This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3a2f33322d3332203d3e20323733333339.roa
File:                     323830343a386432383a3a2f33322d3332203d3e20323733333339.roa (raw, json)
Hash identifier:          +SO3HtC1RwxHePQXBxrvtvZwYFKtNFJbJdbh6UOnd5Q=
Subject key identifier:   F4:DD:BC:AA:EA:68:E0:B4:79:C6:FB:21:FC:60:77:95:AE:37:4D:62
Certificate issuer:       /CN=D7347A579D717176ED60950710B08583D0EE5541
Certificate serial:       1A6B8528F8AF4DB1A362CD3BF5A2127BD307F087
Authority key identifier: D7:34:7A:57:9D:71:71:76:ED:60:95:07:10:B0:85:83:D0:EE:55:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7347A579D717176ED60950710B08583D0EE5541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3a2f33322d3332203d3e20323733333339.roa
Signing time:             Thu 18 Dec 2025 13:59:36 +0000
ROA not before:           Thu 18 Dec 2025 13:54:36 +0000
ROA not after:            Thu 17 Dec 2026 13:59:36 +0000
asID:                     273339
IP address blocks:        2804:8d28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/D7347A579D717176ED60950710B08583D0EE5541.crl
                          rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/D7347A579D717176ED60950710B08583D0EE5541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7347A579D717176ED60950710B08583D0EE5541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 22:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6b:85:28:f8:af:4d:b1:a3:62:cd:3b:f5:a2:12:7b:d3:07:f0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7347A579D717176ED60950710B08583D0EE5541
        Validity
            Not Before: Dec 18 13:54:36 2025 GMT
            Not After : Dec 17 13:59:36 2026 GMT
        Subject: CN=F4DDBCAAEA68E0B479C6FB21FC607795AE374D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:45:d1:eb:06:5e:37:26:b9:72:2d:f9:33:
                    49:fb:e4:17:39:8b:94:09:c5:80:78:40:fb:f5:d2:
                    f8:2a:d5:d1:fa:90:64:b5:b9:d1:cf:b8:a7:c9:55:
                    62:90:47:77:0a:48:8a:b4:96:e6:42:74:45:56:cd:
                    ee:0e:9c:f4:02:d8:95:25:a0:0c:a7:99:86:e8:98:
                    ac:f8:92:be:e8:c4:4d:62:be:02:01:c9:39:d7:77:
                    0b:a8:be:1c:7a:35:61:4a:4c:89:0a:47:04:a5:f8:
                    61:c5:c0:2c:9a:0e:f8:62:c8:ed:d0:50:bf:fd:7c:
                    5d:27:8e:a5:9a:cb:7c:c4:4f:c7:0b:33:ce:2c:e3:
                    4e:bb:5a:32:34:0e:20:0b:ef:c0:6e:14:a5:9e:8a:
                    58:78:f3:53:ef:21:fe:e6:11:31:36:65:e1:66:92:
                    01:e0:41:54:98:12:d5:53:f8:6b:47:2b:04:ae:88:
                    de:be:c3:24:a8:c8:aa:da:f1:8e:a2:6c:32:3f:9d:
                    44:0b:77:6c:81:4a:2f:c9:e5:ec:d2:cb:72:83:85:
                    c7:ff:6f:22:64:c6:af:ba:0d:f6:f0:5f:4a:81:f1:
                    68:31:5b:5b:23:12:98:82:e1:93:17:39:0e:ed:f6:
                    66:84:d7:32:ff:e3:88:8e:ff:7e:2c:b2:4f:1d:56:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DD:BC:AA:EA:68:E0:B4:79:C6:FB:21:FC:60:77:95:AE:37:4D:62
            X509v3 Authority Key Identifier:
                keyid:D7:34:7A:57:9D:71:71:76:ED:60:95:07:10:B0:85:83:D0:EE:55:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/D7347A579D717176ED60950710B08583D0EE5541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7347A579D717176ED60950710B08583D0EE5541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3a2f33322d3332203d3e20323733333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:93:37:0d:d9:a6:f2:72:94:76:a8:f5:37:b8:8a:32:92:
         b6:c2:b7:91:2d:5c:b3:59:05:f9:0f:9c:84:bc:98:fd:ec:33:
         7d:ca:72:d0:5f:3a:9a:06:ab:f6:8c:a9:01:63:d6:e4:47:83:
         a7:aa:80:a4:6f:9c:b1:5b:8d:04:fb:18:55:04:b9:3e:70:67:
         b2:dc:df:c8:38:41:b3:6e:ca:99:fa:62:31:ab:d6:a0:01:6a:
         36:cf:78:06:13:d5:ab:5d:eb:54:1a:0b:10:ca:8b:ed:61:19:
         b5:3e:3c:63:5c:00:65:26:61:66:15:e4:c2:03:d6:a6:9d:11:
         64:d2:07:53:35:13:82:28:41:41:7f:cb:2b:40:60:87:06:a4:
         3c:95:77:c5:12:5f:37:5e:f1:10:2e:34:7e:62:9a:13:b6:c5:
         30:a6:27:14:ea:8a:6b:c6:7a:ba:a6:ae:2c:a9:77:61:b6:c1:
         20:71:d7:94:e8:26:0a:69:5d:09:b4:7b:65:d7:b9:16:24:3e:
         05:61:4d:1c:73:58:cb:57:96:cc:2d:52:b9:05:d6:af:eb:4f:
         1b:2d:0d:68:f1:2d:4e:7f:9e:24:ac:21:0e:8f:a6:a8:d6:b8:
         86:95:6f:5c:51:fa:0b:b1:06:0f:3f:b1:56:49:f1:4b:9e:8c:
         c1:48:e5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:01:31 2025 by rpki-client