This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a3a2f33322d3332203d3e20323639343333.roa
File:                     323830343a363438383a3a2f33322d3332203d3e20323639343333.roa (raw, json)
Hash identifier:          lZWUxsz08kZTpFYHrrvn1IhQswUYJMEy6ydUkkTeZTE=
Subject key identifier:   24:55:14:D8:FC:5E:65:D9:78:E0:B8:5B:1E:89:4B:91:12:EF:31:9C
Certificate issuer:       /CN=C829313C5887BBF090200FC897D4CC9B7ED4BC8C
Certificate serial:       0DE8C7ACA9220AFF8EB4D6D917C56EC84B4113D0
Authority key identifier: C8:29:31:3C:58:87:BB:F0:90:20:0F:C8:97:D4:CC:9B:7E:D4:BC:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C829313C5887BBF090200FC897D4CC9B7ED4BC8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a3a2f33322d3332203d3e20323639343333.roa
Signing time:             Thu 18 Dec 2025 19:59:57 +0000
ROA not before:           Thu 18 Dec 2025 19:54:57 +0000
ROA not after:            Thu 17 Dec 2026 19:59:57 +0000
asID:                     269433
IP address blocks:        2804:6488::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/C829313C5887BBF090200FC897D4CC9B7ED4BC8C.crl
                          rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/C829313C5887BBF090200FC897D4CC9B7ED4BC8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C829313C5887BBF090200FC897D4CC9B7ED4BC8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e8:c7:ac:a9:22:0a:ff:8e:b4:d6:d9:17:c5:6e:c8:4b:41:13:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C829313C5887BBF090200FC897D4CC9B7ED4BC8C
        Validity
            Not Before: Dec 18 19:54:57 2025 GMT
            Not After : Dec 17 19:59:57 2026 GMT
        Subject: CN=245514D8FC5E65D978E0B85B1E894B9112EF319C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:28:17:fa:85:b1:87:49:04:b3:0b:dd:e2:
                    81:20:b8:0e:2a:27:0e:4b:c6:4e:87:c1:64:1d:19:
                    b6:c0:ae:72:a5:2d:c5:bc:fa:0f:b0:07:02:78:2f:
                    b8:f6:ff:1c:0c:36:48:cd:fb:9c:ef:02:f5:4e:64:
                    fb:0f:47:af:2f:79:27:e9:ba:b9:03:34:89:a9:1e:
                    d5:5f:d4:f2:90:5b:81:65:0f:15:17:e0:05:59:7c:
                    db:c4:b0:b6:41:e4:56:d2:43:fc:b6:3e:cb:dc:03:
                    fc:7f:7c:f8:e4:5d:5a:6f:b6:b2:3c:5f:32:64:69:
                    78:8d:70:a2:c8:e4:c5:17:28:a0:9e:e1:7a:16:f4:
                    9e:c8:2a:11:6a:15:b1:f1:22:da:81:04:8e:5b:96:
                    0e:6c:29:b6:e3:17:64:21:74:e6:01:87:a9:99:6e:
                    53:ea:da:5e:5c:94:ae:5f:9e:d5:62:2a:db:34:1d:
                    d7:f0:95:5f:14:c4:07:04:8e:2a:e8:57:c4:de:2b:
                    3e:67:51:6c:e5:54:8d:d0:b8:d0:57:00:ba:9a:18:
                    de:a8:45:83:cb:76:ec:7c:da:df:36:7f:07:4a:8c:
                    65:88:1c:8e:47:dc:50:db:84:9a:4e:fe:c3:b5:4e:
                    10:4f:7a:2d:1e:8c:3e:08:a3:d9:7a:07:23:66:d6:
                    67:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:14:D8:FC:5E:65:D9:78:E0:B8:5B:1E:89:4B:91:12:EF:31:9C
            X509v3 Authority Key Identifier:
                keyid:C8:29:31:3C:58:87:BB:F0:90:20:0F:C8:97:D4:CC:9B:7E:D4:BC:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/C829313C5887BBF090200FC897D4CC9B7ED4BC8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C829313C5887BBF090200FC897D4CC9B7ED4BC8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a3a2f33322d3332203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6488::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:2a:70:8c:ab:44:87:37:82:75:fa:1c:02:6d:de:9e:67:ea:
         25:9d:f9:a0:00:af:2c:2c:54:e8:24:df:16:42:f2:2d:81:e6:
         fc:22:35:2f:b9:75:22:87:e2:04:b2:63:58:5b:61:56:86:c8:
         53:06:6c:4c:77:d8:8b:cb:12:78:a5:85:10:90:1d:e9:3b:54:
         3a:22:87:d5:21:5e:f5:ed:01:df:3b:5e:c9:61:73:e6:d3:24:
         32:cf:f2:b7:f3:c4:8f:d1:b4:38:7d:65:98:9c:19:4e:f4:eb:
         71:3d:7a:eb:7c:7c:4f:c8:f9:c0:a4:f2:4a:cd:cf:e4:03:34:
         1e:56:dd:12:8c:e6:83:88:1b:13:4d:9f:3f:5a:eb:f1:0b:32:
         f9:c6:c0:27:ad:4f:13:81:8f:22:3f:c3:47:06:56:4e:4c:84:
         f7:48:78:02:ed:46:a3:6e:e4:27:e1:bc:b8:56:86:92:4f:b9:
         5a:83:5e:51:77:02:3a:f9:58:45:a1:30:af:62:a4:7b:11:38:
         0b:e6:05:e3:e2:81:4d:da:25:92:03:07:98:40:8b:91:b7:30:
         14:36:8f:e5:2b:f7:76:14:8f:d4:e9:e3:25:3c:99:d2:15:bc:
         68:f0:ca:ba:ff:19:a6:83:a6:47:c6:53:db:0e:78:b5:07:ed:
         d4:6c:c3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:35:45 2025 by rpki-client