This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/323830343a346531383a3a2f33322d3438203d3e20323638323339.roa
File:                     323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (raw, json)
Hash identifier:          VGZMBxywOT6eMn/obggfUBg48R1BMRQHc1qiRhOgaq4=
Subject key identifier:   4B:E6:D9:C0:CB:6F:16:C7:98:ED:89:E0:40:D5:EA:53:40:03:6A:43
Certificate issuer:       /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Certificate serial:       496EB8B93C25E815E28FE30C14BC3E1EDBB48348
Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/323830343a346531383a3a2f33322d3438203d3e20323638323339.roa
Signing time:             Thu 20 Nov 2025 20:20:46 +0000
ROA not before:           Thu 20 Nov 2025 20:15:46 +0000
ROA not after:            Thu 19 Nov 2026 20:20:46 +0000
asID:                     268239
IP address blocks:        2804:4e18::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
                          rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 16:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6e:b8:b9:3c:25:e8:15:e2:8f:e3:0c:14:bc:3e:1e:db:b4:83:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
        Validity
            Not Before: Nov 20 20:15:46 2025 GMT
            Not After : Nov 19 20:20:46 2026 GMT
        Subject: CN=4BE6D9C0CB6F16C798ED89E040D5EA5340036A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:63:b8:b2:5a:3f:22:0b:4c:ec:3e:3a:4e:
                    95:ed:5d:03:73:33:00:c6:e5:29:31:78:c2:df:3f:
                    42:ea:b1:79:ba:3c:3f:cd:43:ab:c9:38:7f:51:45:
                    04:53:bf:47:ee:d7:ca:41:d8:9e:0e:24:1c:2c:cb:
                    d2:d3:09:66:32:ba:dd:28:bf:db:38:4b:09:5c:bb:
                    60:5c:b0:9d:a4:a2:01:48:ab:53:47:b9:ed:51:c1:
                    f5:37:b2:41:1b:0d:f8:a3:fd:22:3c:dd:1c:25:98:
                    10:80:cd:58:2e:1a:de:f6:a8:c2:5a:45:56:45:0f:
                    84:8e:da:93:3e:b6:02:f6:33:37:c1:db:9a:a5:22:
                    e4:4a:e7:b4:fc:13:e7:ff:95:1a:0a:a0:bf:1c:03:
                    84:e9:a7:ad:fb:2b:72:59:aa:bf:a6:7f:64:cd:06:
                    66:39:83:e3:8e:ed:67:59:64:9c:ae:04:d5:36:08:
                    d5:c0:81:a0:c3:3c:dc:ba:a8:06:1e:1a:a8:93:bc:
                    5e:1b:96:12:ad:76:0d:68:40:e6:12:a8:eb:44:93:
                    f9:03:b1:dd:d7:ea:12:c5:35:3e:2d:4c:55:fd:ef:
                    0b:58:5c:b9:a6:a5:7e:7f:b9:4b:88:80:20:28:87:
                    c0:59:cc:d7:af:dc:c2:aa:de:f4:f7:4b:47:28:fc:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E6:D9:C0:CB:6F:16:C7:98:ED:89:E0:40:D5:EA:53:40:03:6A:43
            X509v3 Authority Key Identifier:
                keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/323830343a346531383a3a2f33322d3438203d3e20323638323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e18::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:84:f6:01:97:26:03:25:17:21:65:98:30:65:d0:f0:5a:89:
         de:74:cf:ba:28:15:30:1b:08:65:d2:8e:2d:30:47:55:70:8a:
         56:e8:53:4a:f9:6e:c1:82:7f:9c:49:14:89:aa:97:97:58:1b:
         01:71:a1:75:e1:ad:97:6d:74:88:fb:e2:7b:c0:bb:23:56:6e:
         9b:ed:29:f0:28:d2:57:c1:e5:10:5e:37:16:3c:32:80:6e:de:
         ee:0a:1a:d6:d5:a3:1c:67:db:e7:d5:79:f1:df:c5:d7:f5:e3:
         bf:06:21:ed:16:b1:f9:19:e8:3f:34:82:8d:b9:de:b6:76:2f:
         fe:91:2e:a1:fb:cf:b9:c3:00:da:dd:e0:b7:21:15:e8:8e:88:
         28:66:d8:b1:61:71:59:df:84:5e:38:ec:0e:cc:b0:7b:6d:c3:
         7a:69:13:e8:9f:70:f8:d1:c8:b5:a2:9a:12:1e:40:ae:d0:96:
         16:a4:76:b8:f0:89:f8:74:f3:ab:5e:32:49:6b:ab:97:88:f5:
         7a:13:be:53:6d:e6:45:99:70:3e:85:3c:07:b9:c3:2e:aa:7f:
         c4:e4:44:40:2f:a4:36:32:69:36:43:71:08:e3:a7:7e:b3:b6:
         a6:eb:1d:0f:04:35:83:63:2b:75:95:09:03:c4:d4:74:e9:d4:
         0e:4d:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:55:51 2025 by rpki-client