This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwvqdfTs9ciLiLoPERweNvXzGnEoqKfPtZhXH54hW6yY/0/323830343a386430303a3a2f33322d3332203d3e20323733333238.roa
File:                     323830343a386430303a3a2f33322d3332203d3e20323733333238.roa (raw, json)
Hash identifier:          RCUMbkJZsl5/VlCysiplKiZAJXJriHsOSM+z9oS42qg=
Subject key identifier:   6A:27:E5:F7:48:46:34:1F:1A:17:8D:37:A6:18:66:3A:DA:B6:2E:0D
Certificate issuer:       /CN=715DA7E1561B1FE6DBC758B714B8B019E815726C
Certificate serial:       4B00BE50632B177FA4E28B7EA8C9602B2C80CFFB
Authority key identifier: 71:5D:A7:E1:56:1B:1F:E6:DB:C7:58:B7:14:B8:B0:19:E8:15:72:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/715DA7E1561B1FE6DBC758B714B8B019E815726C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwvqdfTs9ciLiLoPERweNvXzGnEoqKfPtZhXH54hW6yY/0/323830343a386430303a3a2f33322d3332203d3e20323733333238.roa
Signing time:             Wed 10 Dec 2025 12:53:19 +0000
ROA not before:           Wed 10 Dec 2025 12:48:19 +0000
ROA not after:            Wed 09 Dec 2026 12:53:19 +0000
asID:                     273328
IP address blocks:        2804:8d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwvqdfTs9ciLiLoPERweNvXzGnEoqKfPtZhXH54hW6yY/0/715DA7E1561B1FE6DBC758B714B8B019E815726C.crl
                          rsync://rpki-repo.registro.br/repo/BwvqdfTs9ciLiLoPERweNvXzGnEoqKfPtZhXH54hW6yY/0/715DA7E1561B1FE6DBC758B714B8B019E815726C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/715DA7E1561B1FE6DBC758B714B8B019E815726C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:00:be:50:63:2b:17:7f:a4:e2:8b:7e:a8:c9:60:2b:2c:80:cf:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715DA7E1561B1FE6DBC758B714B8B019E815726C
        Validity
            Not Before: Dec 10 12:48:19 2025 GMT
            Not After : Dec  9 12:53:19 2026 GMT
        Subject: CN=6A27E5F74846341F1A178D37A618663ADAB62E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:76:28:08:38:c3:a2:85:bc:06:28:a2:d8:
                    ba:8d:63:d6:09:b4:b6:1c:3c:2b:3c:f6:7e:1c:fc:
                    36:20:7f:71:ef:c1:89:b4:3c:90:f7:47:36:f7:bb:
                    8e:fd:58:37:e2:f4:92:a0:37:80:e4:26:7e:fa:2c:
                    43:be:44:27:1f:f2:8e:47:a9:7d:eb:5b:8c:b1:9c:
                    e1:75:0c:5d:c8:d0:2f:cb:50:51:60:d8:46:3a:2c:
                    96:9b:8f:8f:92:c2:cc:f5:5e:86:b9:7c:e5:a9:d8:
                    d4:7f:a1:35:a6:c4:6d:78:f4:f3:fb:37:e8:68:c2:
                    3b:34:cc:06:ba:7d:e5:40:66:9d:f2:3a:28:6f:47:
                    e1:ae:5e:d5:7a:2e:71:56:2d:99:79:7d:10:97:f6:
                    07:d2:85:50:fe:ea:18:1d:39:9a:92:78:11:0b:93:
                    b9:28:be:04:cb:5c:81:76:cd:93:0d:35:7a:55:06:
                    76:47:04:5d:81:38:b3:6f:91:c1:85:d3:f8:3a:81:
                    e0:bf:e3:d6:a8:24:02:17:70:e1:95:2f:c2:d0:c6:
                    ca:b2:f1:49:04:eb:46:b3:2a:a0:9d:fb:52:30:58:
                    f4:44:48:1c:8f:52:9c:6c:cf:bd:f1:ef:16:6f:b0:
                    02:1c:01:24:1d:6e:fe:e0:e8:62:00:d4:cc:f6:c9:
                    e4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:27:E5:F7:48:46:34:1F:1A:17:8D:37:A6:18:66:3A:DA:B6:2E:0D
            X509v3 Authority Key Identifier:
                keyid:71:5D:A7:E1:56:1B:1F:E6:DB:C7:58:B7:14:B8:B0:19:E8:15:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwvqdfTs9ciLiLoPERweNvXzGnEoqKfPtZhXH54hW6yY/0/715DA7E1561B1FE6DBC758B714B8B019E815726C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/715DA7E1561B1FE6DBC758B714B8B019E815726C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwvqdfTs9ciLiLoPERweNvXzGnEoqKfPtZhXH54hW6yY/0/323830343a386430303a3a2f33322d3332203d3e20323733333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:9f:e2:dc:b6:c4:3a:36:bd:89:46:6b:62:eb:2b:15:d9:
         04:95:52:51:ab:69:6f:bb:e5:e7:cb:22:4b:f6:b6:82:06:54:
         04:0e:40:12:8c:a6:5f:0d:c9:d2:05:a2:cd:69:8a:07:75:f0:
         03:d0:e1:f2:97:20:be:e7:6f:3f:57:2b:69:df:a9:90:34:e0:
         c8:11:62:f5:27:1d:90:be:b4:19:73:16:87:b5:9a:3a:11:a4:
         10:2c:2d:bd:f5:c6:2f:3b:4f:da:9e:d2:f4:03:58:11:7a:82:
         ce:23:02:b8:89:75:62:d8:c3:3b:45:23:f2:5d:4e:68:63:70:
         47:59:ab:65:76:37:60:34:1d:ef:70:64:08:a7:6d:fa:8f:62:
         39:f8:8a:a4:07:87:68:95:45:a0:d2:a6:31:91:3b:c5:7d:c2:
         e1:d2:73:52:67:4f:94:04:d7:89:55:ba:77:8f:d5:7f:66:4b:
         db:ca:bd:01:ef:0b:ed:e9:5e:e0:4d:db:79:e4:d0:13:3d:46:
         9e:4f:34:6b:50:94:46:bf:56:a1:1f:17:0a:13:d0:14:d2:fb:
         e4:0e:6d:cf:da:5b:55:47:f1:83:bd:e2:a9:c1:3d:76:78:af:
         8c:23:dd:a9:31:22:c3:7a:07:a6:3d:77:8d:fb:02:c1:51:31:
         f3:67:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:09 2025 by rpki-client