This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/323830343a363166343a3a2f33322d313238203d3e20323639323637.roa
File:                     323830343a363166343a3a2f33322d313238203d3e20323639323637.roa (raw, json)
Hash identifier:          unKSO+imV35kAAAeAiJ6mi4dsNP2n9aqXl0oWrG6UDw=
Subject key identifier:   EE:4B:A2:1B:AE:EB:0A:37:7B:34:B0:8B:2F:55:C1:74:BF:0C:58:78
Certificate issuer:       /CN=E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834
Certificate serial:       2EB1569ADD8015A45C6F22CB4141B802C5EE7C88
Authority key identifier: E9:C1:CD:FE:92:29:50:B0:B7:5B:4B:EA:6E:AD:69:69:F1:C9:48:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/323830343a363166343a3a2f33322d313238203d3e20323639323637.roa
Signing time:             Mon 17 Nov 2025 18:05:29 +0000
ROA not before:           Mon 17 Nov 2025 18:00:29 +0000
ROA not after:            Mon 16 Nov 2026 18:05:29 +0000
asID:                     269267
IP address blocks:        2804:61f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.crl
                          rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b1:56:9a:dd:80:15:a4:5c:6f:22:cb:41:41:b8:02:c5:ee:7c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834
        Validity
            Not Before: Nov 17 18:00:29 2025 GMT
            Not After : Nov 16 18:05:29 2026 GMT
        Subject: CN=EE4BA21BAEEB0A377B34B08B2F55C174BF0C5878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:9d:88:fb:2e:4e:c1:68:37:0c:25:ef:1b:
                    ab:dc:bd:f9:a0:ca:10:4c:ff:04:2e:c6:c8:0e:4d:
                    3c:39:9e:d1:47:1c:0f:f1:f4:57:d3:e6:33:74:3f:
                    5e:ba:3c:25:c1:10:06:30:e6:1b:fb:fd:95:c3:87:
                    42:9a:1c:8a:5f:bd:6c:30:62:2e:ab:a1:bc:78:aa:
                    e4:41:82:67:54:1f:61:dd:a5:23:33:91:88:11:8f:
                    63:e1:04:5d:d6:42:b3:cb:01:02:45:ea:1e:ae:94:
                    51:e6:17:d0:52:0c:c3:b3:c2:c2:b8:76:98:94:60:
                    df:44:1a:ec:15:b3:51:46:cc:01:ed:af:bc:e6:03:
                    5d:1c:b6:e0:29:d8:69:af:8a:52:b4:68:bf:41:89:
                    79:6c:0e:dc:d7:16:fe:bb:9d:ae:17:b7:6a:7d:4c:
                    39:18:bb:40:09:7e:15:44:aa:b0:be:24:1d:bd:52:
                    85:b9:84:3a:11:0f:49:64:43:48:ea:ff:21:d1:5c:
                    ec:8b:95:8b:5d:6e:04:c1:f0:2c:fe:d8:4e:09:31:
                    17:1c:65:c9:43:8c:9d:2d:09:67:1b:74:4b:7e:84:
                    0e:00:54:01:1c:54:3d:07:2d:89:bb:15:e2:f7:07:
                    60:28:ea:e2:4d:7f:cb:28:1f:b0:fc:03:2a:00:a1:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4B:A2:1B:AE:EB:0A:37:7B:34:B0:8B:2F:55:C1:74:BF:0C:58:78
            X509v3 Authority Key Identifier:
                keyid:E9:C1:CD:FE:92:29:50:B0:B7:5B:4B:EA:6E:AD:69:69:F1:C9:48:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/323830343a363166343a3a2f33322d313238203d3e20323639323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:be:1f:15:7a:bc:97:60:f1:37:87:a8:a7:75:03:7f:26:26:
         55:cf:fc:bb:48:2a:10:7a:e2:b8:d6:ea:22:83:99:80:4a:d1:
         a7:11:ad:3c:0d:f0:df:f4:03:8c:bc:a3:3a:f5:f5:c7:bd:79:
         38:24:17:d7:b6:aa:95:65:af:36:27:03:7b:72:27:1d:d5:b6:
         58:71:42:3b:e1:c7:f7:52:c9:b0:5b:6c:ef:eb:4f:1d:ac:e6:
         a6:31:2e:d1:61:60:b2:47:88:52:66:7f:e3:53:60:d3:e8:99:
         93:47:aa:6c:65:91:43:22:3d:be:99:48:08:bc:c6:e0:a2:d9:
         29:ad:bc:15:97:ab:f9:32:a7:17:68:f8:6d:23:ef:a5:78:06:
         da:b5:85:af:30:ff:38:49:bd:7b:17:f5:e7:f0:a3:51:80:45:
         82:e5:c5:a9:c7:cd:bf:4b:71:1a:52:61:08:c0:66:42:d9:8e:
         f4:74:fb:25:86:ce:b1:da:8d:6f:14:10:25:25:c5:ad:e8:3f:
         47:9e:32:f3:7d:51:e2:58:3c:fd:6d:c9:00:d0:36:35:55:dc:
         8f:68:66:3c:38:df:6b:73:e7:91:4a:29:b4:af:3f:39:97:da:
         31:6b:11:94:ca:b8:a7:49:59:58:03:7b:ea:8f:02:7e:d6:73:
         75:e3:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:34 2025 by rpki-client