This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa
File:                     323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa (raw, json)
Hash identifier:          zb7WfBw/bBdBIrOgVtC0LWz8fp1AOv4KlqXgP9sM15Y=
Subject key identifier:   67:17:42:8E:C5:18:78:1E:B4:97:05:9D:9F:28:82:69:DE:F9:93:C4
Certificate issuer:       /CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
Certificate serial:       6A83142950AE9EC187190DA359C152F1B067027D
Authority key identifier: 6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa
Signing time:             Wed 17 Dec 2025 16:20:16 +0000
ROA not before:           Wed 17 Dec 2025 16:15:16 +0000
ROA not after:            Wed 16 Dec 2026 16:20:16 +0000
asID:                     273417
IP address blocks:        2804:8e50:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 06:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:83:14:29:50:ae:9e:c1:87:19:0d:a3:59:c1:52:f1:b0:67:02:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
        Validity
            Not Before: Dec 17 16:15:16 2025 GMT
            Not After : Dec 16 16:20:16 2026 GMT
        Subject: CN=6717428EC518781EB497059D9F288269DEF993C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:5e:46:e1:5a:46:4f:df:0e:35:15:53:05:
                    3d:87:49:4c:33:b9:e7:c6:cb:7a:65:f0:17:ec:b9:
                    19:3b:e6:66:7c:a4:be:a7:6a:81:1e:35:2b:a8:72:
                    7e:96:ee:0e:df:c7:ab:e3:2d:f9:ee:d0:41:58:26:
                    5d:c4:c1:b2:7e:f1:41:15:68:de:5c:41:e6:3a:d2:
                    09:11:b2:a8:4e:e3:ba:af:8b:12:87:2e:a4:d1:90:
                    3a:4a:fd:26:c4:21:c1:57:18:29:2d:39:48:e1:f4:
                    f1:1c:05:4d:e6:0d:3c:db:11:47:e9:77:72:60:de:
                    7e:5a:8c:19:f0:ef:41:72:64:cf:0e:bc:34:6c:f0:
                    ef:05:d2:ed:04:69:6b:88:f6:65:f8:20:4a:83:86:
                    1e:ed:f5:30:8a:64:f8:b8:56:0c:9b:65:78:1e:74:
                    13:bd:45:2b:98:eb:f2:37:3f:c4:73:23:2f:59:a2:
                    93:6e:1a:0c:71:0b:f7:bc:72:c9:90:5e:dd:bf:80:
                    45:a4:3b:be:b6:e9:a3:79:b2:f8:c8:cd:5e:09:3c:
                    63:e4:17:e6:ab:44:e2:bc:26:0e:87:fd:93:48:0a:
                    33:a4:63:c7:c2:a8:37:ed:01:b7:6d:91:af:23:91:
                    63:a0:0a:a9:b7:67:30:d0:27:bb:ae:4c:0f:ab:6d:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:17:42:8E:C5:18:78:1E:B4:97:05:9D:9F:28:82:69:DE:F9:93:C4
            X509v3 Authority Key Identifier:
                keyid:6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e50:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:06:3f:ce:5f:ce:f6:2b:c3:9e:35:a3:32:e7:b1:9a:8f:86:
         5c:c0:04:38:34:dd:43:67:e2:20:fc:54:12:a2:fc:34:20:e0:
         19:95:6a:1b:c2:98:d5:b7:3b:7d:f7:87:77:b6:85:63:c1:be:
         a0:a4:81:7d:2d:9d:6c:e1:16:dd:35:41:1b:05:3c:2d:f7:5f:
         12:d7:ab:42:c1:38:37:64:97:0c:df:29:e3:3c:2c:76:ef:3b:
         d1:64:ec:d1:7f:d6:48:18:81:68:10:67:94:22:54:ba:73:fa:
         da:b8:ee:fd:88:ba:fe:86:c7:cd:f1:63:f6:3e:d8:43:c2:a7:
         61:b9:b1:30:b5:12:fc:aa:0c:57:0a:33:c1:d0:dd:22:8e:24:
         33:d1:2c:b6:d7:41:45:39:2f:f4:d8:9a:75:d5:82:7d:19:e9:
         9a:9e:83:bd:99:e5:f0:dc:10:ae:49:d8:18:03:1e:45:c1:02:
         fa:26:93:c5:a5:97:a9:73:3b:4f:0f:48:46:c6:67:47:f8:ff:
         ee:7c:df:ce:a7:b7:fb:b5:1b:ba:02:6c:b0:c8:bc:15:fd:40:
         be:01:be:25:bd:c9:fa:bb:94:e1:66:32:ad:39:93:43:bf:5f:
         4a:02:70:81:94:d0:38:e0:54:f8:47:e3:c1:ef:38:e4:aa:fa:
         22:16:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:55:34 2025 by rpki-client