This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/323830343a353336383a3a2f33322d313238203d3e20323638353832.roa
File:                     323830343a353336383a3a2f33322d313238203d3e20323638353832.roa (raw, json)
Hash identifier:          0//cfkPe9QqQLDOWsfvLbz5aGuMzjGMe//kVHQ/ruhs=
Subject key identifier:   74:E7:A8:F6:4E:69:09:4E:3E:41:BC:C0:2A:E9:91:FC:26:82:82:B4
Certificate issuer:       /CN=1B091E04D4F6A99431893FC7D67B71130256727C
Certificate serial:       19CDA4056DB1FB8C6345721D5B60F554CCAEBD4E
Authority key identifier: 1B:09:1E:04:D4:F6:A9:94:31:89:3F:C7:D6:7B:71:13:02:56:72:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B091E04D4F6A99431893FC7D67B71130256727C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/323830343a353336383a3a2f33322d313238203d3e20323638353832.roa
Signing time:             Sun 07 Dec 2025 20:22:20 +0000
ROA not before:           Sun 07 Dec 2025 20:17:20 +0000
ROA not after:            Sun 06 Dec 2026 20:22:20 +0000
asID:                     268582
IP address blocks:        2804:5368::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/1B091E04D4F6A99431893FC7D67B71130256727C.crl
                          rsync://rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/1B091E04D4F6A99431893FC7D67B71130256727C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B091E04D4F6A99431893FC7D67B71130256727C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cd:a4:05:6d:b1:fb:8c:63:45:72:1d:5b:60:f5:54:cc:ae:bd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B091E04D4F6A99431893FC7D67B71130256727C
        Validity
            Not Before: Dec  7 20:17:20 2025 GMT
            Not After : Dec  6 20:22:20 2026 GMT
        Subject: CN=74E7A8F64E69094E3E41BCC02AE991FC268282B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:3c:6b:88:79:72:8e:c9:44:ab:29:bc:5b:
                    46:67:f1:d4:25:c8:07:a6:a8:3f:53:28:19:a6:b0:
                    f6:96:37:88:6c:a7:a1:3f:62:55:a2:4b:1a:35:b0:
                    90:53:dc:81:5a:50:62:b2:36:f0:be:2c:0d:a8:17:
                    bb:ad:bb:d8:3a:7b:72:bd:30:db:5e:5f:08:4c:f8:
                    95:67:a4:e9:2c:7e:46:b1:b2:76:ab:fc:8d:8a:a2:
                    ed:b2:be:b4:3c:92:1c:11:ed:fa:1e:14:70:09:67:
                    95:0f:fb:17:d7:92:11:11:b1:74:6d:6d:c2:a5:84:
                    54:5c:25:e1:ef:32:fa:f6:7e:42:a2:03:09:8b:22:
                    70:2c:55:a7:18:8f:53:a3:42:78:64:84:5a:7d:18:
                    1c:e6:8f:16:ab:5f:54:f5:b1:bb:c7:51:58:2f:61:
                    a5:5c:eb:02:d6:72:fc:02:02:e7:ce:b1:d7:b8:09:
                    69:57:94:14:4f:39:21:fa:fc:63:d2:71:1b:af:c9:
                    be:64:cb:74:fc:2a:64:5f:82:1c:c7:05:bf:e3:78:
                    58:49:23:34:38:bc:e7:5d:5d:07:f7:41:f2:fc:30:
                    c6:1d:10:2b:45:23:9f:54:bb:fd:49:4f:c2:06:12:
                    59:e1:65:8f:bd:c7:4c:0f:1b:92:b6:ea:09:a9:60:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E7:A8:F6:4E:69:09:4E:3E:41:BC:C0:2A:E9:91:FC:26:82:82:B4
            X509v3 Authority Key Identifier:
                keyid:1B:09:1E:04:D4:F6:A9:94:31:89:3F:C7:D6:7B:71:13:02:56:72:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/1B091E04D4F6A99431893FC7D67B71130256727C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B091E04D4F6A99431893FC7D67B71130256727C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/323830343a353336383a3a2f33322d313238203d3e20323638353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5368::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:8e:0d:c5:f7:75:1d:6e:80:e1:c8:c0:02:2b:21:10:f5:cb:
         4f:77:cf:7c:0e:1f:40:a7:4e:75:7b:70:bd:31:6a:df:69:ab:
         b8:de:e4:06:28:bb:03:07:63:5c:a5:ff:e0:7b:a0:55:56:fa:
         d0:28:bf:fd:6c:1e:64:84:e6:2d:3a:1d:c4:e0:fa:4c:f9:de:
         f4:27:28:c6:54:2f:c5:72:39:4d:2c:65:be:49:27:f0:e1:f6:
         95:e8:51:11:62:82:71:be:b4:8e:7a:aa:70:43:dd:8d:c3:92:
         c8:be:23:17:93:4c:94:90:58:be:12:f9:f6:90:91:c6:22:e0:
         92:95:65:15:6f:13:5a:c4:ee:bf:fe:57:17:77:b4:c4:7e:0f:
         f0:c3:7c:e4:da:2a:54:0c:f5:a6:f5:89:61:8e:c5:d2:ab:f7:
         0d:8b:65:50:11:b9:b6:d6:4d:82:44:6d:37:e4:8b:b8:71:5a:
         f9:d5:95:a0:88:3a:14:27:e2:12:da:bb:fd:14:f4:e6:0c:96:
         01:a2:4d:85:8e:30:a8:71:99:6e:80:0d:7d:bf:de:1f:14:7d:
         2b:d2:95:12:6c:99:7b:15:10:b3:e9:7f:b3:6f:5f:c2:e8:75:
         3a:b7:6c:bf:c8:a5:7e:a5:25:8c:0e:c4:c4:28:a1:e4:be:da:
         07:b3:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:46:37 2025 by rpki-client