This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/323830343a363164303a3a2f33342d3334203d3e20323639323538.roa
File:                     323830343a363164303a3a2f33342d3334203d3e20323639323538.roa (raw, json)
Hash identifier:          RVEvds/l3t4Qw2XLQrOUJG8lrohW3+3lCwgMpnAdEes=
Subject key identifier:   7E:4F:6B:8E:D5:F1:71:55:BE:5B:83:92:C5:6A:47:6B:E0:E6:5B:EE
Certificate issuer:       /CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
Certificate serial:       303B40155489214E616E5CCED724E8F8484693DF
Authority key identifier: 98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/323830343a363164303a3a2f33342d3334203d3e20323639323538.roa
Signing time:             Fri 14 Nov 2025 18:37:02 +0000
ROA not before:           Fri 14 Nov 2025 18:32:02 +0000
ROA not after:            Fri 13 Nov 2026 18:37:02 +0000
asID:                     269258
IP address blocks:        2804:61d0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl
                          rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3b:40:15:54:89:21:4e:61:6e:5c:ce:d7:24:e8:f8:48:46:93:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
        Validity
            Not Before: Nov 14 18:32:02 2025 GMT
            Not After : Nov 13 18:37:02 2026 GMT
        Subject: CN=7E4F6B8ED5F17155BE5B8392C56A476BE0E65BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:fe:58:bb:ad:a3:0a:55:2d:d6:e9:5a:82:
                    6e:ca:93:75:da:3c:01:d1:04:95:ee:ac:c1:55:7b:
                    9b:04:15:e7:9f:a3:62:5a:d7:51:81:d2:1f:cb:b6:
                    32:76:67:cf:f7:0e:91:6f:03:1d:bc:07:15:fe:92:
                    09:fc:d9:e0:89:8a:ee:79:52:40:e4:72:84:26:18:
                    fb:78:ca:90:87:2e:80:8a:36:56:76:61:47:5e:82:
                    a7:b4:06:8f:2e:0f:e2:19:02:a5:67:06:c0:cb:fd:
                    9d:42:57:2e:21:98:d5:1d:2d:9a:3d:37:6a:6d:92:
                    7b:a4:49:ae:d5:73:e3:f6:18:7f:5e:71:3e:d7:33:
                    6a:27:09:1d:f4:0d:70:1a:71:1a:04:41:fe:31:f3:
                    7a:d7:9a:74:2e:82:c5:51:cc:6e:a2:45:bd:d6:74:
                    67:eb:09:d6:10:44:21:2a:7c:ce:5a:8a:04:66:da:
                    12:77:e2:0f:29:8f:e6:6a:2c:dd:6a:e8:20:bc:ed:
                    df:78:fd:e8:0f:9c:f0:26:ca:5c:af:e1:a1:ea:da:
                    b0:00:c9:f0:cc:07:e8:9b:d4:97:18:59:2d:b4:fd:
                    ef:a0:1e:e6:38:8a:39:28:03:f6:c9:02:d6:49:58:
                    23:c5:1b:f5:6b:52:d8:ea:4c:aa:ea:b2:25:fd:02:
                    cd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4F:6B:8E:D5:F1:71:55:BE:5B:83:92:C5:6A:47:6B:E0:E6:5B:EE
            X509v3 Authority Key Identifier:
                keyid:98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/323830343a363164303a3a2f33342d3334203d3e20323639323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61d0::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:66:16:9d:cb:06:29:c1:c1:91:bb:2b:87:b4:cd:2b:50:9f:
         80:1e:d1:80:10:7f:ae:c7:4a:62:55:de:a5:db:e9:5f:de:92:
         e0:11:1f:0c:dc:9f:31:ef:b1:24:c6:dc:c7:88:cc:d0:d4:2d:
         8a:80:8e:2e:10:0c:9a:4a:2d:12:01:72:1f:5a:d4:49:ef:80:
         0d:f0:16:99:0a:dc:09:c9:d6:ed:90:db:0f:e9:3b:40:16:bb:
         c8:e7:10:4c:a0:9f:80:79:f3:f3:9c:45:dc:98:58:c2:b3:c0:
         4e:1e:e8:38:a8:ca:2f:db:a0:0d:e3:ba:ee:83:35:17:f2:14:
         d1:32:28:e1:70:e0:6f:f7:de:4a:2c:7f:cc:d1:b8:6a:73:3d:
         04:16:8a:08:27:49:31:09:08:b4:a8:16:ca:4d:25:af:49:30:
         16:f5:c0:ae:10:42:0e:f7:25:da:66:8f:a6:fc:3b:73:60:b0:
         1c:9d:c0:00:9e:61:83:65:91:55:5b:ef:9a:46:a8:09:04:4f:
         0c:eb:2d:1a:d6:d4:09:f5:c6:14:53:8e:06:27:94:14:91:4a:
         97:e8:4e:f4:80:da:74:fd:52:fc:c1:72:60:82:0f:10:64:7a:
         74:61:fc:ed:15:6e:d5:f8:40:b9:e1:9f:b8:80:e0:94:5f:19:
         6e:c0:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:23 2025 by rpki-client