This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          vV4MXmlVu3UxmGhKaq4jiWkPqWSwR5seNQECN7FuvH4=
Subject key identifier:   84:74:27:C8:1E:C6:3E:62:6F:4C:A9:F1:51:E3:C2:1F:B9:DF:AA:6B
Certificate issuer:       /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Certificate serial:       7E753A28C2665A20876B11C5E3C31271D8F10EFE
Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 09 Dec 2025 23:47:01 +0000
ROA not before:           Tue 09 Dec 2025 23:42:01 +0000
ROA not after:            Tue 08 Dec 2026 23:47:01 +0000
asID:                     267991
IP address blocks:        2804:5654:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 16:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:75:3a:28:c2:66:5a:20:87:6b:11:c5:e3:c3:12:71:d8:f1:0e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
        Validity
            Not Before: Dec  9 23:42:01 2025 GMT
            Not After : Dec  8 23:47:01 2026 GMT
        Subject: CN=847427C81EC63E626F4CA9F151E3C21FB9DFAA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:ab:61:fb:ea:ad:01:64:f1:7c:3e:ad:47:
                    10:8b:e0:98:01:0a:4a:32:e1:96:14:18:38:b2:f5:
                    fd:1b:08:b1:cc:06:c8:46:52:11:aa:f4:0e:00:13:
                    6c:30:f7:6f:df:3a:c1:9f:01:b4:03:9f:d2:79:17:
                    5b:de:f0:f1:f3:24:32:e1:25:41:5a:17:98:fe:68:
                    33:4f:18:59:79:9a:9a:e5:66:29:ea:55:d2:a1:02:
                    4a:bc:a0:50:4d:4f:f5:e9:0b:f7:95:b0:15:0a:10:
                    bf:fc:b5:36:80:b6:68:02:73:f3:bd:95:b9:97:7b:
                    5d:cd:4f:f6:e3:12:fe:d0:65:7d:60:31:46:5c:62:
                    c4:f3:24:c0:f5:fb:42:10:cf:e0:9b:15:42:c5:5a:
                    64:dd:fa:c5:13:3e:24:8b:91:fb:ee:2d:34:aa:a9:
                    c1:08:9c:89:4c:ec:e4:b9:54:a9:75:51:6f:c8:2d:
                    bb:fe:a6:a3:59:41:4f:64:57:72:e7:7f:33:3f:36:
                    9d:82:55:bf:85:41:c0:96:a3:7b:cc:fa:1f:37:fe:
                    72:05:97:4d:a1:0d:2f:2b:74:97:98:1b:e0:95:0b:
                    04:41:f1:df:cf:76:5b:1b:fa:11:a9:be:ce:67:26:
                    a9:df:37:4f:e1:bc:e6:34:12:2d:e4:5a:19:df:b8:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:74:27:C8:1E:C6:3E:62:6F:4C:A9:F1:51:E3:C2:1F:B9:DF:AA:6B
            X509v3 Authority Key Identifier:
                keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d3:78:5b:a3:f7:12:2c:0b:c2:22:f3:a9:49:00:cd:5d:e8:fc:
         8f:af:50:2d:39:00:d1:fe:da:00:63:47:b8:81:0e:fb:fb:71:
         b2:20:9f:d3:e0:dc:59:55:e6:fa:8a:9d:41:c9:14:b8:2c:52:
         98:28:76:25:f1:f9:b4:89:ad:0b:d9:20:d0:16:71:5e:a3:e0:
         de:a8:e2:97:a3:db:50:51:e1:4c:57:22:30:1f:81:5e:46:74:
         e6:63:3d:26:31:59:20:a4:ad:29:dd:a8:f7:2b:68:e4:da:54:
         77:52:24:1b:76:07:de:e6:74:01:dd:40:bd:2c:6a:36:7d:f2:
         48:73:3b:e0:ef:f2:21:25:9b:df:d8:63:ca:42:19:dc:6e:92:
         59:10:1a:6f:75:60:1a:40:04:a4:80:56:37:15:68:5e:cd:d0:
         8f:da:0e:73:4c:c3:99:2a:42:12:eb:58:5d:c7:92:5e:0f:d2:
         4f:8c:73:e8:ee:92:e8:31:f7:3f:41:51:66:27:44:1e:1b:98:
         59:e2:72:4e:b7:99:00:ce:0d:ab:b5:86:8d:08:00:5a:b6:7d:
         92:3f:42:43:7f:e0:a2:a5:d2:2a:e9:9d:11:4e:ee:80:42:81:
         fd:4c:b3:05:4d:79:27:cb:7e:34:f2:db:11:a2:0a:4a:be:c4:
         3a:e1:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:56:56 2025 by rpki-client