This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          ptJ2cxV0fy8mXMxXtL1Yfz9RNhxsouu6OYg/4Yut7RY=
Subject key identifier:   0E:9B:C5:FB:50:D8:CD:52:E4:EE:2F:59:FB:61:95:F8:10:56:1B:7E
Certificate issuer:       /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial:       578F3262A5E9018827BC79BA6BA8D0EB067EDB77
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 17 Dec 2025 18:11:33 +0000
ROA not before:           Wed 17 Dec 2025 18:06:33 +0000
ROA not after:            Wed 16 Dec 2026 18:11:33 +0000
asID:                     264425
IP address blocks:        2804:1e60:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8f:32:62:a5:e9:01:88:27:bc:79:ba:6b:a8:d0:eb:06:7e:db:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
        Validity
            Not Before: Dec 17 18:06:33 2025 GMT
            Not After : Dec 16 18:11:33 2026 GMT
        Subject: CN=0E9BC5FB50D8CD52E4EE2F59FB6195F810561B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:ea:3e:a3:1a:41:d7:c0:77:1a:c6:7c:ee:
                    b8:26:e0:3d:75:59:fe:7e:75:e3:3d:de:ae:18:8f:
                    f3:34:05:2f:85:f6:01:9c:9c:15:b8:4e:19:5b:c3:
                    50:f7:d8:6d:de:60:9d:a1:6d:4b:05:51:48:e2:8c:
                    9b:59:c3:7b:31:1c:b8:3c:c8:56:8f:e2:f8:c0:5b:
                    dd:cf:f6:66:15:58:e0:8e:fe:4b:41:51:c7:d4:69:
                    d1:f3:0a:97:26:06:eb:b9:60:f1:a8:03:48:42:cd:
                    f0:d5:af:c0:0e:e3:0e:d3:ab:16:9f:ac:54:53:93:
                    e4:85:d9:bb:27:f1:70:a5:88:7a:5a:ea:03:85:75:
                    e8:2a:ea:fd:f1:c7:16:41:a6:72:9c:45:cb:cc:03:
                    c4:7e:ee:32:57:b6:16:27:9b:ba:64:68:20:04:e6:
                    8d:16:8c:f7:87:cf:26:9b:a6:c0:9e:1d:e3:90:50:
                    ac:0d:c3:04:c8:e6:9a:15:f5:c6:51:ed:4a:ff:e0:
                    c2:2a:5b:37:c0:6f:a8:14:a9:0a:7e:29:55:83:a4:
                    d0:92:35:61:ec:70:a9:fc:e7:a5:c7:86:f0:1a:a2:
                    c3:ae:83:5d:09:7d:50:d0:ab:d1:42:53:a5:6d:26:
                    19:3c:10:8c:8c:03:65:14:0e:89:77:72:8c:0a:7b:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9B:C5:FB:50:D8:CD:52:E4:EE:2F:59:FB:61:95:F8:10:56:1B:7E
            X509v3 Authority Key Identifier:
                keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:b5:e6:9d:4f:98:72:29:0d:99:55:eb:4c:83:eb:8a:f9:bf:
         18:f8:5f:14:6a:38:c4:11:f5:f8:96:30:f4:eb:7b:95:21:fb:
         bb:64:ae:7b:61:72:5e:45:14:42:ac:d7:e5:ad:7d:b4:8c:d2:
         3b:26:dc:8c:6b:70:51:ca:b1:ac:c9:7b:bb:ee:2e:ac:ca:0e:
         89:d2:c9:0f:da:be:f0:79:0b:2b:f1:87:8a:0d:32:17:50:ba:
         ff:84:9c:ba:10:9d:37:9b:e9:d9:05:e4:9e:98:28:3b:1f:9c:
         c1:cd:69:c5:a1:e6:3e:56:8b:ac:ca:88:6a:fe:82:3e:75:d1:
         a8:79:67:12:75:0a:c5:69:a8:37:e6:e8:51:42:20:42:d8:78:
         ff:42:2f:5d:b0:c5:5e:18:50:60:2c:36:10:79:5d:96:23:3c:
         4a:e5:02:2f:bd:07:a3:ec:6e:34:52:ec:9a:16:67:e2:14:cb:
         bd:c6:8f:fd:b2:0f:2a:e9:4c:f6:20:10:c4:3c:74:d2:56:7e:
         32:8f:80:0d:51:8e:0b:c4:ae:4a:c1:8a:f5:4d:45:fb:3c:3c:
         03:6b:ff:96:70:28:79:4c:10:8e:f6:b2:c8:e3:b5:ad:2c:3c:
         ba:91:60:f6:78:f5:07:3f:e5:21:14:61:17:f5:8e:a3:9c:28:
         90:b7:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:51:08 2025 by rpki-client