This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/323830343a386634303a3a2f33322d3332203d3e20323733343739.roa
File:                     323830343a386634303a3a2f33322d3332203d3e20323733343739.roa (raw, json)
Hash identifier:          x/N/pb7UHMaXCZqaJxWecJNJ345PqNUz6WQSmqWPCl8=
Subject key identifier:   59:52:EE:07:CF:07:23:EA:2A:3D:39:9A:B5:37:B4:3F:91:2E:BE:1F
Certificate issuer:       /CN=937191BB3754302E6B24A004833ECBB46456536C
Certificate serial:       0BF4F96EBFE6B8C5AF4717533118EC59C185B2ED
Authority key identifier: 93:71:91:BB:37:54:30:2E:6B:24:A0:04:83:3E:CB:B4:64:56:53:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/937191BB3754302E6B24A004833ECBB46456536C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/323830343a386634303a3a2f33322d3332203d3e20323733343739.roa
Signing time:             Tue 25 Nov 2025 16:42:38 +0000
ROA not before:           Tue 25 Nov 2025 16:37:38 +0000
ROA not after:            Tue 24 Nov 2026 16:42:38 +0000
asID:                     273479
IP address blocks:        2804:8f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/937191BB3754302E6B24A004833ECBB46456536C.crl
                          rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/937191BB3754302E6B24A004833ECBB46456536C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/937191BB3754302E6B24A004833ECBB46456536C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f4:f9:6e:bf:e6:b8:c5:af:47:17:53:31:18:ec:59:c1:85:b2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937191BB3754302E6B24A004833ECBB46456536C
        Validity
            Not Before: Nov 25 16:37:38 2025 GMT
            Not After : Nov 24 16:42:38 2026 GMT
        Subject: CN=5952EE07CF0723EA2A3D399AB537B43F912EBE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:ec:41:e0:40:a6:e2:46:df:8d:cd:94:da:
                    03:7e:b5:bb:72:a0:eb:7e:50:e2:3e:c3:80:0d:ef:
                    85:96:d8:66:7d:dd:77:f0:ee:00:25:86:c9:8c:ab:
                    d5:26:50:ba:3c:bf:79:0e:49:0c:4d:87:9a:2c:c9:
                    f4:89:bb:1e:19:b3:9c:f0:e3:40:bd:a5:3e:14:ea:
                    ff:83:e4:f3:bc:eb:f8:f0:78:80:e7:02:5d:e2:a1:
                    37:dd:f1:81:83:4c:47:eb:62:d9:9e:8f:b4:30:48:
                    9e:7d:4e:04:47:4d:32:97:16:74:5b:75:02:7d:c6:
                    ec:ca:ee:1a:a0:50:6d:1f:bc:89:d9:9b:2a:91:af:
                    25:6a:6b:85:54:0e:f0:70:57:7c:cb:8e:9d:73:8d:
                    4a:52:20:a9:99:09:d0:f4:52:e7:51:c5:0c:e0:b2:
                    e7:3f:fc:45:eb:9d:a7:0b:2a:f8:6a:af:bc:c3:74:
                    40:ee:94:9a:ce:a1:87:3d:45:5d:1e:aa:e4:42:10:
                    f4:95:c2:da:07:ea:28:bc:85:b1:e6:be:f8:d6:60:
                    ab:d1:80:97:f8:32:b8:fc:0c:8b:1a:6d:0a:b9:39:
                    d3:56:51:cd:2a:26:e0:a7:14:c4:49:77:00:75:5b:
                    ff:59:9a:e6:da:59:a0:ce:f8:86:51:5d:5e:e6:e7:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:EE:07:CF:07:23:EA:2A:3D:39:9A:B5:37:B4:3F:91:2E:BE:1F
            X509v3 Authority Key Identifier:
                keyid:93:71:91:BB:37:54:30:2E:6B:24:A0:04:83:3E:CB:B4:64:56:53:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/937191BB3754302E6B24A004833ECBB46456536C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/937191BB3754302E6B24A004833ECBB46456536C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/323830343a386634303a3a2f33322d3332203d3e20323733343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:32:f3:08:e1:ea:aa:0b:49:9d:d1:f2:2a:06:11:52:ea:1f:
         f1:61:29:ba:6e:8f:f7:f0:33:69:44:a3:9a:c7:76:56:31:f7:
         9d:23:ac:c8:41:23:a4:80:8f:c0:79:3a:7f:58:f5:8f:f8:64:
         7e:8c:f1:72:38:11:96:98:f3:17:bf:e6:ee:b8:8c:19:d8:21:
         46:6c:b4:80:fa:24:66:a6:b9:db:cc:88:d7:83:4d:af:41:d6:
         93:ef:51:67:5f:e9:ed:dd:e6:82:48:74:54:a4:80:73:d5:49:
         39:b8:2c:15:1b:56:9b:8a:d4:19:0f:29:5c:3c:cc:d5:07:2b:
         10:e4:cf:d9:2a:04:7d:79:85:07:c5:22:d3:bb:33:91:59:fe:
         2b:e3:49:3e:78:6a:3b:e1:e4:eb:b7:c9:c1:82:9e:e3:09:cc:
         57:9d:20:4a:26:78:31:38:73:ef:37:e9:6a:23:32:45:3b:c5:
         67:ca:6b:88:17:00:e9:a2:c5:ec:f7:ff:09:8b:99:6a:77:e6:
         2e:66:fe:30:a8:f2:c9:64:94:90:14:3c:90:3c:37:04:0e:d8:
         18:b4:92:19:1e:0e:6d:b8:93:78:32:83:64:5c:b7:80:ea:dd:
         73:20:66:4d:ba:04:c3:16:a3:e2:a7:f4:fe:ff:94:20:66:05:
         b2:0f:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:43 2025 by rpki-client