This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d3438203d3e20323636343730.roa
File:                     323830343a333835343a3a2f33322d3438203d3e20323636343730.roa (raw, json)
Hash identifier:          eOG19+lPOjxLDLZ2iFRT5pG9hhMrIUSLM+Y+KZtGzbc=
Subject key identifier:   49:84:F3:29:6A:35:E6:AC:2C:DF:FF:B9:2A:F0:5F:11:14:E4:7B:E9
Certificate issuer:       /CN=79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F
Certificate serial:       633D04151FA648A87C008B78CA0A6761E6A917E2
Authority key identifier: 79:E9:5F:56:49:BE:7D:AF:A9:B1:71:D4:53:E6:D4:F7:7F:90:FC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d3438203d3e20323636343730.roa
Signing time:             Thu 06 Nov 2025 12:40:45 +0000
ROA not before:           Thu 06 Nov 2025 12:35:45 +0000
ROA not after:            Thu 05 Nov 2026 12:40:45 +0000
asID:                     266470
IP address blocks:        2804:3854::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.crl
                          rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3d:04:15:1f:a6:48:a8:7c:00:8b:78:ca:0a:67:61:e6:a9:17:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F
        Validity
            Not Before: Nov  6 12:35:45 2025 GMT
            Not After : Nov  5 12:40:45 2026 GMT
        Subject: CN=4984F3296A35E6AC2CDFFFB92AF05F1114E47BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:3a:06:58:cc:ef:ee:49:ab:51:5f:b6:13:
                    30:e3:75:4f:f5:5b:0b:bf:d3:6a:e2:68:e3:ab:0c:
                    15:19:0f:fb:b9:f5:2b:b1:fa:8c:5a:a5:3e:97:a8:
                    d0:40:0c:e4:ac:ab:4a:8f:ff:67:75:68:96:30:4d:
                    02:5d:85:77:db:d9:58:50:d7:4c:6b:1e:ea:19:38:
                    4e:5a:0b:84:0c:4e:71:74:63:a4:42:cc:ec:22:30:
                    88:4b:9e:8a:60:9a:96:63:03:e2:d5:e6:cd:c3:3f:
                    12:92:64:24:a5:8b:14:b1:76:4c:b2:2b:67:f9:e2:
                    5c:58:7b:be:02:8a:c1:4f:4c:41:7b:ed:bd:cd:c6:
                    0e:69:32:74:ab:90:66:04:8b:fa:06:7a:71:07:7d:
                    af:d9:49:6b:83:f9:e3:6a:41:1b:b9:e7:86:8a:49:
                    5c:2e:84:47:c7:d6:1d:af:b1:1f:33:bd:7c:6d:d4:
                    7f:42:b7:2b:60:2e:e3:64:75:12:4a:e3:8c:53:9e:
                    7c:9f:c6:bc:d6:40:1a:fd:3a:2f:88:16:e7:1b:57:
                    2b:65:89:9d:8e:08:70:98:37:4b:0c:3c:b7:bf:ac:
                    b6:c2:f3:23:77:ac:7f:ca:06:ca:30:2f:d4:ba:3e:
                    6a:59:67:19:10:ed:90:9f:cd:68:16:ca:1c:8c:f6:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:84:F3:29:6A:35:E6:AC:2C:DF:FF:B9:2A:F0:5F:11:14:E4:7B:E9
            X509v3 Authority Key Identifier:
