This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/323830343a346333383a3a2f33322d3438203d3e20323637333537.roa
File:                     323830343a346333383a3a2f33322d3438203d3e20323637333537.roa (raw, json)
Hash identifier:          XNucn8XbJvxm3d9SyWvbcP2Emdj837lTY5OEQcuDf3c=
Subject key identifier:   DE:B0:7D:10:4C:29:B9:03:13:A9:C1:26:6D:CB:69:93:46:E3:9C:91
Certificate issuer:       /CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
Certificate serial:       39853614514A71E9830195101609CAA8FFEFAB34
Authority key identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/323830343a346333383a3a2f33322d3438203d3e20323637333537.roa
Signing time:             Mon 10 Nov 2025 17:35:50 +0000
ROA not before:           Mon 10 Nov 2025 17:30:50 +0000
ROA not after:            Mon 09 Nov 2026 17:35:50 +0000
asID:                     267357
IP address blocks:        2804:4c38::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:85:36:14:51:4a:71:e9:83:01:95:10:16:09:ca:a8:ff:ef:ab:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
        Validity
            Not Before: Nov 10 17:30:50 2025 GMT
            Not After : Nov  9 17:35:50 2026 GMT
        Subject: CN=DEB07D104C29B90313A9C1266DCB699346E39C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:82:05:ca:64:08:3f:30:62:b9:cf:20:62:
                    07:16:34:bd:e6:cc:29:11:6a:c4:73:bc:77:3f:21:
                    06:59:43:03:0a:ae:dd:10:22:ba:1d:8b:a4:b9:f9:
                    98:41:40:b7:62:c3:70:54:01:91:dd:ed:17:2f:83:
                    2a:d9:f1:d3:b4:de:f8:bd:e7:4c:4c:59:57:ab:62:
                    3b:ed:78:89:d0:6b:4a:c4:93:27:62:38:0b:c2:73:
                    db:a7:b7:d7:e0:b1:70:a9:7e:d5:28:c9:f2:e9:05:
                    4e:cc:07:ef:69:23:de:7b:25:20:10:7a:39:7f:58:
                    2c:3c:ca:5d:f5:ad:3e:af:e7:88:66:d0:a5:da:b1:
                    5f:2b:b6:82:d8:c0:6c:ce:90:1a:c4:f6:0f:11:47:
                    9e:7b:3f:9e:97:e1:c5:5f:b5:8e:7a:c1:d5:0e:8e:
                    6b:81:79:d6:c1:c6:b8:59:8c:d5:a6:e5:4b:e0:26:
                    64:b8:22:9e:59:7f:31:6c:3e:6a:ba:11:82:01:6a:
                    cc:2a:82:d1:8e:0e:b7:03:8a:ea:eb:76:84:8d:80:
                    67:af:cd:f8:0e:1b:06:c6:fa:d8:77:4c:41:95:fd:
                    04:9d:09:5a:4f:2e:fd:da:7a:ee:fe:29:60:d9:79:
                    75:4c:b0:99:25:72:98:b4:24:77:6a:12:68:a0:43:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B0:7D:10:4C:29:B9:03:13:A9:C1:26:6D:CB:69:93:46:E3:9C:91
            X509v3 Authority Key Identifier:
                keyid:17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/323830343a346333383a3a2f33322d3438203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:58:ba:56:ee:f6:c0:3d:e7:47:d6:b5:d3:81:25:ea:f2:9a:
