This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a3a2f33322d3332203d3e20323733343137.roa
File:                     323830343a386535303a3a2f33322d3332203d3e20323733343137.roa (raw, json)
Hash identifier:          gJsxifEhmwfZE79+okj1f49x1WfEdAPIDekZHpKFeoo=
Subject key identifier:   19:A7:42:D2:92:F1:93:92:F7:CD:83:20:28:8B:4C:C4:6A:3B:DB:55
Certificate issuer:       /CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
Certificate serial:       7DD97E9148984195EB256D12AF045B47F57DFDAC
Authority key identifier: 6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a3a2f33322d3332203d3e20323733343137.roa
Signing time:             Wed 17 Dec 2025 16:20:17 +0000
ROA not before:           Wed 17 Dec 2025 16:15:17 +0000
ROA not after:            Wed 16 Dec 2026 16:20:17 +0000
asID:                     273417
IP address blocks:        2804:8e50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 18:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:7e:91:48:98:41:95:eb:25:6d:12:af:04:5b:47:f5:7d:fd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
        Validity
            Not Before: Dec 17 16:15:17 2025 GMT
            Not After : Dec 16 16:20:17 2026 GMT
        Subject: CN=19A742D292F19392F7CD8320288B4CC46A3BDB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:a2:8e:c1:e4:8e:36:17:76:12:a7:02:49:
                    7f:8c:1d:21:f3:76:db:37:6a:36:5c:b5:d2:85:2d:
                    0f:8f:e3:e4:1c:c1:15:c1:33:62:13:8f:a1:10:ca:
                    23:eb:89:1b:18:20:22:68:c7:be:98:77:5d:e1:d8:
                    9a:0d:98:48:3a:15:27:cc:33:ad:79:aa:ca:8c:de:
                    67:68:2c:00:64:c3:c5:cc:f1:80:5b:c1:0f:23:5c:
                    33:3e:22:d0:6b:cd:cb:33:8d:fc:24:a5:08:05:20:
                    0a:29:37:fb:7a:68:30:b9:ff:bc:b7:26:dd:7b:74:
                    87:10:9a:39:e1:a5:68:82:d4:61:25:a7:17:57:95:
                    6b:10:95:59:9f:94:78:8e:ac:2d:5e:ee:7d:a1:9b:
                    36:63:8f:ec:41:1f:d0:59:74:ab:3c:b2:ea:d8:75:
                    c0:9a:ef:ea:39:0a:1b:a3:46:f1:a7:e2:74:4f:e6:
                    e4:7b:e7:94:b8:d7:de:98:87:02:88:b2:e2:51:c7:
                    48:e0:44:33:fe:95:d3:9c:14:82:dd:ce:08:b1:bc:
                    04:44:db:02:2b:b9:6d:18:47:b9:fa:87:fe:e7:ac:
                    f3:5e:d5:7e:ad:39:58:d0:73:a2:58:b3:b8:c4:79:
                    7d:71:73:ce:4a:87:b7:67:67:0f:9e:23:d4:8b:11:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A7:42:D2:92:F1:93:92:F7:CD:83:20:28:8B:4C:C4:6A:3B:DB:55
            X509v3 Authority Key Identifier:
                keyid:6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a3a2f33322d3332203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:0a:b9:0c:80:60:4f:4b:83:f5:2d:51:8b:a5:ec:71:1d:2c:
         da:c7:cd:95:55:27:06:cd:f7:7f:19:35:66:0a:5c:74:3f:79:
         d8:00:68:e9:f3:96:06:30:eb:d2:08:57:bc:45:a0:9e:86:a4:
         b3:ca:28:09:eb:e3:b6:dc:99:52:53:94:41:5b:8e:e8:60:45:
         98:ff:c4:59:cc:a4:82:b4:ec:cf:ea:b0:2f:c9:07:4a:0b:d1:
         89:b8:7d:80:2d:93:c9:71:4e:f8:92:2e:75:ef:cc:07:da:24:
         0a:89:cf:82:39:c6:d5:f6:df:ec:6f:4b:aa:f3:f9:55:77:8a:
         39:9f:a1:27:06:2f:ad:b4:66:94:87:6e:66:a9:6e:1c:ab:fb:
         59:26:8a:18:6b:c2:e0:33:89:b1:b4:ab:d6:d7:05:74:1d:56:
         c9:5f:91:e8:19:1a:28:c2:cb:3c:19:b5:5a:b9:7a:38:f4:38:
         32:43:b6:6c:24:64:7c:73:8e:6f:97:8b:1c:f1:8d:aa:ed:a7:
         63:b5:a3:78:56:8f:57:cb:9b:1c:1a:73:2b:e9:61:a3:0e:38:
         9c:bf:dc:cf:c6:60:b8:98:73:4d:ef:66:db:47:31:49:04:7a:
         c6:0d:88:73:db:4c:32:4f:f4:d1:bd:bf:f1:62:c1:7d:62:94:
         a1:1e:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 10:16:08 2025 by rpki-client