This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a383030303a3a2f33342d3334203d3e203532383338.roa
File:                     323830343a6264383a383030303a3a2f33342d3334203d3e203532383338.roa (raw, json)
Hash identifier:          I2F1WfqlYpi8WFf7dl1acgEvRCVcqgkFsW9SWIT+mVM=
Subject key identifier:   94:4A:54:91:49:FF:E8:C1:A6:B8:8A:E6:85:C1:A8:F2:45:37:EB:C5
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       43EF7AEBAB19E5B9F4E4609F5BF8BACCECB04BFB
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a383030303a3a2f33342d3334203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:48:32 +0000
ROA not before:           Wed 03 Dec 2025 00:43:32 +0000
ROA not after:            Wed 02 Dec 2026 00:48:32 +0000
asID:                     52838
IP address blocks:        2804:bd8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ef:7a:eb:ab:19:e5:b9:f4:e4:60:9f:5b:f8:ba:cc:ec:b0:4b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:43:32 2025 GMT
            Not After : Dec  2 00:48:32 2026 GMT
        Subject: CN=944A549149FFE8C1A6B88AE685C1A8F24537EBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:81:8f:58:91:14:3e:9f:60:c8:f4:38:f3:
                    f3:ba:a5:10:2f:d7:22:82:d0:c8:bf:59:f7:95:de:
                    1e:8e:d0:60:55:da:b7:36:cc:23:67:18:12:62:c7:
                    5a:60:35:04:93:aa:77:23:4f:37:4b:4c:b7:9d:03:
                    d5:b7:fe:9d:f8:4d:39:72:ba:af:75:9d:02:fe:16:
                    d4:d0:24:7f:3f:e4:da:b4:06:26:da:e4:f0:a4:f0:
                    35:15:33:ed:0b:6c:43:49:a0:de:77:5a:2d:25:a7:
                    9d:89:63:dc:74:92:75:29:86:73:82:41:c6:05:75:
                    e9:3d:de:d4:eb:7f:cf:37:60:c6:64:e9:09:8f:ba:
                    17:c6:db:4c:ba:0c:e1:29:3f:86:b8:f2:b5:00:04:
                    48:3d:ec:b2:b6:80:24:06:cc:00:55:ed:d0:47:3b:
                    2f:10:03:3b:7d:f1:5a:92:cb:b3:1a:91:67:b9:6d:
                    c4:74:76:70:82:e8:b6:48:f0:ed:8b:55:4d:ba:a8:
                    e6:51:62:1a:c8:74:df:4e:61:46:2f:f1:44:eb:e2:
                    72:95:39:9a:1d:19:c8:cb:b9:b0:17:ea:a9:13:63:
                    0b:49:91:19:09:61:50:e3:92:40:0b:b4:be:b8:a2:
                    1f:75:77:53:81:b6:03:ae:8d:a9:ba:c6:cf:93:32:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4A:54:91:49:FF:E8:C1:A6:B8:8A:E6:85:C1:A8:F2:45:37:EB:C5
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a383030303a3a2f33342d3334203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bd8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:cb:1d:dc:8f:ea:55:11:b6:33:91:5d:e8:f7:ad:7e:d6:
         6a:eb:fc:39:e5:d0:63:3b:71:92:d6:c6:a6:ca:fc:d8:d2:98:
         12:64:99:b3:93:3d:a5:e5:c3:b6:35:1e:d3:18:a3:bf:b9:22:
         99:eb:24:8b:df:06:89:90:e0:90:25:76:2a:4f:1a:80:e3:d0:
         b4:fe:01:ef:1a:7b:28:3e:ac:c9:1b:9e:12:d3:22:8d:a7:06:
         3a:5c:2e:57:ea:ef:85:9c:ea:d3:93:0f:74:76:29:13:6a:75:
         ac:b6:40:8e:3d:1b:4f:2c:dc:d8:ee:1b:84:dd:05:35:df:b9:
         a7:1c:f8:91:83:a5:0e:9c:c4:8b:30:14:3d:9e:f1:c2:a0:0a:
         1e:24:aa:90:68:aa:b2:c7:ff:ee:ab:0a:22:b7:03:70:b8:59:
         64:f6:67:3f:71:df:20:9b:b4:c5:be:a4:c9:11:14:9b:25:f2:
         25:c1:24:da:85:1a:6b:32:57:fe:86:6c:07:4b:6f:b0:f8:37:
         9d:7c:bf:b4:08:6c:0d:a6:b5:73:72:65:41:54:d6:5a:a3:68:
         2c:ce:82:e6:8c:7b:bd:ac:c7:af:f0:a2:9a:61:f1:29:52:01:
         aa:6c:a0:52:cf:3d:29:48:b5:87:dc:c0:c0:33:60:5d:72:8d:
         a6:d7:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:22 2025 by rpki-client