This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/323830343a346261633a3a2f33322d3438203d3e20323637333233.roa
File:                     323830343a346261633a3a2f33322d3438203d3e20323637333233.roa (raw, json)
Hash identifier:          bK7PGcHgX1HaW/F1Gj0KQEL/uAEuTpfC9DPIZsI1xVE=
Subject key identifier:   1F:24:2A:0F:5E:03:51:A8:EB:AC:28:F7:9E:C5:4A:8E:24:B4:0A:17
Certificate issuer:       /CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
Certificate serial:       74735B437CD5EF6B1EE145FC7A91900A6C26B582
Authority key identifier: 01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/323830343a346261633a3a2f33322d3438203d3e20323637333233.roa
Signing time:             Thu 06 Nov 2025 18:00:27 +0000
ROA not before:           Thu 06 Nov 2025 17:55:27 +0000
ROA not after:            Thu 05 Nov 2026 18:00:27 +0000
asID:                     267323
IP address blocks:        2804:4bac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl
                          rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:73:5b:43:7c:d5:ef:6b:1e:e1:45:fc:7a:91:90:0a:6c:26:b5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
        Validity
            Not Before: Nov  6 17:55:27 2025 GMT
            Not After : Nov  5 18:00:27 2026 GMT
        Subject: CN=1F242A0F5E0351A8EBAC28F79EC54A8E24B40A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:81:c3:58:5d:13:95:5d:5b:b4:ff:7b:c4:
                    f6:0a:c6:49:a9:d2:c0:09:e8:65:a1:1a:9b:e6:cd:
                    29:ba:bd:65:77:59:d1:4f:89:af:d5:25:47:21:72:
                    c9:12:0f:2b:36:8c:0a:a7:de:c7:93:92:cf:9b:9e:
                    ca:d4:cf:78:04:32:a9:9d:e1:d2:36:19:d4:8c:3c:
                    3b:51:87:d7:76:a0:f9:88:ae:53:7f:c6:cb:b0:68:
                    9e:cf:ae:99:8c:66:79:21:33:cf:02:e8:65:40:e0:
                    b9:9d:3c:b7:43:fd:1e:29:83:83:a8:29:9e:c8:aa:
                    f9:dc:49:e9:15:ad:56:68:61:5a:7b:43:a3:42:4e:
                    52:bb:3d:3c:f4:ee:a5:02:f3:df:35:ac:c3:04:57:
                    ab:7a:3b:7b:bb:6f:51:91:99:1e:20:03:91:8f:ab:
                    76:da:00:bd:54:e4:c2:10:c7:17:66:fb:b4:22:5f:
                    14:f7:be:59:9f:5d:21:c0:75:d3:1f:aa:a5:04:8a:
                    94:99:97:e8:6f:6a:d8:5c:77:4e:c8:80:3f:63:9b:
                    79:1f:d2:21:e0:a6:bc:52:d8:7e:3a:ee:44:11:b7:
                    9a:d8:ae:62:4a:c3:9b:b8:17:ea:fb:64:0e:ac:d0:
                    5e:7c:53:04:82:58:97:6d:0c:87:e1:d1:fe:46:8e:
                    a6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:24:2A:0F:5E:03:51:A8:EB:AC:28:F7:9E:C5:4A:8E:24:B4:0A:17
            X509v3 Authority Key Identifier:
                keyid:01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/323830343a346261633a3a2f33322d3438203d3e20323637333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bac::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:f4:52:90:48:2e:89:81:43:af:4a:35:31:64:37:28:ef:
         e8:c5:34:57:b2:b8:7d:4e:28:50:ee:ef:bc:dc:6a:e2:3a:89:
         4e:01:2d:97:ab:34:67:6f:23:e7:ad:d6:13:77:86:87:46:a7:
         6d:80:c6:e1:74:50:3f:57:e0:e7:7d:9e:3c:c1:b5:20:9a:94:
         1d:cb:5a:93:b9:7e:3e:98:ec:67:72:6a:e5:a5:a6:cb:92:10:
         ee:01:59:e5:61:7e:ac:21:ae:e1:48:44:de:e8:70:0b:6a:c8:
         46:59:79:c2:12:0a:77:8a:68:b0:bf:37:6e:1e:08:04:c2:d2:
         62:20:0c:8a:50:da:b7:fb:0e:e9:4e:6d:c5:60:48:47:96:dc:
         ea:d7:80:4b:5e:fd:85:27:37:3d:c6:0b:fa:a2:51:42:72:b1:
         8a:7b:fe:ed:87:58:e4:a6:78:9e:a0:04:52:09:c4:94:da:a4:
         e6:27:ed:29:2f:62:73:69:07:c7:14:46:39:58:54:52:94:04:
         af:b6:74:75:22:bf:57:18:be:53:5a:fb:8a:99:e1:80:38:74:
         ce:e1:6b:93:bb:07:50:97:1a:ee:73:b3:1c:f8:d1:4d:38:da:
         1d:0f:25:20:85:4c:f6:8f:90:43:49:ad:1c:ea:e9:bc:40:eb:
         60:9a:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:03:15 2025 by rpki-client