This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/323830343a336138383a3a2f33322d3438203d3e20323636303934.roa
File:                     323830343a336138383a3a2f33322d3438203d3e20323636303934.roa (raw, json)
Hash identifier:          pxPy16PokQ5gy2uTbqgHlN5waRGMbmwpAh2Ssp2PfJE=
Subject key identifier:   E2:9B:2B:53:D8:60:04:78:94:EC:91:1D:FB:E9:DB:A5:03:84:04:E2
Certificate issuer:       /CN=B4F095052B6191331B71B1EC48EA099F01F7040A
Certificate serial:       52D9B4F7676EB4266259E44FDACFD4239E4F752D
Authority key identifier: B4:F0:95:05:2B:61:91:33:1B:71:B1:EC:48:EA:09:9F:01:F7:04:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F095052B6191331B71B1EC48EA099F01F7040A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/323830343a336138383a3a2f33322d3438203d3e20323636303934.roa
Signing time:             Mon 17 Nov 2025 17:16:50 +0000
ROA not before:           Mon 17 Nov 2025 17:11:50 +0000
ROA not after:            Mon 16 Nov 2026 17:16:50 +0000
asID:                     266094
IP address blocks:        2804:3a88::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/B4F095052B6191331B71B1EC48EA099F01F7040A.crl
                          rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/B4F095052B6191331B71B1EC48EA099F01F7040A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F095052B6191331B71B1EC48EA099F01F7040A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d9:b4:f7:67:6e:b4:26:62:59:e4:4f:da:cf:d4:23:9e:4f:75:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F095052B6191331B71B1EC48EA099F01F7040A
        Validity
            Not Before: Nov 17 17:11:50 2025 GMT
            Not After : Nov 16 17:16:50 2026 GMT
        Subject: CN=E29B2B53D860047894EC911DFBE9DBA5038404E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:5d:fc:60:11:c2:b7:66:8e:76:57:9b:b6:
                    6b:ed:e0:df:c9:1a:5f:52:b4:70:3f:d6:d7:90:06:
                    69:2f:d5:b2:bd:d0:b6:c1:e9:5b:8b:98:0b:75:0e:
                    98:e0:80:08:b8:0e:05:74:b3:00:ba:f6:d9:2b:ab:
                    ec:93:0c:d6:ae:7a:21:c7:d9:d5:9a:21:2d:77:04:
                    53:66:ce:b8:fe:be:f3:08:a6:97:20:1d:25:78:58:
                    93:77:9d:80:cf:82:65:4c:75:a9:da:10:8e:ec:1d:
                    be:9d:49:2c:96:15:f3:27:53:91:63:6a:c1:07:6d:
                    82:58:99:9a:fd:a5:d5:e4:b8:6e:3a:c2:21:d0:b8:
                    d3:d9:94:78:72:62:9c:9f:8b:9e:82:df:e0:37:28:
                    12:8b:db:7f:6c:18:eb:19:a4:5f:26:aa:05:71:27:
                    ef:7f:2d:41:dc:c3:5e:cf:3f:34:3d:ef:da:66:98:
                    c6:2a:63:bd:e3:28:99:41:88:b6:f4:36:ff:97:a5:
                    58:d3:34:a2:d5:a7:05:02:af:69:ce:88:e5:e5:f7:
                    bc:6f:14:8e:8b:3d:b1:68:75:ec:09:bb:e1:a5:97:
                    a1:db:7b:b7:e2:43:e4:7a:c0:df:69:9d:7d:32:4a:
                    3c:ae:cd:3a:ad:1a:2f:c6:c0:1e:7c:c7:23:fc:b3:
                    f5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:2B:53:D8:60:04:78:94:EC:91:1D:FB:E9:DB:A5:03:84:04:E2
            X509v3 Authority Key Identifier:
                keyid:B4:F0:95:05:2B:61:91:33:1B:71:B1:EC:48:EA:09:9F:01:F7:04:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/B4F095052B6191331B71B1EC48EA099F01F7040A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F095052B6191331B71B1EC48EA099F01F7040A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/323830343a336138383a3a2f33322d3438203d3e20323636303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a88::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:8e:8b:8f:10:15:26:9a:72:05:95:08:d1:d0:3e:f3:fd:60:
         d9:3f:62:90:4f:dc:42:12:c3:3d:73:73:95:1d:f2:40:51:a4:
         5e:a7:d7:c1:3c:4a:75:1b:87:c3:56:55:fb:3c:0d:da:3c:e1:
         07:49:57:b3:68:6c:92:86:e7:50:02:40:40:3d:cc:03:f0:6d:
         3b:dc:35:78:42:a8:8c:d2:30:1c:64:ed:63:bf:46:c3:3d:de:
         43:54:19:65:d6:70:ed:aa:0a:f6:b1:77:d9:45:2a:a2:f5:f0:
         f7:21:ca:e0:2d:17:90:24:e3:66:fe:df:aa:1f:d6:62:d8:5b:
         26:cb:ff:47:bd:38:0d:cb:f6:a3:29:e4:82:79:0d:66:c8:68:
         53:53:02:f9:5c:bc:6e:3e:94:33:f4:30:32:62:21:81:de:3a:
         ca:29:66:0a:88:0c:f0:e1:0a:96:87:4e:79:11:d6:8c:5d:cb:
         6f:bc:ce:20:fd:d9:33:0a:c3:53:15:18:52:04:d5:d2:fa:c6:
         b8:56:1a:0b:66:bf:ae:49:4e:cb:4d:10:cb:35:7a:24:34:bb:
         3b:35:98:32:9a:c3:58:2d:84:32:f5:9c:57:7f:cf:08:fd:16:
         dd:72:fd:24:21:44:5d:1d:48:88:22:04:40:ee:f2:31:6b:2a:
         15:c7:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:09 2025 by rpki-client