This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/323830343a336134343a3a2f33322d3438203d3e20323636303830.roa
File:                     323830343a336134343a3a2f33322d3438203d3e20323636303830.roa (raw, json)
Hash identifier:          aIGJ5r9DHXrd1bASEzxd54qRFO0OD9iOv7D0WbuCmP0=
Subject key identifier:   50:AB:F7:1C:B2:8A:41:4D:A3:0D:F3:AB:12:58:CB:B7:C8:8F:34:A1
Certificate issuer:       /CN=B8597055C000755F848C4610D3866BC84F29B9BB
Certificate serial:       7641DBB087CF52F7C793F8C07588E70C8F95B2C7
Authority key identifier: B8:59:70:55:C0:00:75:5F:84:8C:46:10:D3:86:6B:C8:4F:29:B9:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8597055C000755F848C4610D3866BC84F29B9BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/323830343a336134343a3a2f33322d3438203d3e20323636303830.roa
Signing time:             Tue 16 Dec 2025 13:55:16 +0000
ROA not before:           Tue 16 Dec 2025 13:50:16 +0000
ROA not after:            Tue 15 Dec 2026 13:55:16 +0000
asID:                     266080
IP address blocks:        2804:3a44::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/B8597055C000755F848C4610D3866BC84F29B9BB.crl
                          rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/B8597055C000755F848C4610D3866BC84F29B9BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8597055C000755F848C4610D3866BC84F29B9BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 16:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:41:db:b0:87:cf:52:f7:c7:93:f8:c0:75:88:e7:0c:8f:95:b2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8597055C000755F848C4610D3866BC84F29B9BB
        Validity
            Not Before: Dec 16 13:50:16 2025 GMT
            Not After : Dec 15 13:55:16 2026 GMT
        Subject: CN=50ABF71CB28A414DA30DF3AB1258CBB7C88F34A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:a9:e8:2a:cb:22:1f:1d:69:a5:f8:5e:69:
                    ec:66:51:f2:ed:55:2e:41:33:33:b2:32:8e:63:13:
                    6a:f1:53:a9:30:e2:28:ec:35:94:76:79:cd:b2:e9:
                    22:69:28:9a:7c:b7:38:23:6d:28:f3:b6:1d:f2:40:
                    f0:ea:92:fb:bd:7a:90:11:ed:ca:48:2c:a1:f4:9a:
                    f6:ee:ce:c6:4b:fb:e2:09:ed:f4:2f:ad:60:24:73:
                    b9:60:93:96:21:f2:3d:8d:0a:a7:bf:9b:d7:ab:e9:
                    3f:d2:31:88:fe:28:a2:da:73:15:ba:9d:f4:f1:e5:
                    23:fc:19:8d:76:f6:b7:3a:c7:0a:9d:0e:00:18:e6:
                    59:14:90:91:71:1f:66:05:5d:7c:06:fd:31:ac:dc:
                    db:79:e8:bc:e4:53:02:00:56:fc:ae:9e:e7:bf:a8:
                    66:a2:a9:1a:18:b3:94:96:2c:b7:e3:d8:4a:59:32:
                    04:81:6e:14:98:88:55:0c:ae:2b:7c:e4:34:8e:6a:
                    09:2d:51:c1:42:ff:25:49:f7:46:08:62:d8:61:47:
                    bd:3c:19:a9:8f:ae:77:27:88:06:cf:c6:dd:0a:1d:
                    e3:d6:79:61:f9:4f:04:9a:de:a0:b0:c9:1e:d1:e9:
                    ff:a6:43:da:a2:e1:9b:40:36:b7:50:a9:b7:db:50:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:F7:1C:B2:8A:41:4D:A3:0D:F3:AB:12:58:CB:B7:C8:8F:34:A1
            X509v3 Authority Key Identifier:
                keyid:B8:59:70:55:C0:00:75:5F:84:8C:46:10:D3:86:6B:C8:4F:29:B9:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/B8597055C000755F848C4610D3866BC84F29B9BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8597055C000755F848C4610D3866BC84F29B9BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/323830343a336134343a3a2f33322d3438203d3e20323636303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a44::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:f8:8f:63:1c:70:5b:ab:ec:6b:be:29:a6:d0:60:32:87:6a:
         53:48:97:cb:c3:25:c1:ee:38:8c:b8:f7:af:bf:44:93:06:8f:
         9d:1e:a2:4e:02:2d:f9:13:7d:4a:48:4f:60:aa:6f:62:2c:90:
         19:e7:a4:96:fa:e1:b7:25:e1:d2:d2:f7:3a:b0:70:b2:f3:a7:
         31:61:c9:0d:66:0b:86:f9:14:d1:4e:38:24:04:ed:f4:ac:6a:
         64:51:16:4d:e6:57:9b:45:54:52:cf:4c:9b:6e:c7:60:e5:3d:
         4c:26:18:1e:eb:2b:e1:e2:c3:f8:09:23:81:c6:72:08:ac:8f:
         50:78:d0:00:2e:52:29:f3:69:80:10:9f:23:cb:4a:4b:59:f0:
         44:13:79:d9:9a:de:53:7a:0e:7c:2c:cb:dc:f4:cb:18:96:30:
         a6:a0:9e:d7:f7:5a:21:34:eb:2f:fd:a1:b5:76:23:24:b7:fc:
         5a:1e:f5:93:e4:1b:2d:3e:ef:4a:1a:80:cf:bd:d2:87:34:01:
         36:75:64:b0:e5:7e:2e:42:fc:f0:d4:d4:9b:23:e2:17:a3:b4:
         e9:d0:92:58:d1:60:c5:1e:c2:ff:e8:04:37:77:aa:f7:5c:95:
         84:f9:9a:a3:4e:d2:5c:23:63:01:54:02:96:51:5d:74:08:b1:
         e7:a4:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:21:50 2025 by rpki-client