This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/323830343a336463633a3a2f33322d313238203d3e20323636353534.roa
File:                     323830343a336463633a3a2f33322d313238203d3e20323636353534.roa (raw, json)
Hash identifier:          Hqiu5uzS3nwSuALJoWY0jinbth1wpYhxqT0gHY+AxtY=
Subject key identifier:   18:50:BC:83:1F:1A:0C:CD:E6:5A:D2:7F:B1:1A:5E:71:77:A9:55:76
Certificate issuer:       /CN=84772C156DD84D0A342970CEF667EE4780E35B7E
Certificate serial:       2738442909894E852526DE3F56993610677C9CC7
Authority key identifier: 84:77:2C:15:6D:D8:4D:0A:34:29:70:CE:F6:67:EE:47:80:E3:5B:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84772C156DD84D0A342970CEF667EE4780E35B7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/323830343a336463633a3a2f33322d313238203d3e20323636353534.roa
Signing time:             Thu 11 Dec 2025 13:21:12 +0000
ROA not before:           Thu 11 Dec 2025 13:16:12 +0000
ROA not after:            Thu 10 Dec 2026 13:21:12 +0000
asID:                     266554
IP address blocks:        2804:3dcc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/84772C156DD84D0A342970CEF667EE4780E35B7E.crl
                          rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/84772C156DD84D0A342970CEF667EE4780E35B7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84772C156DD84D0A342970CEF667EE4780E35B7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:38:44:29:09:89:4e:85:25:26:de:3f:56:99:36:10:67:7c:9c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84772C156DD84D0A342970CEF667EE4780E35B7E
        Validity
            Not Before: Dec 11 13:16:12 2025 GMT
            Not After : Dec 10 13:21:12 2026 GMT
        Subject: CN=1850BC831F1A0CCDE65AD27FB11A5E7177A95576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:fe:d4:ad:f7:5e:05:fc:52:6f:f1:69:d4:
                    e0:52:89:8b:63:01:42:f4:5d:6b:32:a7:96:eb:92:
                    a0:7c:f1:5b:a5:59:5d:19:54:05:f1:c0:90:3b:4f:
                    6c:eb:8f:c6:0f:0b:86:b6:bb:24:a4:fe:4b:74:29:
                    66:08:74:e3:f2:de:65:57:d0:48:4f:f6:5e:39:90:
                    09:f1:9a:26:59:f9:e8:e6:ce:85:82:f0:23:ff:4c:
                    13:e9:7f:14:9b:5d:95:b0:2a:f0:32:3c:81:db:0d:
                    b7:c7:77:91:5e:e7:c3:b5:1d:a9:36:e7:8a:82:a1:
                    b4:24:2d:b7:3a:eb:65:90:4b:47:b8:6b:01:de:7e:
                    1b:ec:d1:e6:46:3b:cc:4d:59:91:fd:01:ba:00:81:
                    9d:9c:33:9e:87:d7:ac:bd:ca:04:c8:17:85:9d:c9:
                    9f:d2:5c:0c:72:df:89:85:e9:05:f4:9a:b0:55:5b:
                    3d:05:48:82:82:a3:e6:41:75:60:db:ec:2a:65:b9:
                    98:09:8c:ab:c5:dd:81:63:b2:6d:83:ec:e3:d5:a5:
                    a8:3c:92:cf:e6:f0:d0:8c:cc:9d:fa:ce:5c:36:22:
                    ba:6a:01:af:e2:bf:07:f3:b9:3f:fe:0c:ea:3d:dd:
                    ac:5f:83:99:e4:57:c1:92:92:e4:0d:85:04:aa:0e:
                    11:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:50:BC:83:1F:1A:0C:CD:E6:5A:D2:7F:B1:1A:5E:71:77:A9:55:76
            X509v3 Authority Key Identifier:
                keyid:84:77:2C:15:6D:D8:4D:0A:34:29:70:CE:F6:67:EE:47:80:E3:5B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/84772C156DD84D0A342970CEF667EE4780E35B7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84772C156DD84D0A342970CEF667EE4780E35B7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/323830343a336463633a3a2f33322d313238203d3e20323636353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:22:8d:43:78:cb:9c:c5:53:89:00:ae:bd:39:5e:32:fc:b0:
         59:8a:b1:26:e6:ad:7a:ff:c5:94:84:e3:2f:1c:47:ac:11:d7:
         50:46:54:9f:e5:46:8b:c1:c1:64:57:ba:91:48:44:d0:b4:3f:
         75:63:50:5d:13:4f:8e:eb:f3:1b:0f:04:a5:9c:0e:17:05:98:
         06:38:01:82:7a:75:ee:4c:f2:d9:c4:84:66:96:4a:d7:5a:d4:
         e4:83:f0:c0:d8:5f:6b:22:1d:19:22:38:23:9c:11:ea:90:e7:
         b6:42:10:de:56:54:ad:7a:09:6f:76:9a:6c:82:77:98:15:66:
         41:de:bd:b5:bf:1c:9b:a9:e1:f8:93:d1:ea:00:25:76:ad:27:
         da:03:49:7f:db:4b:ce:9e:a6:05:21:ea:14:1e:c2:ce:7c:27:
         b1:cf:93:d5:64:ca:8d:07:cd:b3:c3:44:19:d5:2e:9f:9e:d9:
         ac:15:eb:26:c5:69:6e:c4:47:78:e1:82:15:0b:aa:a4:ae:37:
         2e:77:3d:21:5c:61:82:91:44:83:0e:8f:79:2f:ac:fe:93:e8:
         a1:a8:af:b6:ef:64:8a:d8:9b:26:f2:14:af:c3:a7:50:f0:c3:
         4d:57:69:7f:47:b2:df:0a:3a:7a:6a:8b:94:27:b3:12:35:ba:
         59:99:31:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:20:37 2025 by rpki-client