This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/323830343a6566633a3a2f33332d3333203d3e20323633353631.roa
File:                     323830343a6566633a3a2f33332d3333203d3e20323633353631.roa (raw, json)
Hash identifier:          NdKMGeqdXLBXImoZJmXMHDFfvM8YQCybvOFeQTzca5U=
Subject key identifier:   E2:5A:86:12:51:13:18:3D:73:0E:B7:BF:4F:3B:CA:10:CE:6F:45:EB
Certificate issuer:       /CN=4D703EAE3998947027B5655C14708E2E67520077
Certificate serial:       1D7967E402E0889FB45727151959098C150747F3
Authority key identifier: 4D:70:3E:AE:39:98:94:70:27:B5:65:5C:14:70:8E:2E:67:52:00:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/323830343a6566633a3a2f33332d3333203d3e20323633353631.roa
Signing time:             Wed 03 Dec 2025 20:56:40 +0000
ROA not before:           Wed 03 Dec 2025 20:51:40 +0000
ROA not after:            Wed 02 Dec 2026 20:56:40 +0000
asID:                     263561
IP address blocks:        2804:efc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.crl
                          rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:79:67:e4:02:e0:88:9f:b4:57:27:15:19:59:09:8c:15:07:47:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D703EAE3998947027B5655C14708E2E67520077
        Validity
            Not Before: Dec  3 20:51:40 2025 GMT
            Not After : Dec  2 20:56:40 2026 GMT
        Subject: CN=E25A86125113183D730EB7BF4F3BCA10CE6F45EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6b:0f:62:7b:81:5b:a3:3c:5b:32:a6:fb:4b:
                    f7:3f:03:14:f3:eb:3b:ab:6d:93:7a:a2:02:78:b6:
                    a1:1a:22:b1:6a:92:22:c8:0f:bd:d5:bc:c1:5c:63:
                    c2:f8:e6:fe:d6:a9:bf:ee:89:59:4c:f8:94:ed:b5:
                    5c:93:3a:ea:8d:06:62:b0:b8:17:50:6f:64:89:69:
                    de:ce:0f:8b:76:c7:88:a1:f7:dd:55:49:cb:cc:fe:
                    ce:74:3e:0e:1e:0b:0d:03:cf:1f:6a:d3:16:57:d7:
                    52:05:55:3d:34:87:0a:ab:a3:77:cd:70:ec:a8:3b:
                    9c:83:e8:2e:b7:8c:b6:15:ee:29:fc:de:f5:0a:cf:
                    ca:9b:71:22:d3:a8:7c:e3:d7:50:f5:ca:d9:99:75:
                    05:44:fa:bf:cc:be:a0:70:7d:97:fb:33:8d:ac:39:
                    3e:83:94:e2:af:34:67:3d:86:b7:21:13:fa:b3:d6:
                    27:c1:76:c3:76:25:8a:ee:25:2d:b8:41:93:d5:57:
                    55:c4:07:2d:d2:e0:ef:9a:8e:e6:77:fa:0a:89:0f:
                    25:aa:b0:78:18:1d:80:e7:44:68:3c:49:50:4f:74:
                    cc:87:a7:92:e3:96:ed:af:4e:1c:51:f8:63:9f:e0:
                    7b:ae:82:03:14:ff:a9:ad:ff:79:01:c8:33:e1:4f:
                    4e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5A:86:12:51:13:18:3D:73:0E:B7:BF:4F:3B:CA:10:CE:6F:45:EB
            X509v3 Authority Key Identifier:
