This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/323830343a376264633a3a2f33322d313238203d3e20323731343539.roa
File:                     323830343a376264633a3a2f33322d313238203d3e20323731343539.roa (raw, json)
Hash identifier:          Q1ugG8EjBdkeMUOrYL/i2TV/XGjoT3E8Uw+HRTIosLc=
Subject key identifier:   67:BB:ED:7B:BB:15:52:EB:42:1D:8D:C6:3E:BB:8B:29:6B:C6:B4:C7
Certificate issuer:       /CN=46D594446B09B1BCB0E7BD936B80C58A3156A24E
Certificate serial:       3C284DD6A2795DA6E4F49DEC5903557CAD1B93BB
Authority key identifier: 46:D5:94:44:6B:09:B1:BC:B0:E7:BD:93:6B:80:C5:8A:31:56:A2:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D594446B09B1BCB0E7BD936B80C58A3156A24E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/323830343a376264633a3a2f33322d313238203d3e20323731343539.roa
Signing time:             Wed 17 Dec 2025 12:56:37 +0000
ROA not before:           Wed 17 Dec 2025 12:51:37 +0000
ROA not after:            Wed 16 Dec 2026 12:56:37 +0000
asID:                     271459
IP address blocks:        2804:7bdc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/46D594446B09B1BCB0E7BD936B80C58A3156A24E.crl
                          rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/46D594446B09B1BCB0E7BD936B80C58A3156A24E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D594446B09B1BCB0E7BD936B80C58A3156A24E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 15:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:28:4d:d6:a2:79:5d:a6:e4:f4:9d:ec:59:03:55:7c:ad:1b:93:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D594446B09B1BCB0E7BD936B80C58A3156A24E
        Validity
            Not Before: Dec 17 12:51:37 2025 GMT
            Not After : Dec 16 12:56:37 2026 GMT
        Subject: CN=67BBED7BBB1552EB421D8DC63EBB8B296BC6B4C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:02:6b:9a:b9:d4:4e:94:c9:cb:c4:b8:2a:
                    a5:2b:93:99:af:51:0b:84:33:bb:c9:3c:22:66:2f:
                    a8:b3:45:c0:f6:e2:2b:72:34:83:a9:92:6b:43:0e:
                    ec:8f:d0:93:46:8f:56:4d:7c:2a:b3:14:55:30:46:
                    f0:c3:e2:92:16:3d:15:30:d3:a5:ad:5e:96:05:17:
                    e6:ea:10:5c:e4:84:e3:6b:e8:50:8b:35:10:2c:3a:
                    19:ab:ce:ad:cb:7d:9d:85:e3:48:90:9c:dd:cc:a8:
                    96:01:6d:c8:67:38:95:4a:14:ad:5e:a5:ed:91:78:
                    8b:8a:00:9e:93:c6:7d:f8:ad:83:1c:22:bf:aa:fa:
                    8e:77:54:7a:85:ef:a8:69:17:3c:ce:60:d8:94:ad:
                    65:35:aa:3e:65:c8:e3:9b:b2:ce:82:c3:44:9d:3a:
                    b6:4f:b8:c1:a6:3c:26:cd:4d:e8:0c:6b:d6:70:4c:
                    4f:8c:b5:bf:c1:fb:9f:80:fc:d6:ce:ed:21:1c:bb:
                    a9:ed:f5:fd:e2:da:f9:6b:92:29:62:b2:2f:b8:45:
                    23:35:d4:97:e2:bd:fc:3c:1e:7f:dd:26:26:1e:14:
                    7a:17:63:91:03:07:21:31:47:a2:11:64:5a:21:e5:
                    00:1f:1f:1e:7d:da:29:a1:8c:b8:30:7c:78:78:dd:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BB:ED:7B:BB:15:52:EB:42:1D:8D:C6:3E:BB:8B:29:6B:C6:B4:C7
            X509v3 Authority Key Identifier:
                keyid:46:D5:94:44:6B:09:B1:BC:B0:E7:BD:93:6B:80:C5:8A:31:56:A2:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/46D594446B09B1BCB0E7BD936B80C58A3156A24E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D594446B09B1BCB0E7BD936B80C58A3156A24E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/323830343a376264633a3a2f33322d313238203d3e20323731343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:c3:db:9c:ab:de:48:c3:82:b5:a3:4f:90:9f:78:d0:0d:35:
         2e:17:e5:be:13:45:6d:70:78:4f:59:cc:1b:e4:83:f1:51:7f:
         1d:75:d0:b4:15:54:87:89:ac:09:db:1d:88:ad:c9:2a:b5:1d:
         f6:4d:82:b0:71:c7:78:87:4d:3c:3c:34:81:8c:9b:6c:75:cf:
         80:21:2d:0c:f3:fb:f9:70:3c:38:9a:5c:24:b2:97:2b:e2:b0:
         96:00:c8:11:46:56:37:35:46:4f:17:0d:6d:0b:90:84:62:b6:
         76:e9:e0:4f:35:b1:a4:62:6d:88:9a:ed:5d:8f:ae:2b:ad:53:
         e1:b6:3b:52:40:0e:41:2d:c9:c9:6f:ce:8c:29:58:f6:0d:6f:
         6a:4f:b4:d2:cc:ce:8b:16:f9:3b:bb:e4:c5:7c:a5:38:6b:37:
         4d:2d:f0:b7:d7:0d:0f:88:62:77:76:01:08:73:db:ed:ce:23:
         63:2f:b4:41:73:e2:cc:3e:33:cb:cd:be:04:8e:3f:9e:60:d3:
         03:c9:7f:6d:f7:a9:7c:ce:7d:85:f1:11:ee:ab:07:dd:e1:1a:
         ce:fd:92:37:20:9d:41:c5:76:16:e0:94:50:f6:6f:38:bd:c6:
         21:07:51:c6:0b:58:1f:03:0c:63:78:be:47:4b:1d:1f:3f:b7:
         65:16:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 21:53:44 2025 by rpki-client