This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa
File:                     323830343a366463303a3a2f33322d313238203d3e20323730353533.roa (raw, json)
Hash identifier:          W8aNp3svjE5hpeRDWRoaf1i7YT9lne9je9/n0UZiiL0=
Subject key identifier:   4F:FF:60:AE:F6:03:FB:CB:DE:13:6F:96:10:56:40:8B:C9:32:B6:D4
Certificate issuer:       /CN=7D92F334494EDE5B42E5400F9902062BD822C1E8
Certificate serial:       2425CC203908048B5E36CE55F7C3128313E36AAE
Authority key identifier: 7D:92:F3:34:49:4E:DE:5B:42:E5:40:0F:99:02:06:2B:D8:22:C1:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D92F334494EDE5B42E5400F9902062BD822C1E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa
Signing time:             Mon 22 Dec 2025 23:18:59 +0000
ROA not before:           Mon 22 Dec 2025 23:13:59 +0000
ROA not after:            Mon 21 Dec 2026 23:18:59 +0000
asID:                     270553
IP address blocks:        2804:6dc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/7D92F334494EDE5B42E5400F9902062BD822C1E8.crl
                          rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/7D92F334494EDE5B42E5400F9902062BD822C1E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D92F334494EDE5B42E5400F9902062BD822C1E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 01:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:25:cc:20:39:08:04:8b:5e:36:ce:55:f7:c3:12:83:13:e3:6a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D92F334494EDE5B42E5400F9902062BD822C1E8
        Validity
            Not Before: Dec 22 23:13:59 2025 GMT
            Not After : Dec 21 23:18:59 2026 GMT
        Subject: CN=4FFF60AEF603FBCBDE136F961056408BC932B6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:3e:b2:b6:73:1f:6f:fc:de:c7:2d:23:3b:
                    46:f8:10:60:77:f9:2c:bb:63:a3:43:4b:fe:8a:8d:
                    0f:95:02:40:04:da:26:b1:e7:e6:4c:43:3d:41:c5:
                    c2:6e:49:24:6b:65:8b:a6:69:c7:31:54:56:7e:f1:
                    b7:11:5c:9b:f4:0a:73:cf:47:bd:c4:72:73:5a:75:
                    db:1e:f9:eb:e4:f6:80:51:70:bf:7b:03:ca:9d:bb:
                    6b:d6:e1:0d:8e:a7:47:dd:7f:c1:b2:67:d3:02:4d:
                    16:07:59:86:89:76:d7:dc:62:10:65:af:5f:e6:a9:
                    e7:14:7b:9f:94:db:80:c0:42:11:6e:15:0c:72:12:
                    f9:53:fb:85:d8:9f:70:f0:c3:2c:22:a5:ab:86:e7:
                    7c:fd:f2:ca:1c:64:1f:6e:54:1d:79:9e:1b:cc:87:
                    aa:04:65:3b:46:50:31:b5:65:e4:c5:e2:79:f2:5a:
                    6d:f6:a0:32:e8:65:73:de:bb:ce:c7:25:13:03:56:
                    75:0f:0a:9f:d7:59:82:b9:7d:b9:41:b7:e2:3b:e6:
                    b4:98:f8:ec:bf:7a:8f:e8:7c:ea:5d:57:be:89:55:
                    4b:1a:c0:4a:39:39:8f:49:81:24:7f:77:62:08:7a:
                    6d:43:88:59:2b:01:01:33:e3:58:68:b6:94:5a:55:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:60:AE:F6:03:FB:CB:DE:13:6F:96:10:56:40:8B:C9:32:B6:D4
            X509v3 Authority Key Identifier:
                keyid:7D:92:F3:34:49:4E:DE:5B:42:E5:40:0F:99:02:06:2B:D8:22:C1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/7D92F334494EDE5B42E5400F9902062BD822C1E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D92F334494EDE5B42E5400F9902062BD822C1E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:5f:d3:e9:84:7a:78:d8:79:df:ed:31:9a:12:93:30:88:48:
         7a:bf:eb:b8:e4:3a:4e:5b:f2:50:fe:9c:49:bd:a0:de:7a:67:
         b6:dd:62:fa:ad:32:2b:18:d9:49:f9:63:34:08:ea:00:79:75:
         8b:4c:eb:f5:23:8e:02:fd:9b:ef:5b:92:6d:14:49:44:21:ba:
         a6:28:68:22:8f:c5:9f:ce:60:50:38:ea:27:da:4a:3d:39:d3:
         c6:3e:88:3e:ea:b7:3f:d2:68:b4:51:42:73:5f:9e:db:1f:fa:
         74:76:21:fa:d6:46:c0:ee:23:66:69:18:40:85:6e:8a:9a:b3:
         77:5e:3e:1f:49:12:a9:4f:83:31:b3:dd:bf:8d:b1:50:a8:44:
         9a:67:2a:fb:ce:28:f7:cc:5e:9d:c6:8b:d3:b4:47:87:1e:0e:
         34:ac:b7:17:14:a6:75:fc:a0:f6:ec:0a:16:83:f0:d5:c5:8e:
         fb:47:10:45:02:04:95:a4:43:45:f0:ac:e1:05:60:15:0e:fd:
         7a:d7:e5:98:2e:68:d6:0d:e3:7c:70:43:7e:05:44:81:55:e2:
         a5:59:42:b7:06:82:4b:07:4c:18:e9:8d:82:cc:45:4f:42:5a:
         f3:34:eb:29:b7:68:05:7f:f4:15:dd:39:e3:e6:35:dd:31:55:
         5b:c0:05:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:35:14 2025 by rpki-client