                keyid:79:E9:5F:56:49:BE:7D:AF:A9:B1:71:D4:53:E6:D4:F7:7F:90:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E95F5649BE7DAFA9B171D453E6D4F77F90FC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d3438203d3e20323636343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3854::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:1e:15:a1:64:4b:27:0b:7f:4b:b1:42:a9:0a:80:b8:18:1c:
         0e:83:db:22:a4:f2:a8:d8:3a:01:e0:72:9c:51:96:a5:1e:2e:
         25:9c:0e:34:ad:74:0d:d1:89:f8:7d:2c:f2:88:68:5b:69:1b:
         61:90:a3:78:fa:5a:e2:7e:cf:8d:cc:9a:11:f3:0b:a8:89:c0:
         9c:5b:5e:8f:a9:85:dd:93:06:58:93:08:99:a7:c8:9a:db:b5:
         28:3c:0a:84:4d:b6:0a:6d:95:44:72:7e:d1:01:f7:c1:58:4e:
         fb:77:c3:a0:c4:a3:f8:78:6a:d9:5a:a7:ea:c9:91:43:40:15:
         1a:83:cc:09:65:95:d4:99:d0:af:b0:fd:69:5d:28:74:e4:43:
         e9:d8:6d:65:d3:14:fa:e5:25:df:14:59:fe:71:7c:1d:20:83:
         14:25:44:3d:7d:13:df:08:27:2a:39:92:32:4d:77:ba:41:40:
         aa:d1:55:f6:dc:ec:5c:5d:93:b1:67:f6:19:97:82:bc:18:f4:
         23:88:c9:99:7b:75:b1:94:b7:a9:3d:e7:fe:39:3d:e6:fd:42:
         ac:c9:cf:d0:45:6f:cf:7d:88:0b:ca:89:95:91:27:64:78:c7:
         57:a9:8f:37:86:19:8c:a5:7e:50:f0:a2:40:74:10:b7:75:f2:
         fe:08:b0:a4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYz0EFR+mSKh8AIt4ygpnYeapF+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFOTVGNTY0OUJFN0RBRkE5QjE3MUQ0NTNFNkQ0Rjc3
RjkwRkM1RjAeFw0yNTExMDYxMjM1NDVaFw0yNjExMDUxMjQwNDVaMDMxMTAvBgNV
BAMTKDQ5ODRGMzI5NkEzNUU2QUMyQ0RGRkZCOTJBRjA1RjExMTRFNDdCRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCadToGWMzv7kmrUV+2EzDjdU/1
Wwu/02riaOOrDBUZD/u59Sux+oxapT6XqNBADOSsq0qP/2d1aJYwTQJdhXfb2VhQ
10xrHuoZOE5aC4QMTnF0Y6RCzOwiMIhLnopgmpZjA+LV5s3DPxKSZCSlixSxdkyy
K2f54lxYe74CisFPTEF77b3Nxg5pMnSrkGYEi/oGenEHfa/ZSWuD+eNqQRu554aK
SVwuhEfH1h2vsR8zvXxt1H9CtytgLuNkdRJK44xTnnyfxrzWQBr9Oi+IFucbVytl
iZ2OCHCYN0sMPLe/rLbC8yN3rH/KBsowL9S6PmpZZxkQ7ZCfzWgWyhyM9h7TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSYTzKWo15qws3/+5KvBfERTke+kwHwYDVR0j
BBgwFoAUeelfVkm+fa+psXHUU+bU93+Q/F8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjFEZ0FvWXZNM0RHckE0eG4xd3BqWGdBMkxuM2JVcUtzSHNvUmhpRlB4
M2MvMC83OUU5NUY1NjQ5QkU3REFGQTlCMTcxRDQ1M0U2RDRGNzdGOTBGQzVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5RTk1RjU2NDlCRTdEQUZB
OUIxNzFENDUzRTZENEY3N0Y5MEZDNUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0oxRGdBb1l2TTNER3JBNHhuMXdwalhnQTJMbjNiVXFLc0hzb1JoaUZQeDNjLzAv
MzIzODMwMzQzYTMzMzgzNTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ4VDANBgkqhkiG9w0BAQsFAAOCAQEAzx4VoWRL
Jwt/S7FCqQqAuBgcDoPbIqTyqNg6AeBynFGWpR4uJZwONK10DdGJ+H0s8ohoW2kb
YZCjePpa4n7PjcyaEfMLqInAnFtej6mF3ZMGWJMImafImtu1KDwKhE22Cm2VRHJ+
0QH3wVhO+3fDoMSj+Hhq2Vqn6smRQ0AVGoPMCWWV1JnQr7D9aV0odORD6dhtZdMU
+uUl3xRZ/nF8HSCDFCVEPX0T3wgnKjmSMk13ukFAqtFV9tzsXF2TsWf2GZeCvBj0
I4jJmXt1sZS3qT3n/jk95v1CrMnP0EVvz32IC8qJlZEnZHjHV6mPN4YZjKV+UPCi
QHQQt3Xy/giwpA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:31:45 2025 by rpki-client