This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/323830343a336534303a3a2f33322d3438203d3e20323636353833.roa
File:                     323830343a336534303a3a2f33322d3438203d3e20323636353833.roa (raw, json)
Hash identifier:          jOmK+iQSSY4mFtrDt1G60d6lgJC9bJSdw9+59sJRuW8=
Subject key identifier:   70:F4:71:3C:2E:F3:89:60:DC:84:F4:53:40:4C:BE:80:97:3D:42:C0
Certificate issuer:       /CN=9BE05977B60E4F720D421198D070234D3CC75446
Certificate serial:       630925FE09F24F7D889FF9F6B9E91C47EF9AFE64
Authority key identifier: 9B:E0:59:77:B6:0E:4F:72:0D:42:11:98:D0:70:23:4D:3C:C7:54:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE05977B60E4F720D421198D070234D3CC75446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/323830343a336534303a3a2f33322d3438203d3e20323636353833.roa
Signing time:             Mon 24 Nov 2025 19:21:11 +0000
ROA not before:           Mon 24 Nov 2025 19:16:11 +0000
ROA not after:            Mon 23 Nov 2026 19:21:11 +0000
asID:                     266583
IP address blocks:        2804:3e40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.crl
                          rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE05977B60E4F720D421198D070234D3CC75446.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 22:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:09:25:fe:09:f2:4f:7d:88:9f:f9:f6:b9:e9:1c:47:ef:9a:fe:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE05977B60E4F720D421198D070234D3CC75446
        Validity
            Not Before: Nov 24 19:16:11 2025 GMT
            Not After : Nov 23 19:21:11 2026 GMT
        Subject: CN=70F4713C2EF38960DC84F453404CBE80973D42C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:00:fa:10:0b:76:41:8e:94:15:52:76:6e:
                    43:26:5a:06:19:ad:5b:7f:65:7d:1e:7e:47:c2:bd:
                    c9:24:67:4a:2b:a8:4e:ea:9d:7f:28:5f:1b:f1:53:
                    8b:d8:30:1d:a4:b7:3e:96:ab:45:42:02:cb:52:dd:
                    ee:3a:ee:cb:9e:6d:aa:78:96:f2:32:a4:d0:4e:5d:
                    28:6f:14:2f:55:f4:98:93:0f:1f:43:1c:fb:ec:e5:
                    e9:ed:f7:51:3d:44:cb:47:36:3b:5c:57:b9:30:d7:
                    56:3f:92:c3:75:26:61:00:3c:7a:54:4f:08:e9:c5:
                    8b:79:e5:6f:a4:ee:c1:40:b5:86:29:97:74:95:8f:
                    f3:55:ce:31:3c:ca:0d:74:c7:f1:fe:e8:1a:57:29:
                    23:3c:f5:b1:52:b1:c5:f5:d4:15:a1:fb:bf:5b:b6:
                    19:eb:ec:9a:9d:74:24:a0:b4:56:e3:1e:8d:52:cf:
                    da:d0:b3:79:4b:80:0e:91:da:7d:fe:15:2c:54:2b:
                    0d:52:63:83:90:7a:10:ff:27:5e:01:18:eb:0e:7a:
                    8b:92:7b:24:4a:e3:4f:3c:2f:49:32:38:1a:5a:58:
                    a9:2e:75:f9:b1:8b:6a:8c:db:11:df:df:60:49:a1:
                    55:67:03:60:49:fd:fc:89:27:ac:6e:c8:81:a2:6e:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F4:71:3C:2E:F3:89:60:DC:84:F4:53:40:4C:BE:80:97:3D:42:C0
            X509v3 Authority Key Identifier:
                keyid:9B:E0:59:77:B6:0E:4F:72:0D:42:11:98:D0:70:23:4D:3C:C7:54:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE05977B60E4F720D421198D070234D3CC75446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/323830343a336534303a3a2f33322d3438203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:63:1a:84:eb:59:49:c6:32:72:03:ee:3b:19:90:70:dc:
         63:0c:41:22:0f:7e:cf:69:56:f9:f6:01:6e:f7:4b:dd:c4:0f:
         e5:13:9d:45:63:71:eb:47:42:18:b5:84:14:6c:d8:78:32:2a:
         d5:62:3c:53:2b:3d:6c:6c:a5:bf:66:d4:c1:8c:8d:dc:bf:f2:
         20:f9:27:7b:ae:ff:9e:53:cc:26:a1:2c:ba:13:f2:63:04:4d:
         9a:bc:7e:c5:04:ea:44:36:0b:75:5c:1a:d3:3e:77:fe:bd:15:
         50:5a:42:a0:d2:ed:e1:c9:3b:55:f5:5c:1b:ec:4d:30:3f:6e:
         2d:39:e2:4f:4b:b1:bc:87:60:43:ea:62:d0:f6:04:00:00:79:
         99:27:c4:eb:70:c8:26:75:88:2d:a8:45:fa:80:7e:1a:23:da:
         f9:e6:84:d8:34:84:7a:7c:08:96:5f:1d:34:0f:6b:e0:30:85:
         50:3c:65:1e:52:a6:03:9a:0c:6d:da:76:6e:f8:43:6e:a6:55:
         79:10:9b:47:90:5e:00:1d:ba:0b:ef:4a:7e:6b:df:39:25:c5:
         0c:a6:5b:0a:22:97:8b:33:da:f6:91:dc:b5:14:db:4e:68:fc:
         34:f9:c5:a4:72:fb:9e:93:8c:11:bb:d6:f1:f6:93:f2:09:5e:
         84:cc:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:36:04 2025 by rpki-client