This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa
File:                     323830343a353865383a3a2f33322d313238203d3e20323638313537.roa (raw, json)
Hash identifier:          5XQ5hQKhcuqRbzC5N23WN82y7bvrmRwSO8qBXKHWrm8=
Subject key identifier:   60:D4:73:8F:E4:37:DD:31:11:C3:90:5B:F7:69:EB:07:A0:D3:1E:31
Certificate issuer:       /CN=7659F9EC5715739A2646E217090D2A0154CC1C7E
Certificate serial:       189D2763427B922083D1E0738E1F7F2373218A63
Authority key identifier: 76:59:F9:EC:57:15:73:9A:26:46:E2:17:09:0D:2A:01:54:CC:1C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7659F9EC5715739A2646E217090D2A0154CC1C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa
Signing time:             Thu 13 Nov 2025 12:55:02 +0000
ROA not before:           Thu 13 Nov 2025 12:50:02 +0000
ROA not after:            Thu 12 Nov 2026 12:55:02 +0000
asID:                     268157
IP address blocks:        2804:58e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/7659F9EC5715739A2646E217090D2A0154CC1C7E.crl
                          rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/7659F9EC5715739A2646E217090D2A0154CC1C7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7659F9EC5715739A2646E217090D2A0154CC1C7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9d:27:63:42:7b:92:20:83:d1:e0:73:8e:1f:7f:23:73:21:8a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7659F9EC5715739A2646E217090D2A0154CC1C7E
        Validity
            Not Before: Nov 13 12:50:02 2025 GMT
            Not After : Nov 12 12:55:02 2026 GMT
        Subject: CN=60D4738FE437DD3111C3905BF769EB07A0D31E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:01:ac:90:77:1b:63:fb:b7:16:e3:57:a6:42:
                    ec:2e:d5:e9:ab:a2:60:c2:31:86:a2:b2:83:36:ee:
                    17:be:42:82:87:b1:ec:f0:96:1d:98:87:97:50:6e:
                    d1:4c:8e:2f:22:6a:8e:db:a2:98:ac:4f:45:56:c0:
                    c8:4d:78:11:ae:6d:a2:b5:db:06:0c:36:3f:27:77:
                    09:37:c5:f9:5d:74:c6:ff:48:5f:21:1d:ee:8f:4b:
                    49:34:97:83:cd:d8:1b:a5:bb:ea:0e:39:69:f4:76:
                    a0:87:e0:30:0f:15:7b:23:9c:ef:2a:b4:48:72:a4:
                    ec:c8:57:e1:1c:3a:6e:a9:ed:2d:19:cb:1b:79:e4:
                    d3:ed:a5:a0:7b:72:b1:07:b2:f8:0b:78:86:8b:13:
                    b7:63:9d:9e:0f:33:3b:d5:e0:3e:18:16:48:b8:c3:
                    01:84:e2:09:f7:e8:76:db:06:0b:25:f0:51:42:96:
                    f1:a2:34:68:7e:f8:2d:ff:94:6d:b1:e5:83:87:51:
                    b8:87:89:48:d4:7d:2c:07:24:b0:c9:bd:97:36:5a:
                    a1:c4:ef:93:92:e4:db:35:5b:7e:46:82:83:6d:4b:
                    41:7f:5e:f9:9a:c9:62:8e:6f:99:71:75:b4:d5:61:
                    4a:dc:8f:4c:c6:71:22:a6:79:c8:ef:5a:15:88:48:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D4:73:8F:E4:37:DD:31:11:C3:90:5B:F7:69:EB:07:A0:D3:1E:31
            X509v3 Authority Key Identifier:
                keyid:76:59:F9:EC:57:15:73:9A:26:46:E2:17:09:0D:2A:01:54:CC:1C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/7659F9EC5715739A2646E217090D2A0154CC1C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7659F9EC5715739A2646E217090D2A0154CC1C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:37:f4:b1:c6:bb:c6:fe:f3:d6:4e:40:cf:72:1f:47:a5:
         23:b6:06:a4:b5:4c:2c:b2:c8:a1:92:49:43:31:b0:17:36:a6:
         d4:0a:2e:2f:8f:14:27:25:de:a1:59:93:c7:3a:ff:55:1d:5a:
         ed:74:ba:35:fe:5f:ee:af:cc:00:3d:1b:47:c6:9c:70:79:b4:
         57:f5:24:49:bf:c3:f2:b4:b6:84:42:7e:8d:b2:18:e4:d8:1f:
         4c:f2:f7:3e:8a:a9:75:a4:cc:5a:15:9b:9d:6f:66:54:5b:c5:
         8d:4b:a9:1f:8d:4c:6b:5a:96:01:af:23:66:e1:cb:4d:85:b4:
         1d:fb:66:1c:e0:c6:1b:a2:d6:c2:4c:fb:29:bc:72:2f:f6:00:
         27:cd:83:57:2c:a9:9a:56:c9:e1:2b:41:cd:fd:42:1a:18:50:
         54:80:c2:fb:4b:cb:e3:de:5b:db:f7:36:b6:44:93:9c:14:1c:
         67:87:ff:a8:08:97:fe:f7:db:88:13:9f:2a:45:e0:85:72:e8:
         65:c8:8d:07:3f:27:46:df:ee:56:20:b8:77:6d:91:e9:25:22:
         42:de:90:56:03:70:b0:e2:11:c7:80:96:5e:36:fa:2e:af:4a:
         ea:7a:81:50:7a:6c:1c:74:26:f4:c2:41:f3:cd:a8:01:ef:b6:
         04:ed:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:55 2025 by rpki-client