This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/323830343a366132303a3a2f33322d3438203d3e20323730333131.roa
File:                     323830343a366132303a3a2f33322d3438203d3e20323730333131.roa (raw, json)
Hash identifier:          S2uysMBsCsqbL1WCVbFHeTVA1l8ZJhcCbcfwE1UeChA=
Subject key identifier:   82:C9:6A:FA:3A:FB:E3:6F:E4:65:6A:A3:C0:79:51:33:58:BF:59:7C
Certificate issuer:       /CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80
Certificate serial:       5CB649A3F97ABC255B8C25348ADE56B9A19C0533
Authority key identifier: 85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/323830343a366132303a3a2f33322d3438203d3e20323730333131.roa
Signing time:             Sun 07 Dec 2025 22:20:59 +0000
ROA not before:           Sun 07 Dec 2025 22:15:59 +0000
ROA not after:            Sun 06 Dec 2026 22:20:59 +0000
asID:                     270311
IP address blocks:        2804:6a20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl
                          rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b6:49:a3:f9:7a:bc:25:5b:8c:25:34:8a:de:56:b9:a1:9c:05:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80
        Validity
            Not Before: Dec  7 22:15:59 2025 GMT
            Not After : Dec  6 22:20:59 2026 GMT
        Subject: CN=82C96AFA3AFBE36FE4656AA3C079513358BF597C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:50:31:8a:27:3f:07:4d:f5:2f:87:28:74:
                    ab:70:1c:d4:8d:b6:24:c7:a4:0e:43:9e:62:d8:fe:
                    e9:fa:7a:0f:56:05:38:6d:8c:10:6a:8b:62:c6:64:
                    b2:cf:98:40:60:f8:31:ff:67:7d:b0:44:b5:de:2e:
                    1b:8e:c1:a4:3e:fa:df:7f:cb:4b:17:0e:d8:d5:eb:
                    4a:ac:81:14:6f:a0:5e:fb:a9:32:3b:6e:69:d6:4e:
                    29:20:92:8f:b5:d0:7a:b9:29:3c:d1:82:82:b7:e6:
                    79:57:f1:9d:04:34:6d:94:ff:8f:2c:6b:da:39:51:
                    d4:36:40:7c:0a:f0:73:49:b0:53:b5:c7:88:64:5f:
                    9c:45:54:f7:9a:0b:f7:99:ee:9b:52:52:a5:0e:23:
                    5c:a3:a7:25:5f:d4:ac:dd:81:11:ae:29:7e:6a:1a:
                    d6:3d:da:93:0f:5f:05:4c:97:c9:46:2c:48:53:72:
                    f0:96:bf:5b:8e:77:3a:89:3b:69:14:b7:81:99:a9:
                    c1:d9:9f:5a:e8:4b:a3:7b:8b:39:3a:55:17:99:88:
                    d7:b7:aa:82:ea:76:cd:86:10:9e:2c:f4:27:86:b2:
                    c2:c3:1f:c8:23:92:4a:c6:9b:39:32:6a:a2:64:45:
                    1d:a1:48:9b:cf:61:97:84:58:54:2b:e9:70:76:e3:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C9:6A:FA:3A:FB:E3:6F:E4:65:6A:A3:C0:79:51:33:58:BF:59:7C
            X509v3 Authority Key Identifier:
                keyid:85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/323830343a366132303a3a2f33322d3438203d3e20323730333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:21:2e:55:e4:6c:c4:8f:3a:a5:b2:c0:0e:99:0d:29:e3:31:
         85:e0:4d:44:ab:d6:26:d6:cf:8d:59:0c:e3:45:22:dc:9c:15:
         0c:51:91:03:52:a2:a3:2b:40:7b:b8:15:01:af:c1:dd:be:51:
         91:83:b9:bf:96:01:f9:8c:47:b6:33:53:d1:b9:76:3d:2a:d5:
         45:a8:23:85:c2:e0:ee:99:43:68:ed:a2:c6:b5:4c:aa:76:d7:
         7f:d7:0f:f3:f6:33:c9:30:1c:be:1f:74:fb:ca:df:37:ac:76:
         8e:ad:66:14:da:33:df:4b:88:95:a1:61:8b:56:f0:2e:0e:0a:
         52:ed:3e:26:7b:b8:b0:05:ca:87:95:9f:73:82:a2:69:14:76:
         1c:ee:c2:6f:7b:8b:1c:b1:41:76:f5:b3:50:87:38:1d:98:12:
         91:14:4d:24:0c:99:9b:ba:d6:a2:c9:c2:1c:0c:c8:d5:48:dd:
         c2:f8:94:ca:c6:d5:e7:06:13:ec:78:44:4e:38:a9:23:0b:25:
         a8:b4:21:4f:19:9d:92:22:7b:cd:0f:93:3f:33:8f:e6:67:ba:
         46:f9:5f:77:35:7d:7e:41:c8:8b:51:54:5a:9d:96:f4:41:73:
         57:4d:1e:ba:06:11:05:4e:ad:c6:e3:78:64:3e:32:90:2a:41:
         77:e9:9a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:54:24 2025 by rpki-client