This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d3332203d3e20323731323030.roa
File:                     323830343a373763633a3a2f33322d3332203d3e20323731323030.roa (raw, json)
Hash identifier:          ajogHMUk7QnWZoL4kEt7TJx/0q7mKvVzt76EsmFsrXE=
Subject key identifier:   DC:90:5E:57:F7:54:54:90:76:41:7F:57:66:91:74:FE:41:6A:82:2A
Certificate issuer:       /CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
Certificate serial:       0FA21F98E18C7E221C6B1D724B272B6125E1F771
Authority key identifier: 71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d3332203d3e20323731323030.roa
Signing time:             Sat 15 Nov 2025 17:46:29 +0000
ROA not before:           Sat 15 Nov 2025 17:41:29 +0000
ROA not after:            Sat 14 Nov 2026 17:46:29 +0000
asID:                     271200
IP address blocks:        2804:77cc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a2:1f:98:e1:8c:7e:22:1c:6b:1d:72:4b:27:2b:61:25:e1:f7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
        Validity
            Not Before: Nov 15 17:41:29 2025 GMT
            Not After : Nov 14 17:46:29 2026 GMT
        Subject: CN=DC905E57F754549076417F57669174FE416A822A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:b1:1a:25:88:3d:72:f3:e0:1a:a4:03:36:
                    ef:18:fe:de:9c:8e:8a:26:df:aa:98:4f:6c:c3:e7:
                    d6:fe:e1:12:e9:d2:d5:de:a0:06:fd:b3:49:4c:28:
                    a3:63:ce:be:f0:fa:8a:a7:cb:49:d2:8d:1f:17:8b:
                    04:ec:bc:11:f5:9f:3f:db:91:25:ef:93:fa:fe:40:
                    9a:18:a7:fb:4e:0f:66:dc:09:3e:d0:00:fd:bc:2a:
                    40:2a:c6:64:2d:a0:74:20:50:74:20:6b:09:44:83:
                    8e:8f:aa:fd:d9:3a:8e:ca:1c:f0:9a:1c:42:ba:26:
                    1d:ce:3b:62:58:66:54:be:82:bd:b7:25:68:60:f6:
                    18:41:04:94:cd:ff:86:cc:e6:96:85:7a:e7:3e:a2:
                    10:c9:48:12:ac:cb:3c:40:8b:cc:b1:15:e0:3f:e4:
                    03:8f:3a:f4:d7:11:de:1f:75:c2:2b:88:25:db:0c:
                    cc:6c:d5:3f:48:15:b6:07:d3:0d:21:dd:62:7f:cf:
                    fc:d0:74:45:0f:5f:68:a8:de:13:4a:76:3f:a6:4c:
                    fb:a9:ee:8c:7b:d5:e1:c1:dc:1e:50:34:0d:94:f2:
                    2e:33:d0:b9:18:d2:49:79:3b:5b:6f:f9:e0:e4:91:
                    e1:35:f5:0c:10:e8:6b:ab:15:da:09:89:44:35:cb:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:90:5E:57:F7:54:54:90:76:41:7F:57:66:91:74:FE:41:6A:82:2A
            X509v3 Authority Key Identifier:
                keyid:71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d3332203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:22:9c:f9:ac:43:ae:c1:3f:67:4b:a0:a4:d4:82:f3:b0:61:
         d9:18:ad:7d:aa:87:d1:e2:7f:c1:02:f2:79:70:d4:8e:83:a0:
         18:86:07:d5:e9:52:7f:9f:64:c2:8d:56:10:42:bd:76:4e:9c:
         e2:fd:39:b2:3e:90:f2:98:7b:a1:a1:86:83:dd:4b:cb:51:bd:
         bd:e2:82:a1:62:9d:e3:ac:bc:e4:e5:8e:10:f3:f7:2e:67:a7:
         5d:dd:ad:ca:45:07:b7:39:79:2c:e8:1f:d8:a7:c3:0e:5e:09:
         bf:8a:d9:78:95:ea:ce:74:c6:59:c3:71:7e:aa:29:dc:53:ef:
         0f:95:a9:cb:38:3f:fc:2d:c6:1a:ea:4e:34:83:19:62:e7:93:
         c7:72:9f:ef:f8:00:72:45:ce:60:17:08:d2:56:b7:12:85:90:
         32:05:4b:73:92:44:22:53:a8:2a:cd:68:a1:80:8e:6a:8d:a4:
         e1:5a:f6:dd:49:81:9a:17:cc:c6:c0:ea:b4:0a:3e:41:50:3d:
         28:d8:e8:e8:09:c6:47:61:38:39:f0:76:09:ac:03:cc:25:01:
         eb:bb:05:dd:8a:e4:5c:58:02:40:70:1d:4d:a6:5c:21:59:c7:
         50:84:06:9a:ce:10:73:5c:cf:45:48:0d:5b:2e:64:e3:4d:f9:
         51:16:ef:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:17 2025 by rpki-client