This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a353030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a353030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          q/GYfZpOx+jmXwRcU0NdSLqzCOOObKkPqSnVSAZqAbc=
Subject key identifier:   5C:90:36:08:AD:63:93:CC:BC:6A:D6:7A:18:49:E4:DC:0F:21:45:5B
Certificate issuer:       /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial:       203571DC64A6FEA50A3BD478B120E7E6D46742B7
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a353030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 17 Dec 2025 18:11:30 +0000
ROA not before:           Wed 17 Dec 2025 18:06:30 +0000
ROA not after:            Wed 16 Dec 2026 18:11:30 +0000
asID:                     264425
IP address blocks:        2804:1e60:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:35:71:dc:64:a6:fe:a5:0a:3b:d4:78:b1:20:e7:e6:d4:67:42:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
        Validity
            Not Before: Dec 17 18:06:30 2025 GMT
            Not After : Dec 16 18:11:30 2026 GMT
        Subject: CN=5C903608AD6393CCBC6AD67A1849E4DC0F21455B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7f:55:47:28:4f:26:8f:ae:e1:84:f8:83:89:
                    eb:35:00:d6:2c:65:52:5c:42:83:21:49:21:30:f4:
                    2a:84:12:81:ec:2e:b2:8c:d9:32:93:9c:69:56:bd:
                    ce:dc:d3:23:55:80:a5:2e:60:ff:d3:98:6c:bd:85:
                    11:39:df:11:ae:9b:a8:d5:f8:b6:46:0a:b1:19:d1:
                    ab:b9:f0:39:83:bb:9a:4b:66:6b:31:f8:73:9a:27:
                    dc:36:f2:16:6f:a1:f4:ab:f9:31:f5:bb:ee:8c:09:
                    8c:86:33:8b:33:0e:dc:e3:fd:62:1f:92:39:b8:b2:
                    a5:67:ed:41:6a:e0:47:f6:ab:5e:9c:e0:35:7b:73:
                    b3:29:c7:d6:1b:e7:f2:d4:70:b3:5a:bf:60:f7:47:
                    e2:7d:f9:25:45:87:e4:d7:bb:d0:e9:dd:9c:eb:52:
                    a8:f9:77:c0:c5:a3:18:d1:0e:80:34:8a:b5:77:87:
                    65:df:6a:cc:34:f6:5f:f4:7c:03:56:8c:20:ed:a9:
                    ec:54:3a:60:36:9d:5c:a6:f5:ef:49:24:09:a5:81:
                    fc:94:81:51:2f:86:60:6f:38:8a:3b:ac:83:87:36:
                    6c:bf:5b:4f:32:93:f2:ab:20:a3:77:92:b1:23:13:
                    56:3d:12:a3:ab:1a:84:a0:ef:40:8a:20:32:7b:c3:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:90:36:08:AD:63:93:CC:BC:6A:D6:7A:18:49:E4:DC:0F:21:45:5B
            X509v3 Authority Key Identifier:
                keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a353030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:a5:a6:af:d8:11:de:a3:f7:87:a7:70:d9:fe:02:c4:83:24:
         5f:50:b1:b4:5f:8b:25:15:d1:00:68:32:69:37:a2:05:9a:92:
         88:e2:c2:dc:49:71:26:8b:de:42:54:2b:d7:ec:7e:17:bf:64:
         e7:59:08:d4:8a:98:35:db:36:f2:d2:8f:57:57:39:c5:e6:ea:
         38:5e:00:f0:65:09:67:c4:f6:d4:3b:22:ee:fd:24:87:c3:26:
         67:e8:77:5b:9e:99:9c:d9:8d:02:d4:c4:24:05:d6:df:42:08:
         a0:9e:91:78:07:91:1c:52:c3:11:e1:21:5a:5b:b8:de:96:ec:
         79:eb:2a:1c:60:52:93:6d:11:f7:60:4a:b4:be:2d:65:b5:52:
         fd:a2:2a:db:7c:80:0f:0d:84:aa:25:5c:ed:7e:8f:8c:fb:95:
         4f:cd:d3:bd:97:ea:9d:c3:87:9c:ef:2a:60:6e:b3:89:fb:79:
         bd:23:fa:15:3a:c9:57:ca:cf:c2:a0:c1:d0:80:3c:00:34:8d:
         68:f3:2a:52:43:d8:8b:da:43:42:be:71:c6:e8:e6:c5:21:3e:
         7f:c0:c8:95:cc:e4:f7:8c:ec:08:dd:59:54:b5:59:76:3b:86:
         0e:de:f2:ff:72:88:73:79:d5:a0:8b:85:ae:5a:fe:66:86:ee:
         25:d0:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:52:47 2025 by rpki-client