This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa
File:                     323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa (raw, json)
Hash identifier:          JSuah/KkZOHLsmXifim36QOIe4ru/7h5Kp5MY+9DdDM=
Subject key identifier:   39:0E:6B:E7:98:B4:A3:B4:62:38:45:E5:6B:B3:58:20:12:69:18:DA
Certificate issuer:       /CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
Certificate serial:       37C42790357063403AB4E9A74E6D65BD45ED3F09
Authority key identifier: 71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa
Signing time:             Sat 15 Nov 2025 17:46:29 +0000
ROA not before:           Sat 15 Nov 2025 17:41:29 +0000
ROA not after:            Sat 14 Nov 2026 17:46:29 +0000
asID:                     211087
IP address blocks:        2804:77cc:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c4:27:90:35:70:63:40:3a:b4:e9:a7:4e:6d:65:bd:45:ed:3f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
        Validity
            Not Before: Nov 15 17:41:29 2025 GMT
            Not After : Nov 14 17:46:29 2026 GMT
        Subject: CN=390E6BE798B4A3B4623845E56BB35820126918DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:58:81:19:90:21:27:8b:01:d9:b4:05:2d:
                    18:11:77:cc:4b:ad:7e:86:db:c7:26:b0:f6:66:e7:
                    d4:52:f9:30:2b:12:bd:dc:59:95:c2:1f:55:96:0b:
                    60:f8:29:90:0b:bd:3b:0e:24:e5:ff:a7:71:d0:bb:
                    04:d7:0a:93:68:8d:5c:67:1c:87:cd:40:a1:44:51:
                    5a:2a:0a:0b:ba:e8:de:3c:97:e2:51:0f:01:ab:de:
                    3a:77:f4:1b:d7:1a:5f:1e:ca:d7:61:b5:fa:93:9f:
                    06:bc:bb:c5:8b:54:54:72:c1:4e:11:1d:14:ca:70:
                    a3:b8:2e:2f:54:74:e6:05:f8:1c:c5:b2:3c:46:8a:
                    d5:5f:61:e8:f9:cd:b0:2d:12:11:b2:31:4d:32:47:
                    7e:01:27:0c:ae:15:88:4b:43:b5:55:fc:13:25:79:
                    35:da:c6:ba:e3:31:e5:20:29:d1:cb:17:79:94:d5:
                    c5:1e:e8:93:78:35:5a:46:61:06:6a:30:7e:71:b6:
                    a6:33:f3:91:56:6b:7f:ee:5a:74:bc:32:ae:c7:da:
                    5b:25:01:e1:ad:d5:61:55:21:10:cb:1c:08:d6:fb:
                    0e:d1:df:25:cd:ab:a8:1e:6b:24:b7:94:68:cd:85:
                    54:ab:1e:31:18:d6:c8:6a:e7:f5:21:d7:42:ce:7a:
                    f6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0E:6B:E7:98:B4:A3:B4:62:38:45:E5:6B:B3:58:20:12:69:18:DA
            X509v3 Authority Key Identifier:
                keyid:71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77cc:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:0a:43:49:e5:ab:1d:98:b5:e1:ce:eb:8c:b9:61:51:5e:38:
         32:65:e7:7a:de:b1:03:8c:1e:8f:9c:d5:71:62:4a:eb:7c:17:
         ca:ed:60:a0:f1:26:80:99:4a:6a:f7:cf:f7:c3:26:bf:fd:fd:
         39:69:46:7e:24:4e:bb:03:0f:02:fe:18:99:b9:61:13:f9:f6:
         1a:10:d2:47:45:17:b4:6c:d5:cb:88:f2:f5:6a:e3:41:d9:22:
         9b:92:9c:90:af:51:a8:27:f3:73:92:b4:20:20:33:14:dd:fd:
         76:37:a5:82:09:d2:fb:81:6d:ff:1b:9b:d0:04:66:02:74:e0:
         e4:5c:49:04:68:7b:75:09:24:62:52:8d:1c:9a:e6:a3:b2:fd:
         68:dc:59:00:da:16:4d:2a:db:7d:7a:fc:05:6b:54:e0:b9:71:
         66:60:bd:40:7b:75:bb:7c:03:05:23:be:82:3b:d3:a3:b5:24:
         11:ff:f3:86:dc:93:12:62:5c:65:46:8e:c3:4a:6a:a3:ee:fa:
         a6:20:03:56:6f:d7:06:ae:f2:cd:d5:3d:24:cf:40:da:f2:82:
         50:5a:7c:3d:36:2f:48:44:a0:58:f4:97:68:f0:f7:62:9b:b4:
         11:88:cd:8f:5b:cf:84:cb:4b:f4:d9:56:6c:cb:57:1e:25:bf:
         75:bd:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:11:11 2025 by rpki-client