This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/323830343a313935633a383030303a3a2f33332d3333203d3e203631373930.roa
File:                     323830343a313935633a383030303a3a2f33332d3333203d3e203631373930.roa (raw, json)
Hash identifier:          GDpbWBmKnANlhgTyhmOdna26G+IryWLlbjLUA0SQ5dM=
Subject key identifier:   87:8C:CA:B0:40:1B:02:18:26:AD:97:8B:E2:8B:5C:44:71:B0:66:24
Certificate issuer:       /CN=1BD6D3D1184A97F513FD0A1CE0187272414B0D00
Certificate serial:       50A027A084313F33A96496730E90AF3212069EBD
Authority key identifier: 1B:D6:D3:D1:18:4A:97:F5:13:FD:0A:1C:E0:18:72:72:41:4B:0D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/323830343a313935633a383030303a3a2f33332d3333203d3e203631373930.roa
Signing time:             Mon 01 Dec 2025 12:55:42 +0000
ROA not before:           Mon 01 Dec 2025 12:50:42 +0000
ROA not after:            Mon 30 Nov 2026 12:55:42 +0000
asID:                     61790
IP address blocks:        2804:195c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.crl
                          rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 01:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a0:27:a0:84:31:3f:33:a9:64:96:73:0e:90:af:32:12:06:9e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD6D3D1184A97F513FD0A1CE0187272414B0D00
        Validity
            Not Before: Dec  1 12:50:42 2025 GMT
            Not After : Nov 30 12:55:42 2026 GMT
        Subject: CN=878CCAB0401B021826AD978BE28B5C4471B06624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:c2:a0:da:b4:9c:55:b0:e0:f2:ab:69:14:
                    77:af:ce:10:14:5e:82:37:bd:db:dc:22:8d:68:b3:
                    ba:6c:2d:60:8e:e2:0d:60:fd:e0:a8:5c:2a:59:f2:
                    90:e4:b5:ba:ac:7c:5b:83:c9:4c:72:c0:55:17:10:
                    c3:77:fd:7c:51:7f:7f:5e:1b:60:c1:14:bd:71:2d:
                    6a:ce:89:a2:9c:a4:3a:38:d0:6f:d6:88:f5:ab:48:
                    ab:98:4c:34:f7:b0:a0:80:b3:58:1b:79:eb:4d:38:
                    00:5a:ce:fe:3c:ec:fd:fe:d5:7f:d7:fb:45:7b:dc:
                    5c:07:0b:3a:98:75:01:df:35:40:f0:17:c5:ef:ff:
                    18:41:d9:7d:9f:92:27:53:b6:9c:05:b5:f2:82:20:
                    1c:48:90:72:79:29:27:62:bb:3b:40:0f:21:67:51:
                    83:af:05:9f:0e:7a:6f:6b:0e:81:9e:86:f0:31:98:
                    9f:e5:64:c2:8b:f9:d0:cd:fb:e1:d7:2e:04:08:88:
                    8e:d3:2e:f9:07:ff:a1:ae:5d:03:38:ba:26:71:2b:
                    ce:2e:8e:c6:f2:6a:18:ff:e9:a4:68:dd:df:7a:61:
                    be:39:1e:30:5b:80:26:eb:81:5e:7b:19:c1:57:f7:
                    ce:ed:bc:07:46:11:5f:f3:c6:bc:ba:b1:37:f4:53:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8C:CA:B0:40:1B:02:18:26:AD:97:8B:E2:8B:5C:44:71:B0:66:24
            X509v3 Authority Key Identifier:
                keyid:1B:D6:D3:D1:18:4A:97:F5:13:FD:0A:1C:E0:18:72:72:41:4B:0D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/323830343a313935633a383030303a3a2f33332d3333203d3e203631373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:195c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:cf:82:77:b6:35:9f:04:95:ff:87:de:2a:46:4e:ef:32:22:
         cc:7e:e3:fb:8d:02:5b:1a:9f:3e:37:98:fd:7c:df:11:cb:1d:
         bb:6a:96:db:ac:ff:f7:e9:e3:ea:cb:33:95:8f:46:2c:67:19:
         f1:5c:72:e3:8b:c4:e9:dc:a6:7a:d6:4d:70:f2:dd:3d:21:5f:
         31:7c:52:9d:23:af:79:16:79:f9:5e:75:8e:d2:85:18:b6:19:
         83:8a:d4:45:38:e8:30:2c:e3:03:12:60:89:8b:49:7f:85:1b:
         ca:57:38:bb:c8:46:b5:27:f6:92:99:1b:21:b9:11:b2:3b:aa:
         9b:22:df:49:d2:fe:a3:5a:27:f1:22:ee:f1:91:65:94:c1:3d:
         aa:f0:a7:17:e4:94:c0:ed:a6:e2:0a:26:db:a5:63:0b:61:ed:
         49:ff:e5:96:bf:07:0a:9a:d8:86:a3:3a:5c:b3:2a:09:b6:c1:
         0b:42:db:ee:82:90:ec:3a:7f:58:3f:f5:3f:4b:c8:d1:c2:17:
         3e:3f:fb:d1:bc:d3:d6:03:eb:42:80:5f:df:e6:2f:bb:79:73:
         58:d0:51:2b:a6:a1:5b:10:08:e4:36:84:93:59:d0:d6:00:db:
         ff:98:58:0c:57:03:d0:2a:5f:ec:0d:ea:50:78:32:30:c6:13:
         8a:2f:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:08 2025 by rpki-client