         18:91:ec:bc:7d:52:c3:be:7f:5a:e2:2b:cd:a7:4b:5c:94:46:
         c7:0e:5d:3b:cc:b6:e5:ec:88:78:37:75:69:a7:a8:36:55:e3:
         5e:b9:75:8c:35:14:43:76:6f:32:45:34:69:72:4a:e4:b3:e1:
         fa:df:2d:b4:61:8a:c4:33:ef:a6:54:7e:0e:18:cb:99:1c:f2:
         48:91:46:34:02:47:5c:2e:0a:35:b9:fa:1a:f5:78:14:b3:1e:
         b9:e4:1d:6f:ff:86:f2:72:9b:f7:a6:bf:c1:ea:0b:a7:d3:87:
         b2:f5:b2:82:69:08:7f:50:00:38:e3:86:5b:2f:ba:eb:a7:dd:
         f3:5d:b6:30:4a:7b:a0:df:b9:c3:42:f7:64:ca:b4:a9:07:c8:
         06:ad:71:84:c6:70:32:20:f2:45:a4:af:9a:e7:a3:a0:60:da:
         fe:92:ae:c2:14:9a:8d:64:f7:4c:1e:a8:66:9d:46:2e:af:0e:
         5d:9a:fb:64:b7:2f:b1:32:23:b1:ac:e2:ec:b3:6f:42:20:9b:
         ac:32:8d:f4:a7:c6:9a:df:76:de:0b:1b:f9:9c:65:c9:aa:3d:
         0c:41:bf:78:67:23:01:15:46:6d:10:f7:fe:3b:48:8b:79:09:
         65:26:e9:f2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOYU2FFFKcemDAZUQFgnKqP/vqzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdFRDgwRTM5NUY4RUZEQTgzMDE4QUI1MzFDRjM2RTMy
QjMzNzRCNDAeFw0yNTExMTAxNzMwNTBaFw0yNjExMDkxNzM1NTBaMDMxMTAvBgNV
BAMTKERFQjA3RDEwNEMyOUI5MDMxM0E5QzEyNjZEQ0I2OTkzNDZFMzlDOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc0oIFymQIPzBiuc8gYgcWNL3m
zCkRasRzvHc/IQZZQwMKrt0QIrodi6S5+ZhBQLdiw3BUAZHd7RcvgyrZ8dO03vi9
50xMWVerYjvteInQa0rEkydiOAvCc9unt9fgsXCpftUoyfLpBU7MB+9pI957JSAQ
ejl/WCw8yl31rT6v54hm0KXasV8rtoLYwGzOkBrE9g8RR557P56X4cVftY56wdUO
jmuBedbBxrhZjNWm5UvgJmS4Ip5ZfzFsPmq6EYIBaswqgtGODrcDiurrdoSNgGev
zfgOGwbG+th3TEGV/QSdCVpPLv3aeu7+KWDZeXVMsJklcpi0JHdqEmigQ75JAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3rB9EEwpuQMTqcEmbctpk0bjnJEwHwYDVR0j
BBgwFoAUF+2A45X479qDAYq1Mc824yszdLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTZKUnVycnlCVHpVS2dpNVViVU5KUE1Qa0ptckt1TjJxSFBLVWlrWjM4
OVUvMS8xN0VEODBFMzk1RjhFRkRBODMwMThBQjUzMUNGMzZFMzJCMzM3NEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3RUQ4MEUzOTVGOEVGREE4
MzAxOEFCNTMxQ0YzNkUzMkIzMzc0QjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U2SlJ1cnJ5QlR6VUtnaTVVYlVOSlBNUGtKbXJLdU4ycUhQS1Vpa1ozODlVLzEv
MzIzODMwMzQzYTM0NjMzMzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzMzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARMODANBgkqhkiG9w0BAQsFAAOCAQEAvFi6Vu72
wD3nR9a104El6vKaGJHsvH1Sw75/WuIrzadLXJRGxw5dO8y25eyIeDd1aaeoNlXj
Xrl1jDUUQ3ZvMkU0aXJK5LPh+t8ttGGKxDPvplR+DhjLmRzySJFGNAJHXC4KNbn6
GvV4FLMeueQdb/+G8nKb96a/weoLp9OHsvWygmkIf1AAOOOGWy+666fd8122MEp7
oN+5w0L3ZMq0qQfIBq1xhMZwMiDyRaSvmuejoGDa/pKuwhSajWT3TB6oZp1GLq8O
XZr7ZLcvsTIjsazi7LNvQiCbrDKN9KfGmt923gsb+Zxlyao9DEG/eGcjARVGbRD3
/jtIi3kJZSbp8g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:17:56 2025 by rpki-client