This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a383030303a3a2f33342d3334203d3e20323732323435.roa
File:                     323830343a383433303a383030303a3a2f33342d3334203d3e20323732323435.roa (raw, json)
Hash identifier:          muDFoa2oHdvRKwyhPRZGPUGX//evM20lPQYrZObSxaQ=
Subject key identifier:   6E:AF:C4:99:05:DA:01:89:D6:6A:9C:4D:7E:74:6E:1D:ED:28:84:54
Certificate issuer:       /CN=7B95A4B07BA817CC9D8FD2E337A916689CD15D79
Certificate serial:       29109C26983167428168DE9C99BF982E48D88C4B
Authority key identifier: 7B:95:A4:B0:7B:A8:17:CC:9D:8F:D2:E3:37:A9:16:68:9C:D1:5D:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a383030303a3a2f33342d3334203d3e20323732323435.roa
Signing time:             Mon 15 Dec 2025 14:27:57 +0000
ROA not before:           Mon 15 Dec 2025 14:22:57 +0000
ROA not after:            Mon 14 Dec 2026 14:27:57 +0000
asID:                     272245
IP address blocks:        2804:8430:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.crl
                          rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:10:9c:26:98:31:67:42:81:68:de:9c:99:bf:98:2e:48:d8:8c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B95A4B07BA817CC9D8FD2E337A916689CD15D79
        Validity
            Not Before: Dec 15 14:22:57 2025 GMT
            Not After : Dec 14 14:27:57 2026 GMT
        Subject: CN=6EAFC49905DA0189D66A9C4D7E746E1DED288454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:59:37:b0:85:d6:02:46:7c:e3:ca:20:44:
                    fd:17:9b:7f:b6:7b:8a:b8:27:26:d2:a4:a6:3b:94:
                    16:f5:b8:ab:ab:e7:c2:4e:2a:ad:b6:29:fe:26:3a:
                    4a:b9:e1:ea:d8:37:74:56:89:d0:90:46:da:6e:24:
                    10:d2:82:20:41:a4:75:74:d9:a7:62:8b:b4:83:8c:
                    17:19:93:af:3c:9d:1f:db:01:11:14:2a:4f:57:12:
                    c7:79:06:ed:ff:d4:56:6c:63:82:91:61:33:9c:ac:
                    c3:26:71:ea:c8:51:c5:ac:31:f8:6f:44:d0:52:14:
                    d3:70:88:ed:b5:e1:b2:1d:d9:a9:26:94:ac:b5:41:
                    a6:08:d2:b9:bf:3c:f5:04:23:f4:7d:8a:77:f9:aa:
                    4e:4e:48:ab:70:5c:de:36:54:0a:7b:f0:48:c1:ff:
                    1f:ad:79:93:c3:f1:6f:b5:3b:ab:93:1b:02:a2:98:
                    1f:16:b8:e6:08:36:9c:29:88:5e:b5:37:7b:9d:41:
                    bc:25:6c:09:b7:82:00:9e:f7:49:11:c7:51:e9:9b:
                    f7:55:16:48:cd:89:9a:25:fb:87:dc:a5:3c:d9:24:
                    7f:25:0c:75:74:ce:1e:ce:84:6a:76:31:2e:81:d6:
                    16:c8:ae:a1:3a:18:39:0f:b1:63:e1:ee:ef:81:90:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AF:C4:99:05:DA:01:89:D6:6A:9C:4D:7E:74:6E:1D:ED:28:84:54
            X509v3 Authority Key Identifier:
                keyid:7B:95:A4:B0:7B:A8:17:CC:9D:8F:D2:E3:37:A9:16:68:9C:D1:5D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a383030303a3a2f33342d3334203d3e20323732323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8430:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:1b:fc:90:8a:ba:48:b1:7d:81:91:f7:91:cf:8b:4f:c2:01:
         db:86:00:2c:72:e8:c8:08:47:26:be:74:e7:cc:d5:6d:d8:89:
         df:33:1f:c7:0c:63:9b:6e:23:e1:63:d1:4f:8c:7e:ea:d9:55:
         d2:e0:be:2a:51:df:9a:5a:66:0c:b8:97:68:a9:ec:58:94:94:
         4d:11:45:16:f6:1f:84:60:61:87:de:ca:b4:4b:aa:50:40:55:
         83:60:df:3e:25:8e:97:05:36:1c:67:f4:fa:e4:f3:a3:eb:f8:
         a2:8a:9e:59:7d:a7:7e:27:55:7f:52:b3:3c:57:32:91:8e:d3:
         0c:95:61:25:55:97:0b:3e:7d:27:ca:45:6e:e7:d2:dd:6a:e9:
         98:32:21:72:ad:63:b4:24:17:68:c3:1a:a5:20:c7:9e:cc:72:
         9e:93:11:51:b0:b7:60:1b:3e:b3:04:3a:ab:e0:26:61:7c:f1:
         41:d2:b9:cd:98:05:4c:6d:2d:0c:c9:8e:e5:af:b8:51:d2:65:
         1b:a8:2c:00:39:1e:c9:79:f2:99:9a:1a:10:44:5e:d2:09:3f:
         33:07:2e:8d:aa:ef:99:09:7b:3a:82:e4:d0:eb:5c:5a:5c:b6:
         91:c9:1e:92:bb:90:6e:c0:8d:9f:83:ef:44:64:b9:18:30:03:
         84:02:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:54:51 2025 by rpki-client