This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/323830343a3638343a3a2f34382d3438203d3e203533313037.roa
File:                     323830343a3638343a3a2f34382d3438203d3e203533313037.roa (raw, json)
Hash identifier:          YJ8XwjT15Aa8YL4msTYoaNbzuo8DxeuC/lqwwyqJv0k=
Subject key identifier:   55:FE:AC:54:52:93:E3:3F:95:64:A9:35:94:32:C8:20:2F:11:D9:CF
Certificate issuer:       /CN=CA79EC19D05A9E6082E976C95B92CAA0660C3D77
Certificate serial:       3947E5547275AB620AB799AA644F9354C638A580
Authority key identifier: CA:79:EC:19:D0:5A:9E:60:82:E9:76:C9:5B:92:CA:A0:66:0C:3D:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/323830343a3638343a3a2f34382d3438203d3e203533313037.roa
Signing time:             Thu 04 Dec 2025 19:24:25 +0000
ROA not before:           Thu 04 Dec 2025 19:19:25 +0000
ROA not after:            Thu 03 Dec 2026 19:24:25 +0000
asID:                     53107
IP address blocks:        2804:684::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.crl
                          rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:47:e5:54:72:75:ab:62:0a:b7:99:aa:64:4f:93:54:c6:38:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA79EC19D05A9E6082E976C95B92CAA0660C3D77
        Validity
            Not Before: Dec  4 19:19:25 2025 GMT
            Not After : Dec  3 19:24:25 2026 GMT
        Subject: CN=55FEAC545293E33F9564A9359432C8202F11D9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:91:b5:4a:86:d1:5b:01:80:d6:bc:a5:25:
                    e8:7c:fb:36:fb:7a:b1:dc:e0:5f:c5:29:c2:af:73:
                    e5:d6:7a:b0:4a:de:50:61:e0:8a:bb:03:9a:53:57:
                    df:54:68:1a:27:68:f3:3e:cf:ff:c3:96:4e:78:8c:
                    37:98:9c:34:de:76:a7:88:09:aa:64:84:14:bd:65:
                    25:ef:ae:2f:5f:4e:f1:7d:43:17:2b:a1:9d:8e:be:
                    d0:89:aa:87:e9:33:e5:79:70:3f:bd:8a:74:3d:66:
                    9b:7b:53:36:bd:ad:03:fd:43:f1:f1:9b:ab:87:62:
                    7b:ba:7b:2a:f1:a5:3b:48:23:05:73:f0:a1:6d:db:
                    71:30:de:94:81:70:99:d8:81:b7:85:8b:b9:87:ec:
                    b2:54:13:d2:0a:51:aa:bf:8e:18:7c:ba:67:70:0c:
                    4a:43:c0:72:79:8c:6d:85:fd:10:6f:63:ea:16:50:
                    24:3a:83:c5:95:03:0c:a0:19:a6:dc:2c:11:9f:8e:
                    c7:b0:e0:53:24:f9:02:e9:b0:52:da:a1:3a:97:50:
                    3e:38:26:b7:7d:50:08:40:90:66:b4:9c:35:b3:ca:
                    0a:fa:7a:a5:79:9e:3b:d5:3d:55:71:21:a7:87:45:
                    f9:f8:fc:63:34:f6:50:d1:61:e9:bd:09:cd:fd:6a:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FE:AC:54:52:93:E3:3F:95:64:A9:35:94:32:C8:20:2F:11:D9:CF
            X509v3 Authority Key Identifier:
                keyid:CA:79:EC:19:D0:5A:9E:60:82:E9:76:C9:5B:92:CA:A0:66:0C:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/323830343a3638343a3a2f34382d3438203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:684::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:1e:ea:dc:39:a0:a4:a6:6c:fd:a7:c2:9b:90:1c:01:11:09:
         a4:61:0d:e7:bc:8b:c5:7c:6e:de:91:bf:a1:2e:74:e9:12:ae:
         3a:ab:b8:b9:d3:af:32:03:64:6a:8f:fa:31:ba:db:3b:62:8b:
         ab:4b:2d:9a:8f:b9:12:9e:e3:2d:59:36:6d:ee:6d:be:f8:40:
         5a:92:31:00:5b:3d:96:85:2f:bb:16:f5:ba:33:f6:b3:1d:f0:
         c5:72:a5:11:98:7e:2f:8b:a2:28:70:7e:ff:ec:91:5d:6a:cb:
         02:28:e5:35:40:9d:48:62:c7:f1:ff:88:d8:58:b5:71:6e:90:
         b7:2e:ba:cc:25:0b:88:e4:02:5a:02:2a:fa:98:37:1f:aa:d7:
         7e:c0:a5:5b:df:0e:79:e4:a6:8d:20:d5:6f:e4:3c:f8:fd:4c:
         cd:f1:bd:50:26:a2:e9:f4:59:16:8b:6f:ef:82:18:2c:c6:7f:
         66:4e:91:e4:c1:2e:e7:15:e1:d9:23:ea:04:2a:9d:9b:32:30:
         92:c1:13:ec:90:31:53:97:df:bf:b8:7b:c0:83:5f:c2:aa:c6:
         2e:30:7b:4f:43:63:94:e8:b2:ab:11:5b:c5:56:39:f1:d8:c9:
         fb:40:d2:0c:30:88:87:20:be:d7:f5:6b:30:2a:ac:c5:29:ee:
         48:e7:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:19 2025 by rpki-client