This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a633030303a3a2f33342d3334203d3e20323733343137.roa
File:                     323830343a386535303a633030303a3a2f33342d3334203d3e20323733343137.roa (raw, json)
Hash identifier:          7XbRaqqtLYGQJAmc6QKOsxksWIwutCtfptsEU+bAxxY=
Subject key identifier:   CB:C3:83:A0:15:F7:AB:83:39:27:06:DC:18:82:DD:59:0D:2F:1B:37
Certificate issuer:       /CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
Certificate serial:       212A06D5B81B9C762E2E5F119711608035A6FE38
Authority key identifier: 6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a633030303a3a2f33342d3334203d3e20323733343137.roa
Signing time:             Wed 17 Dec 2025 16:20:16 +0000
ROA not before:           Wed 17 Dec 2025 16:15:16 +0000
ROA not after:            Wed 16 Dec 2026 16:20:16 +0000
asID:                     273417
IP address blocks:        2804:8e50:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 18:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2a:06:d5:b8:1b:9c:76:2e:2e:5f:11:97:11:60:80:35:a6:fe:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
        Validity
            Not Before: Dec 17 16:15:16 2025 GMT
            Not After : Dec 16 16:20:16 2026 GMT
        Subject: CN=CBC383A015F7AB83392706DC1882DD590D2F1B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:99:23:e9:19:72:67:e8:1f:ce:fe:ed:d3:
                    d0:8c:68:60:64:72:b5:ba:36:47:fc:8c:7a:d6:ef:
                    15:f1:c2:a4:18:ab:24:fb:70:61:db:9e:7e:87:31:
                    12:01:0d:25:9a:95:2c:9c:ae:ad:20:b9:4f:b3:e1:
                    9d:04:a6:a6:b1:86:17:ae:f3:82:2b:53:9f:dd:c1:
                    e9:f4:03:ad:ce:06:7e:d7:53:7a:f3:37:a0:68:c5:
                    8c:7b:10:25:46:e4:eb:3c:60:ef:ff:40:dc:81:40:
                    cd:6e:cd:08:ed:ce:98:3e:16:0d:ee:ed:2b:2c:dd:
                    a6:97:50:e1:99:e0:4b:98:57:4b:0b:a8:24:c1:73:
                    1c:c1:95:16:01:d3:66:10:17:c1:ec:93:a4:1d:f5:
                    06:53:b3:06:54:aa:dc:48:54:ec:86:f7:ed:8d:6e:
                    5c:f4:ae:ec:48:2a:35:54:d3:ab:a7:c5:f0:07:41:
                    42:72:e7:02:1a:8a:86:7a:d3:85:71:c5:fb:a3:7c:
                    b5:04:e4:b2:21:af:33:36:e6:ed:75:44:c2:75:44:
                    6f:f4:33:f1:6b:36:0d:9a:92:02:b8:d4:bc:6b:d9:
                    1a:66:93:3c:a9:ab:e8:92:18:bf:8c:35:73:00:81:
                    0e:96:22:c6:c9:72:d9:12:6d:dd:c9:29:95:0f:ec:
                    1c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C3:83:A0:15:F7:AB:83:39:27:06:DC:18:82:DD:59:0D:2F:1B:37
            X509v3 Authority Key Identifier:
                keyid:6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a633030303a3a2f33342d3334203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e50:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:ec:0d:90:8e:11:e0:6f:29:8d:3c:b6:c8:bc:95:3b:eb:9e:
         dd:70:1b:c8:23:44:41:c7:b1:8b:3b:6b:1a:cf:53:e4:a8:2a:
         29:98:7b:3f:fc:8c:82:8b:04:a7:05:fa:fb:0e:fa:a0:35:4a:
         c8:e4:7b:66:fe:b4:ee:06:72:a5:4a:88:77:f6:d6:35:0d:17:
         c5:93:e8:52:2e:67:d0:1a:06:a7:75:5a:52:45:35:22:94:17:
         43:a2:32:85:2e:6c:51:74:ec:60:d5:d6:32:21:51:e0:9d:e7:
         1a:92:ab:96:38:03:0f:84:97:72:97:96:ee:4b:ae:f9:55:57:
         05:8d:e2:00:57:3d:3c:d2:b6:bb:35:62:df:60:c7:41:e9:69:
         ca:f5:21:35:11:a6:49:81:42:d5:55:bb:92:6d:e9:50:d5:c6:
         65:1a:ea:99:b3:21:bc:bf:8b:6f:fe:f1:16:e7:c9:21:4b:ef:
         7d:20:a9:d5:63:49:8e:6e:5f:62:33:4f:c7:0a:06:52:6f:25:
         b5:eb:d0:da:18:33:c3:bc:14:8f:15:fc:9f:45:42:1e:01:80:
         95:00:7d:e8:d1:0a:ce:14:37:fe:b5:0c:42:f1:f6:5e:11:e8:
         f1:c9:dc:ef:4c:6d:f4:af:4b:01:e5:ae:62:08:dc:5e:59:06:
         8a:32:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 10:16:16 2025 by rpki-client