                keyid:4D:70:3E:AE:39:98:94:70:27:B5:65:5C:14:70:8E:2E:67:52:00:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/4D703EAE3998947027B5655C14708E2E67520077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D703EAE3998947027B5655C14708E2E67520077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWD5sT3TvDQrWgSAfd5bpccR3FW1urgqCxsYJvXaVQ5S/0/323830343a6566633a3a2f33332d3333203d3e20323633353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:efc::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:da:e6:a4:20:61:4c:0c:ee:0b:71:79:80:ff:bf:17:1f:0b:
         54:fc:73:ea:d3:88:5e:8e:0a:8b:39:5d:a5:44:b1:78:81:19:
         f5:45:0b:29:98:e2:66:57:42:5b:64:e0:8e:bd:0b:ba:73:03:
         38:fc:ad:56:03:66:47:ca:4c:50:fb:a8:2f:8c:ca:b6:2a:13:
         28:36:12:25:39:ba:6f:10:29:20:47:23:e1:40:50:36:f7:bc:
         f9:3e:be:61:83:b2:8e:7d:00:0b:35:fd:c2:d9:bb:cd:30:9d:
         20:cf:62:3d:ce:f3:ba:40:7f:f6:54:1e:06:7f:00:37:27:24:
         cf:ce:8b:f5:12:f4:a6:6b:ba:c3:99:da:ae:26:78:a2:d2:80:
         fe:40:6e:21:c5:2d:e1:c2:61:11:0c:f0:e7:f7:a5:05:3b:36:
         d3:7c:f0:d6:92:51:c8:4a:95:80:46:2c:f5:ea:a7:6e:90:4d:
         81:c5:72:02:78:13:96:83:98:d6:14:54:d9:b4:f3:d7:ae:b4:
         bf:f5:56:ff:58:ae:a0:13:c7:f7:6a:e8:ed:7f:34:ca:2c:95:
         bf:c4:b3:5e:87:96:47:33:8c:c2:ef:32:60:e1:7f:ef:d1:26:
         1a:9d:b3:22:69:93:ca:c3:db:35:87:bf:07:e2:91:1f:9e:2c:
         1f:70:32:76
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHXln5ALgiJ+0VycVGVkJjBUHR/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3MDNFQUUzOTk4OTQ3MDI3QjU2NTVDMTQ3MDhFMkU2
NzUyMDA3NzAeFw0yNTEyMDMyMDUxNDBaFw0yNjEyMDIyMDU2NDBaMDMxMTAvBgNV
BAMTKEUyNUE4NjEyNTExMzE4M0Q3MzBFQjdCRjRGM0JDQTEwQ0U2RjQ1RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnaw9ie4FbozxbMqb7S/c/AxTz
6zurbZN6ogJ4tqEaIrFqkiLID73VvMFcY8L45v7Wqb/uiVlM+JTttVyTOuqNBmKw
uBdQb2SJad7OD4t2x4ih991VScvM/s50Pg4eCw0Dzx9q0xZX11IFVT00hwqro3fN
cOyoO5yD6C63jLYV7in83vUKz8qbcSLTqHzj11D1ytmZdQVE+r/MvqBwfZf7M42s
OT6DlOKvNGc9hrchE/qz1ifBdsN2JYruJS24QZPVV1XEBy3S4O+ajuZ3+gqJDyWq
sHgYHYDnRGg8SVBPdMyHp5Ljlu2vThxR+GOf4HuuggMU/6mt/3kByDPhT05xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4lqGElETGD1zDre/TzvKEM5vReswHwYDVR0j
BBgwFoAUTXA+rjmYlHAntWVcFHCOLmdSAHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFdENXNUM1R2RFFyV2dTQWZkNWJwY2NSM0ZXMXVyZ3FDeHNZSnZYYVZR
NVMvMC80RDcwM0VBRTM5OTg5NDcwMjdCNTY1NUMxNDcwOEUyRTY3NTIwMDc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENzAzRUFFMzk5ODk0NzAy
N0I1NjU1QzE0NzA4RTJFNjc1MjAwNzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RXRDVzVDNUdkRRcldnU0FmZDVicGNjUjNGVzF1cmdxQ3hzWUp2WGFWUTVTLzAv
MzIzODMwMzQzYTY1NjY2MzNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMzM1
MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEDvwAMA0GCSqGSIb3DQEBCwUAA4IBAQBx2uakIGFM
DO4LcXmA/78XHwtU/HPq04hejgqLOV2lRLF4gRn1RQspmOJmV0JbZOCOvQu6cwM4
/K1WA2ZHykxQ+6gvjMq2KhMoNhIlObpvECkgRyPhQFA297z5Pr5hg7KOfQALNf3C
2bvNMJ0gz2I9zvO6QH/2VB4GfwA3JyTPzov1EvSma7rDmdquJnii0oD+QG4hxS3h
wmERDPDn96UFOzbTfPDWklHISpWARiz16qdukE2BxXICeBOWg5jWFFTZtPPXrrS/
9Vb/WK6gE8f3aujtfzTKLJW/xLNeh5ZHM4zC7zJg4X/v0SYanbMiaZPKw9s1h78H
4pEfniwfcDJ2
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:44:28 2025 by rpki-client