This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a383030303a3a2f33332d3333203d3e20323733343137.roa
File:                     323830343a386535303a383030303a3a2f33332d3333203d3e20323733343137.roa (raw, json)
Hash identifier:          ojr7XnWUm0PnI+I0GRCbZQ7Ma0v/2FYpYZa79En2sbU=
Subject key identifier:   6E:91:BA:45:67:13:21:E0:DD:CE:96:74:82:FA:9B:9E:CA:60:C6:24
Certificate issuer:       /CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
Certificate serial:       3AB18869360059A81B0527CA8637509C09EEDD50
Authority key identifier: 6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a383030303a3a2f33332d3333203d3e20323733343137.roa
Signing time:             Wed 17 Dec 2025 16:20:16 +0000
ROA not before:           Wed 17 Dec 2025 16:15:16 +0000
ROA not after:            Wed 16 Dec 2026 16:20:16 +0000
asID:                     273417
IP address blocks:        2804:8e50:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 06:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b1:88:69:36:00:59:a8:1b:05:27:ca:86:37:50:9c:09:ee:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
        Validity
            Not Before: Dec 17 16:15:16 2025 GMT
            Not After : Dec 16 16:20:16 2026 GMT
        Subject: CN=6E91BA45671321E0DDCE967482FA9B9ECA60C624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:a9:18:5f:11:bd:eb:ad:82:f1:e7:12:04:
                    49:8a:72:57:75:0d:bd:50:65:40:34:06:da:42:c7:
                    af:cb:56:ef:44:6d:89:29:4c:54:16:db:36:dd:80:
                    2f:dd:8c:04:2c:a7:0c:e0:8a:94:ea:5f:d7:0f:53:
                    06:b5:d0:c1:b7:88:e5:71:c4:a4:58:2b:c6:af:49:
                    5d:e5:d9:e8:de:d0:23:35:b8:d4:17:05:11:86:ec:
                    f0:82:5c:60:72:44:96:a7:6f:d8:f7:94:54:1b:94:
                    6d:21:4f:56:aa:ef:48:ee:b3:4d:f0:a8:33:47:3e:
                    80:8b:5a:bd:c6:15:2c:1a:16:8a:0b:0b:96:37:c0:
                    cb:a8:28:6a:68:93:cf:4b:96:ae:e7:1c:dd:6a:ed:
                    02:a8:fc:55:fd:6a:3d:ea:84:7c:12:d1:4d:fe:8e:
                    51:73:ab:89:58:e4:15:56:1e:cd:3c:d1:09:d4:d2:
                    1f:d4:87:07:07:83:d5:10:fa:69:23:92:61:5a:40:
                    f9:cc:3f:63:17:b4:3a:82:f4:8d:02:39:c4:a1:b5:
                    41:44:b3:96:86:81:66:99:9f:5a:79:3a:f0:0b:9a:
                    5b:fe:da:fe:26:82:8e:82:d5:24:e1:50:fe:33:2b:
                    8e:98:0d:f1:2b:3d:f7:d1:5e:d4:45:e0:61:3a:5d:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:BA:45:67:13:21:E0:DD:CE:96:74:82:FA:9B:9E:CA:60:C6:24
            X509v3 Authority Key Identifier:
                keyid:6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a383030303a3a2f33332d3333203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e50:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:c0:6a:e3:37:fd:b8:20:a0:8b:b7:be:21:b3:b7:c0:9b:a2:
         fc:fb:01:15:03:fc:c5:32:99:ae:39:57:2b:a7:60:a3:ae:e2:
         da:c9:b6:1d:e7:4b:83:d7:52:3c:7d:34:f6:d1:0d:fd:f5:e8:
         50:ec:44:72:cc:60:4f:b0:97:e0:9a:8f:3e:d9:3e:d9:db:84:
         07:8d:a6:e3:81:8b:0d:75:84:c8:3e:2f:96:0a:0c:4a:89:ab:
         65:2d:da:ec:a1:b6:cc:4c:16:54:26:5f:2b:2c:91:8e:81:a6:
         59:48:00:2f:7b:e2:35:d9:a9:48:0d:6b:46:29:60:46:ab:5c:
         8c:36:de:d4:a9:6d:36:80:53:ee:9f:3e:9b:13:13:aa:57:5d:
         d1:c7:f4:8f:92:9e:d1:b6:fb:47:46:00:eb:33:e3:8e:db:8c:
         bf:b2:f9:a7:7f:d3:04:7d:19:43:29:18:16:a9:40:de:ad:95:
         09:51:71:53:45:73:12:d6:9f:bf:3a:69:c3:24:f8:23:33:b9:
         5a:44:73:7d:31:e9:e0:d9:cf:ad:41:25:a1:2f:1e:56:6e:25:
         a4:6d:54:48:81:8f:eb:49:5c:0c:ca:9b:e9:b9:65:64:d1:3b:
         7c:c3:bb:f5:12:61:a7:13:23:c6:8b:ea:ff:2f:a9:fa:b6:ac:
         b5:b6:a2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:59:07 2025 by rpki-client