:b6:
         a5:f4:1d:f9:25:77:92:83:fd:94:64:fb:9d:c6:e5:28:50:9d:
         96:f5:19:0a:b4:93:10:d2:3b:9d:1f:02:61:ed:b8:c1:48:3d:
         39:b2:4e:f2:37:e5:39:3f:76:05:43:a3:c0:d2:74:0c:82:e5:
         7f:bb:f9:63:6a:4d:52:2e:f4:7b:f7:11:a3:41:4b:fd:4b:d8:
         f3:1c:13:f7:e4:a3:44:15:99:e5:c0:e3:d7:ec:5d:18:50:a6:
         0a:c2:df:5b:bd:ff:20:c8:8b:b9:45:8b:5a:a9:03:b4:11:7e:
         38:16:39:71:63:50:e6:ba:99:b4:62:d3:f7:30:5e:23:31:ea:
         d9:c5:5c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:09 2025 by rpki-client