This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a3a2f33332d3333203d3e20323632383735.roa
File:                     323830343a3939303a3a2f33332d3333203d3e20323632383735.roa (raw, json)
Hash identifier:          VB1Uh5YcsvlofZIMI/mXqosARTp5bcYIRw2iK7wK5zg=
Subject key identifier:   A3:74:0F:C8:B0:42:0C:84:E8:C1:A8:0A:80:F8:21:E8:31:CF:14:A6
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       01C9E9A612C1A769BACE2EC92676FC8F6737CF9A
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a3a2f33332d3333203d3e20323632383735.roa
Signing time:             Thu 04 Dec 2025 13:38:46 +0000
ROA not before:           Thu 04 Dec 2025 13:33:46 +0000
ROA not after:            Thu 03 Dec 2026 13:38:46 +0000
asID:                     262875
IP address blocks:        2804:990::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c9:e9:a6:12:c1:a7:69:ba:ce:2e:c9:26:76:fc:8f:67:37:cf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Dec  4 13:33:46 2025 GMT
            Not After : Dec  3 13:38:46 2026 GMT
        Subject: CN=A3740FC8B0420C84E8C1A80A80F821E831CF14A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:85:0e:6c:62:44:da:0c:9d:5c:fb:7e:0e:
                    26:ef:72:90:fa:2c:54:1f:c3:59:e0:4c:a4:fa:62:
                    3e:ac:09:b4:bf:ea:e3:85:39:2c:34:f9:ee:15:c4:
                    d7:59:4f:52:d6:da:a3:50:31:ff:ce:30:65:03:4f:
                    dc:9a:ef:f7:4a:88:7c:76:2e:fc:f1:25:cc:7f:f3:
                    02:f6:c2:22:3d:d8:00:b0:e5:27:dc:7b:c8:e2:c7:
                    91:f5:b7:cb:65:a1:6a:8b:10:97:ee:c6:c4:87:bf:
                    6b:f8:d7:ee:25:d1:d8:a9:08:93:ab:a4:85:55:5e:
                    c7:c7:6c:e6:91:a8:e1:cb:69:16:bd:6d:57:c8:c5:
                    c6:58:de:24:3b:52:f5:f3:13:ce:55:6b:ec:93:c3:
                    cc:83:5d:00:33:6e:00:90:b5:14:40:5b:4d:4b:3c:
                    96:81:39:50:df:58:1c:eb:f0:7b:fe:7d:87:9e:89:
                    9d:1d:4c:ae:39:35:14:e4:dc:41:96:0b:68:c7:06:
                    39:c3:38:be:80:4b:a9:bc:e6:42:2a:e0:2e:92:92:
                    4c:5c:1f:d1:3b:7b:93:94:17:86:8f:5a:14:75:a1:
                    57:af:f8:64:07:22:29:ab:42:36:40:65:de:19:21:
                    75:1c:f1:91:a6:14:1c:89:ab:37:e5:fa:09:4f:b7:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:74:0F:C8:B0:42:0C:84:E8:C1:A8:0A:80:F8:21:E8:31:CF:14:A6
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a3a2f33332d3333203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:990::/33

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:15:4e:c2:35:bb:99:cd:dc:48:cb:39:ac:03:ca:81:ee:
         5f:4f:17:c4:46:d8:ec:4e:c6:04:a1:4c:89:c1:5f:ef:a1:42:
         33:0c:5d:24:d3:0d:e0:89:50:56:9a:22:11:1c:5a:42:29:27:
         45:4f:2b:d2:96:44:02:0a:72:fb:b3:60:3d:bd:9f:57:1a:08:
         07:d8:07:be:ca:e4:28:4f:19:53:15:11:d2:f1:1a:90:94:30:
         9d:59:22:7f:88:61:ac:bc:e3:c6:5a:26:71:e6:2d:d3:02:b9:
         03:0f:2f:cb:d8:7d:f2:7b:4e:f9:f5:59:77:9b:6f:4a:c0:7f:
         e7:cf:c7:a3:52:48:3a:5f:92:e4:4e:e2:9c:62:e6:39:a7:ce:
         97:02:37:6b:89:67:bb:2e:69:62:c7:8a:ca:8c:e5:e9:12:17:
         bb:31:01:01:7a:58:94:93:17:e2:ba:c2:31:c7:7d:8d:11:57:
         38:83:c8:f2:2c:23:3b:5a:db:c5:44:6f:9e:b5:85:20:d8:76:
         e4:bf:72:e3:a2:2c:8e:e4:b7:11:01:fc:26:69:8b:12:f6:27:
         33:9e:26:26:dc:65:e9:02:f7:95:92:d6:22:27:7c:52:4f:19:
         2c:6b:1c:1d:f0:46:82:5a:51:6e:13:2e:5b:df:a9:ed:60:46:
         2b:a9:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:03 2025 by rpki-client