This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/323830343a366230343a3a2f33322d3332203d3e20323730333732.roa
File:                     323830343a366230343a3a2f33322d3332203d3e20323730333732.roa (raw, json)
Hash identifier:          BibAFQxITkeg6q0/TPRs/ax0K9KvZLIRUNkYCsERWPg=
Subject key identifier:   E0:29:57:0D:7B:29:39:AA:71:17:FB:D7:EF:8F:CB:8B:26:4C:74:7B
Certificate issuer:       /CN=333AAB9C5800B382505D0F07C8D2EAE0547A8531
Certificate serial:       6BC2AF6D53C0C353D4F90EE3FD46F9B80DAD30DE
Authority key identifier: 33:3A:AB:9C:58:00:B3:82:50:5D:0F:07:C8:D2:EA:E0:54:7A:85:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/323830343a366230343a3a2f33322d3332203d3e20323730333732.roa
Signing time:             Thu 11 Dec 2025 01:56:28 +0000
ROA not before:           Thu 11 Dec 2025 01:51:28 +0000
ROA not after:            Thu 10 Dec 2026 01:56:28 +0000
asID:                     270372
IP address blocks:        2804:6b04::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.crl
                          rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c2:af:6d:53:c0:c3:53:d4:f9:0e:e3:fd:46:f9:b8:0d:ad:30:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333AAB9C5800B382505D0F07C8D2EAE0547A8531
        Validity
            Not Before: Dec 11 01:51:28 2025 GMT
            Not After : Dec 10 01:56:28 2026 GMT
        Subject: CN=3082010A028201010096E537E0128E04101EF6C83F326D1D9224DBFC8E83156F49577768BB91D15207C6615FDEE3DEFE2AFCA260144E0FE73F77FCD326BF82099684587CB1B5273C6D9E988627CA7E2AD76AD38D0CE903DE140EF333D775B6EE4494F7785E1EDB2BE953892B64ECAD5352A9ECE233DB64AD6DF748BE98E74EB3356C3707FD2A6A04AC5BB757DA85B4E60E8E88BFF815029A8980234C3F866028D2B865195CBB5908FD2AD2527238C9EB2D886579EDDC50E29D21DD77123ED31FACB06F4AC3B3AF6F8D08F58037140EAEFD6C2FD9F529B88842429D675BAB342A9A2FDA03F353B4E9D0F08DE8F79AB729F01EB477EC0DBE87910ED261B6917B1C530673201E22FEFE6F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:37:e0:12:8e:04:10:1e:f6:c8:3f:32:6d:
                    1d:92:24:db:fc:8e:83:15:6f:49:57:77:68:bb:91:
                    d1:52:07:c6:61:5f:de:e3:de:fe:2a:fc:a2:60:14:
                    4e:0f:e7:3f:77:fc:d3:26:bf:82:09:96:84:58:7c:
                    b1:b5:27:3c:6d:9e:98:86:27:ca:7e:2a:d7:6a:d3:
                    8d:0c:e9:03:de:14:0e:f3:33:d7:75:b6:ee:44:94:
                    f7:78:5e:1e:db:2b:e9:53:89:2b:64:ec:ad:53:52:
                    a9:ec:e2:33:db:64:ad:6d:f7:48:be:98:e7:4e:b3:
                    35:6c:37:07:fd:2a:6a:04:ac:5b:b7:57:da:85:b4:
                    e6:0e:8e:88:bf:f8:15:02:9a:89:80:23:4c:3f:86:
                    60:28:d2:b8:65:19:5c:bb:59:08:fd:2a:d2:52:72:
                    38:c9:eb:2d:88:65:79:ed:dc:50:e2:9d:21:dd:77:
                    12:3e:d3:1f:ac:b0:6f:4a:c3:b3:af:6f:8d:08:f5:
                    80:37:14:0e:ae:fd:6c:2f:d9:f5:29:b8:88:42:42:
                    9d:67:5b:ab:34:2a:9a:2f:da:03:f3:53:b4:e9:d0:
                    f0:8d:e8:f7:9a:b7:29:f0:1e:b4:77:ec:0d:be:87:
                    91:0e:d2:61:b6:91:7b:1c:53:06:73:20:1e:22:fe:
                    fe:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:29:57:0D:7B:29:39:AA:71:17:FB:D7:EF:8F:CB:8B:26:4C:74:7B
            X509v3 Authority Key Identifier:
                keyid:33:3A:AB:9C:58:00:B3:82:50:5D:0F:07:C8:D2:EA:E0:54:7A:85:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/323830343a366230343a3a2f33322d3332203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b04::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:2c:58:d0:ef:c8:76:69:9f:05:a7:2b:ee:5f:73:e4:ad:
         37:50:64:33:ea:d3:50:c3:8c:09:fb:89:f1:e8:d3:e2:19:17:
         cb:66:27:f3:b6:de:bf:0f:f3:66:76:83:5e:db:9f:7c:38:5f:
         fe:3d:bb:27:bc:c0:6f:45:f0:a0:33:b5:60:4c:17:f2:73:0e:
         92:ae:c6:1c:cc:98:84:ad:94:7f:51:f3:80:32:4a:85:4d:5a:
         64:bf:c7:40:b1:e1:e9:cd:2d:02:42:de:83:0b:d2:1f:a4:9c:
         b9:27:77:ab:d3:eb:96:9a:80:38:50:28:a7:13:79:93:5a:b7:
         14:24:36:5b:22:ee:13:d1:22:42:bd:7f:b1:9b:f2:71:2c:0d:
         df:45:e5:1b:d3:f5:ab:67:5c:d0:18:30:b4:f2:cf:69:51:fb:
         49:47:fa:03:27:50:d3:aa:9e:f6:ae:01:51:7e:78:eb:d3:74:
         91:6e:4d:5c:2b:86:da:df:10:58:ed:94:17:fc:83:46:65:00:
         21:23:e3:c1:19:ee:0d:f9:8b:d1:ea:cc:8c:77:47:fa:ae:46:
         27:5f:9f:87:7f:0c:fb:92:37:71:f3:48:4f:88:ea:bb:da:23:
         74:d5:11:7d:6d:bf:f2:98:10:85:7f:c6:f8:c3:54:83:b5:33:
         c9:8a:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----