This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/323830343a343165383a3a2f33322d313238203d3e20323637343634.roa
File:                     323830343a343165383a3a2f33322d313238203d3e20323637343634.roa (raw, json)
Hash identifier:          7d8GMm+/p7YDkmnvROFd6jkWM10bxjqxccU2roVGRDI=
Subject key identifier:   CD:27:EF:D8:60:9E:A3:DF:91:E6:56:9E:84:89:18:56:F7:7E:08:FC
Certificate issuer:       /CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
Certificate serial:       2ED66F501F35552A5FBBD9D859FB5D072A8C8807
Authority key identifier: 5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/323830343a343165383a3a2f33322d313238203d3e20323637343634.roa
Signing time:             Thu 18 Dec 2025 15:00:47 +0000
ROA not before:           Thu 18 Dec 2025 14:55:47 +0000
ROA not after:            Thu 17 Dec 2026 15:00:47 +0000
asID:                     267464
IP address blocks:        2804:41e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl
                          rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d6:6f:50:1f:35:55:2a:5f:bb:d9:d8:59:fb:5d:07:2a:8c:88:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
        Validity
            Not Before: Dec 18 14:55:47 2025 GMT
            Not After : Dec 17 15:00:47 2026 GMT
        Subject: CN=CD27EFD8609EA3DF91E6569E84891856F77E08FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:25:6d:4d:52:e9:59:29:ac:f8:75:29:f1:
                    07:20:35:7a:e4:9a:ef:7a:84:5e:0a:4f:0e:ec:37:
                    cf:4a:47:a5:42:3f:24:3e:e8:8d:71:99:0a:88:cc:
                    2b:09:3f:c5:37:85:3c:39:19:c3:25:ba:0c:b0:6a:
                    35:fa:aa:0c:af:92:a6:8b:53:01:6a:39:e1:ca:82:
                    a7:a1:31:5e:53:c9:58:e8:c6:08:0b:0b:dc:82:65:
                    3a:95:77:ef:55:b7:07:17:39:70:97:59:35:fb:9d:
                    78:16:4e:55:03:0d:33:16:54:69:f2:8f:38:d0:46:
                    13:b3:2a:b4:42:1a:47:a5:55:a4:17:54:3f:00:36:
                    71:5d:2f:f0:f4:1f:66:9c:ce:dc:a0:59:48:44:c9:
                    2f:12:8d:5a:d4:eb:86:c3:21:f4:2d:c3:bf:9b:0d:
                    0a:f9:57:4b:b8:28:7a:54:73:72:e4:7b:37:3c:3d:
                    84:83:ca:e2:92:e5:bc:6f:87:f9:f5:73:07:90:9e:
                    cf:34:8f:22:46:d5:65:4a:e6:d0:5d:9a:d7:67:82:
                    d4:22:40:a1:72:a2:af:9a:55:79:f5:1e:b6:51:5f:
                    5b:16:c0:7f:7f:1a:aa:5d:19:23:6e:66:c6:ab:bd:
                    45:87:e5:65:83:60:5f:07:e1:6d:c2:9b:4f:fa:1c:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:27:EF:D8:60:9E:A3:DF:91:E6:56:9E:84:89:18:56:F7:7E:08:FC
            X509v3 Authority Key Identifier:
                keyid:5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/323830343a343165383a3a2f33322d313238203d3e20323637343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:9f:a3:87:d0:d5:ed:75:98:e2:44:e8:6d:b2:d2:ea:86:
         c3:ed:d4:c6:bd:e2:33:3a:7e:dc:77:b5:6a:e4:e0:a4:37:7a:
         d5:b0:81:b9:11:f7:f7:5f:10:c0:e5:ba:97:68:bf:66:24:8b:
         07:16:6c:0d:80:63:d4:5a:24:41:8d:ef:d8:3c:3d:c1:04:e0:
         3f:b9:80:f1:5e:cb:d3:34:a4:35:d5:28:6a:64:bc:26:a3:10:
         d2:3e:fd:8b:1d:dd:a2:7c:d1:75:3b:4e:75:d0:a4:d7:a1:53:
         aa:e0:a2:48:55:cc:a9:cb:8d:5b:3e:68:05:78:da:fb:0f:8b:
         0b:3b:4e:de:89:99:71:b4:7b:0b:51:e2:83:8e:bb:5b:68:3a:
         c5:98:7e:09:59:d1:4a:3a:bf:2a:4b:7d:94:72:34:25:d4:aa:
         59:31:bb:dd:dd:cf:1e:55:75:90:b9:5e:e7:03:13:b3:9a:e5:
         7d:62:73:c3:f8:89:4c:1f:7e:1e:51:03:17:5a:60:dd:36:2d:
         5d:93:1b:26:a1:5d:57:1d:71:df:64:cd:ec:01:93:f2:de:b1:
         0c:a2:fb:0b:e5:35:4a:3d:5a:ce:25:26:55:33:69:d2:66:1c:
         bc:c7:a1:a6:6b:98:6d:6c:6b:31:de:22:27:dc:0b:04:39:bf:
         b9:cf:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:16 2025 by rpki-client