This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/323830343a3231303a3a2f33322d3333203d3e20323632373930.roa
File:                     323830343a3231303a3a2f33322d3333203d3e20323632373930.roa (raw, json)
Hash identifier:          83M9H/OT9DLrhx0qRN1ZK/IezdTG110OEIJiCdyMXSI=
Subject key identifier:   A6:D2:6B:20:08:73:7D:0A:8C:53:39:08:9D:57:40:1D:72:60:E6:A8
Certificate issuer:       /CN=67261DDE7301C73857B84C1EFD17E1F8573F23E5
Certificate serial:       3C2322DAF9D33B406704A17E7B7DC66CEB221A99
Authority key identifier: 67:26:1D:DE:73:01:C7:38:57:B8:4C:1E:FD:17:E1:F8:57:3F:23:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/323830343a3231303a3a2f33322d3333203d3e20323632373930.roa
Signing time:             Tue 25 Nov 2025 18:15:28 +0000
ROA not before:           Tue 25 Nov 2025 18:10:28 +0000
ROA not after:            Tue 24 Nov 2026 18:15:28 +0000
asID:                     262790
IP address blocks:        2804:210::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.crl
                          rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:23:22:da:f9:d3:3b:40:67:04:a1:7e:7b:7d:c6:6c:eb:22:1a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67261DDE7301C73857B84C1EFD17E1F8573F23E5
        Validity
            Not Before: Nov 25 18:10:28 2025 GMT
            Not After : Nov 24 18:15:28 2026 GMT
        Subject: CN=A6D26B2008737D0A8C5339089D57401D7260E6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:89:55:65:a6:12:ab:06:d1:b0:a0:89:58:
                    c5:f7:76:ba:32:53:e0:a9:1a:38:62:da:13:c8:25:
                    ee:b7:8a:94:46:3e:c1:21:49:fb:a5:3c:bc:e9:27:
                    08:83:34:69:6c:bf:b6:ee:84:91:a4:d2:09:5c:8c:
                    cc:4d:e5:ad:0c:9d:13:e2:3f:6a:24:64:ea:c7:82:
                    48:7f:8f:71:3a:6f:fc:47:eb:38:53:5f:43:dc:16:
                    f1:e0:70:5a:57:a3:d9:55:bd:ec:f7:01:7c:62:bb:
                    84:b0:66:e0:3c:c8:f8:ab:b8:4e:44:a3:84:78:a4:
                    59:b1:8c:75:95:9d:02:9f:3b:ac:82:4d:6f:d0:53:
                    ac:0a:24:33:0c:93:3f:18:79:08:ff:49:21:3d:5d:
                    50:26:36:9f:30:c0:0f:57:9d:92:23:57:8e:d1:aa:
                    49:5a:10:0c:35:31:be:55:2d:48:e5:1d:d5:f7:9d:
                    ea:0e:f0:0d:87:1d:60:49:b5:00:f5:6a:7b:a1:e6:
                    85:cc:73:93:ac:7d:34:76:7d:6a:2d:b4:38:aa:9d:
                    9f:e6:ee:f2:d6:b4:0c:d5:5e:a7:8d:31:30:2c:db:
                    6e:68:70:75:70:12:49:c3:3c:6c:d3:c7:c3:91:26:
                    b1:f6:bc:25:b9:59:39:6f:00:57:7f:68:f8:94:60:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D2:6B:20:08:73:7D:0A:8C:53:39:08:9D:57:40:1D:72:60:E6:A8
            X509v3 Authority Key Identifier:
                keyid:67:26:1D:DE:73:01:C7:38:57:B8:4C:1E:FD:17:E1:F8:57:3F:23:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/67261DDE7301C73857B84C1EFD17E1F8573F23E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67261DDE7301C73857B84C1EFD17E1F8573F23E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyVz9GUmpChJJxwGEbaeiC7vxn55MWaAnCwfeFBmpNpB/0/323830343a3231303a3a2f33322d3333203d3e20323632373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:210::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:39:60:9b:49:ba:40:da:57:9b:89:b7:f8:17:7f:03:ec:
         34:0d:2c:ae:8a:c2:3c:0c:e5:14:50:2b:9e:f2:c1:ca:b5:49:
         d6:28:de:a8:c0:05:94:fc:47:f0:4b:9f:73:4b:4f:6a:ae:24:
         3e:b0:9a:ce:be:b1:3b:4f:2c:4a:d4:3d:20:97:0a:7e:ce:c0:
         3f:08:6d:0f:c2:ac:80:f5:89:41:c5:0e:1e:84:e3:df:9f:83:
         6c:fd:4e:ee:d7:54:ea:36:9a:ef:47:54:6d:e1:e2:8a:3b:50:
         8c:9c:c9:3c:9a:9c:18:69:a8:e8:fc:9b:43:0e:8f:3d:53:a6:
         03:c9:86:a9:12:82:7d:42:e2:34:2a:8f:94:a0:5e:b0:f8:b3:
         34:76:49:c0:7e:b3:d5:59:ac:d0:40:f7:63:cb:cc:40:fb:85:
         e8:2f:81:c8:98:ca:70:86:4c:ef:f3:7f:7b:96:5d:5f:f5:85:
         ca:a3:99:e8:0b:53:33:56:a0:16:19:83:24:18:f7:0b:f6:0d:
         9a:e5:0a:3b:f3:fd:ab:3f:bf:de:9b:fb:11:41:da:77:43:56:
         65:76:08:c8:13:27:9a:a4:f2:3b:2e:dc:f6:ce:26:b4:d2:35:
         ba:8a:23:4a:a0:7c:1a:ef:c6:21:43:cc:97:79:be:62:b9:64:
         83:2b:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:53:48 2025 by rpki-client