This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          2Gr4KeaOEpIkP6sq0B5HqYOuuB10ZWKDJdZyz5bpxdQ=
Subject key identifier:   1B:F7:79:29:14:75:65:88:D3:E6:C2:86:68:EC:61:B0:85:54:04:DA
Certificate issuer:       /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial:       173D71D8E4540F32627CCBB7BDD4592401C28BE7
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 17 Dec 2025 18:11:31 +0000
ROA not before:           Wed 17 Dec 2025 18:06:31 +0000
ROA not after:            Wed 16 Dec 2026 18:11:31 +0000
asID:                     264425
IP address blocks:        2804:1e60:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 06:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3d:71:d8:e4:54:0f:32:62:7c:cb:b7:bd:d4:59:24:01:c2:8b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
        Validity
            Not Before: Dec 17 18:06:31 2025 GMT
            Not After : Dec 16 18:11:31 2026 GMT
        Subject: CN=1BF7792914756588D3E6C28668EC61B0855404DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ab:5f:7a:51:05:b0:46:60:d3:5b:ec:f0:a1:
                    e3:e7:7e:fb:cf:1c:76:cd:3d:8d:b8:20:a5:5a:76:
                    ba:3f:cf:a1:a1:05:02:44:f0:ef:8d:6d:a2:4a:62:
                    84:d2:b8:64:8b:4f:1d:22:af:35:c4:4b:51:81:b2:
                    b3:d6:5f:4c:6f:4d:11:20:5d:23:41:12:e1:e3:d1:
                    2e:13:10:51:1d:07:b7:eb:3a:8f:48:02:b2:07:f2:
                    b3:e8:2b:f6:92:48:68:72:67:55:2e:31:80:c8:a6:
                    a8:73:3b:79:c6:6f:22:72:4f:29:eb:f2:bf:70:f3:
                    56:82:46:45:a0:96:06:48:92:01:48:45:0b:d7:6c:
                    5c:d1:0a:d3:a2:56:be:68:1a:92:32:9a:e5:59:e4:
                    5f:23:2c:40:4c:d6:88:7d:2b:15:51:9a:66:ac:45:
                    59:e9:ae:40:80:e8:e0:28:77:97:23:dd:51:70:4f:
                    9f:9e:b9:c4:5f:c9:74:61:39:62:70:b9:a4:03:1d:
                    70:fd:a0:38:58:72:94:38:94:58:49:18:4a:17:a5:
                    f1:6e:14:14:44:7f:38:7e:d0:2d:b0:09:ae:77:2a:
                    b6:e4:55:04:61:05:76:50:f3:18:9a:aa:6e:12:45:
                    0e:6a:04:63:c8:d1:d4:af:5f:f8:12:e9:68:bf:a9:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F7:79:29:14:75:65:88:D3:E6:C2:86:68:EC:61:B0:85:54:04:DA
            X509v3 Authority Key Identifier:
                keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:9c:e6:eb:ed:fe:64:36:dc:ce:73:53:0a:21:c1:44:1e:
         8a:8c:ca:eb:03:d7:49:92:53:40:40:e8:cf:a3:03:8b:2e:68:
         c4:70:f0:08:62:6b:db:71:27:7f:1e:6d:fa:cd:fd:00:d8:0b:
         f4:2f:97:05:9a:e0:6e:e6:34:b9:7e:07:4e:eb:13:dc:bd:64:
         4a:d7:d0:0f:b6:81:62:55:aa:40:24:e8:96:39:1d:99:45:14:
         43:b5:46:8d:c9:45:21:cc:27:a4:f7:3e:b2:e8:9b:23:b7:97:
         d9:37:fc:93:89:3e:b6:b7:8e:cc:28:43:ab:10:aa:65:42:a5:
         4a:fc:6f:c6:28:f9:dc:2c:69:8a:20:4e:0d:95:0a:ba:18:e9:
         19:a3:9a:fb:e1:4b:e3:33:a5:f0:e0:0f:5c:cd:b6:ad:42:10:
         6f:66:a1:78:d9:12:59:79:a8:ba:38:2f:f8:92:60:00:0b:56:
         b1:6f:06:f6:ea:12:52:9f:5d:7e:55:a3:66:87:c0:35:d9:e2:
         8a:a5:3b:65:97:1a:17:4f:68:52:1f:32:50:33:ff:65:c6:af:
         c0:6b:78:c8:47:ec:5c:cf:f1:5b:a7:1d:f9:43:fc:c8:9c:d7:
         9b:ff:15:28:57:60:95:14:50:51:30:cd:61:61:34:11:15:78:
         33:df:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:55:31 2025 by rpki-client