This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d313238203d3e203631373834.roa
File:                     323830343a313934383a3a2f33322d313238203d3e203631373834.roa (raw, json)
Hash identifier:          TGqKcq5hhQvs292+DCyMD6YCLTrai4dDENZfetKhjsc=
Subject key identifier:   4A:73:9C:00:A4:E7:CD:F5:E5:C2:55:2A:71:AF:57:21:66:CA:B6:41
Certificate issuer:       /CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
Certificate serial:       481B2FD02E393B22B020A9D1FAAF2CBC126C63D2
Authority key identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d313238203d3e203631373834.roa
Signing time:             Thu 04 Dec 2025 14:35:00 +0000
ROA not before:           Thu 04 Dec 2025 14:30:00 +0000
ROA not after:            Thu 03 Dec 2026 14:35:00 +0000
asID:                     61784
IP address blocks:        2804:1948::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl
                          rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1b:2f:d0:2e:39:3b:22:b0:20:a9:d1:fa:af:2c:bc:12:6c:63:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
        Validity
            Not Before: Dec  4 14:30:00 2025 GMT
            Not After : Dec  3 14:35:00 2026 GMT
        Subject: CN=4A739C00A4E7CDF5E5C2552A71AF572166CAB641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:5b:8c:67:a1:c7:d4:37:47:d4:4b:3d:3d:
                    52:c9:ed:ae:7f:f4:49:6b:90:99:3d:0d:a1:2d:c1:
                    9b:7f:2f:5d:25:e6:cd:67:c8:da:e7:a9:a1:8a:df:
                    b0:0e:61:26:f6:82:77:9e:bf:89:73:c6:27:62:d4:
                    16:d9:93:3b:b3:d6:d8:11:74:af:88:7e:8f:6e:a0:
                    f9:63:83:ec:5d:65:ab:73:b5:10:fb:fd:3a:37:08:
                    28:4a:41:d1:90:c6:86:54:ae:b1:f7:09:96:50:b3:
                    e7:68:60:68:16:be:8b:9e:c6:a8:0d:10:bb:d8:35:
                    df:f5:43:cb:03:7f:b1:1c:be:62:f3:17:7b:cf:50:
                    66:88:6c:c7:3f:48:c6:a2:84:fd:e1:8f:21:d4:0e:
                    a1:50:d2:d0:88:18:ea:57:af:7c:c5:3c:fe:75:bb:
                    22:88:f4:47:0e:bd:bc:87:96:8f:03:c4:10:b6:fe:
                    65:41:94:37:2e:20:77:7f:97:cf:94:68:0c:63:75:
                    1c:64:39:39:34:e0:61:ce:8d:53:88:3d:f9:8b:3c:
                    4a:0f:05:58:f5:b2:9f:2f:1d:0a:56:3e:23:33:fa:
                    5d:08:67:c6:d4:95:a0:6d:02:4a:ea:ac:d1:da:46:
                    2a:2a:a7:71:25:10:13:8d:ee:e2:3d:09:9a:29:56:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:73:9C:00:A4:E7:CD:F5:E5:C2:55:2A:71:AF:57:21:66:CA:B6:41
            X509v3 Authority Key Identifier:
                keyid:32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d313238203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1948::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:be:f6:36:61:07:35:f2:ae:56:6d:b7:4b:a5:89:7c:c5:
         4e:68:0a:d3:03:89:26:b7:fa:68:79:26:ea:47:37:85:63:3b:
         07:c6:d5:cd:12:89:d4:10:ca:76:a5:76:a3:87:19:02:a8:0f:
         61:7d:19:6f:b0:9a:ac:b0:8e:7a:29:52:bc:a0:16:af:7d:f1:
         4e:6d:07:72:90:0f:63:39:31:a0:fc:33:c7:75:30:d1:89:72:
         f5:3c:fe:42:e2:8c:30:e3:b7:db:4b:b4:7d:38:a1:1c:db:34:
         8f:87:3d:60:46:17:11:38:57:6d:7b:5c:7a:83:18:f7:d1:c7:
         0c:bf:dd:f3:e8:2b:8e:3d:91:27:92:55:0b:cf:1a:9c:ee:c9:
         0f:08:fb:9f:9d:20:64:ed:0b:3a:a3:84:54:66:0f:20:b9:e3:
         b8:91:1f:34:07:7c:e2:84:58:0f:60:ce:cc:b1:21:eb:1b:9b:
         68:d1:4d:65:61:3c:e1:15:bd:a1:92:7d:79:27:7c:ee:b5:1d:
         8d:3f:4b:35:03:7b:fb:61:aa:22:58:02:1b:b4:36:3e:32:8a:
         b6:71:a2:dc:2c:98:ca:20:bb:b2:db:8b:bf:bd:f4:e1:73:f9:
         ef:ab:a5:79:94:4d:2a:c7:b2:fa:70:d6:36:f9:d4:ca:9e:5b:
         43:f4:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:04 2025 by rpki-client