This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          W7+4EzbiCdh3w/H0HlAzifiC0teoXYqvCZA5O56nxaQ=
Subject key identifier:   B0:A5:F6:3D:6E:2C:DD:69:18:17:BC:42:08:DE:DD:90:E5:F5:08:47
Certificate issuer:       /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial:       5E6BCA6B721BBC5FE998675152F14C62437500A0
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 17 Dec 2025 18:11:27 +0000
ROA not before:           Wed 17 Dec 2025 18:06:27 +0000
ROA not after:            Wed 16 Dec 2026 18:11:27 +0000
asID:                     264425
IP address blocks:        2804:1e60::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6b:ca:6b:72:1b:bc:5f:e9:98:67:51:52:f1:4c:62:43:75:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
        Validity
            Not Before: Dec 17 18:06:27 2025 GMT
            Not After : Dec 16 18:11:27 2026 GMT
        Subject: CN=B0A5F63D6E2CDD691817BC4208DEDD90E5F50847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:7f:46:32:09:18:a7:00:7b:4b:4b:0c:e6:
                    81:dd:f0:89:cf:da:74:ca:b4:69:e1:48:93:df:91:
                    c9:05:a3:60:38:4a:d1:87:5a:49:68:d3:4d:6a:c0:
                    10:65:c6:18:e5:60:90:fc:81:a3:02:43:2a:a2:21:
                    f3:e8:a2:00:a5:e4:8a:71:eb:fe:dd:2b:6a:e7:2b:
                    1e:3c:81:76:93:32:52:06:db:77:ee:ae:73:89:13:
                    aa:87:6e:75:07:e8:16:0d:1a:ba:dc:76:55:86:60:
                    d2:83:4d:d6:08:b3:d3:cb:b3:15:14:6d:8e:f2:f9:
                    94:8b:96:ed:e0:d2:f0:99:b5:e0:12:74:73:13:fd:
                    a6:01:97:2a:48:4d:e6:78:47:b9:63:db:55:73:25:
                    1e:8d:2e:dc:c7:d1:a8:66:04:da:22:da:39:82:e5:
                    89:74:62:b4:d3:f4:2a:c1:e8:d0:8d:e4:0c:df:54:
                    da:1b:1f:f2:c7:ad:50:7d:32:91:6f:c1:2c:59:7c:
                    0b:76:51:cd:ba:89:c6:b2:22:a0:3c:39:cf:f0:51:
                    05:e2:f4:96:67:4c:db:83:3d:ba:39:2b:a5:78:8d:
                    68:8f:1b:c5:9b:82:c7:0a:e2:fb:11:e5:dc:a7:8d:
                    ff:79:2f:5a:50:54:1a:0a:1d:35:f0:ea:c4:b4:25:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A5:F6:3D:6E:2C:DD:69:18:17:BC:42:08:DE:DD:90:E5:F5:08:47
            X509v3 Authority Key Identifier:
                keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:f8:b9:95:69:aa:30:b0:72:76:90:84:4d:48:ad:81:18:88:
         32:1b:52:87:8c:35:4f:80:42:52:96:45:a3:2e:64:b0:f7:4e:
         40:eb:64:a5:31:4d:dd:1e:4f:a1:7d:5e:fa:70:6a:de:e3:d1:
         24:13:0b:2a:54:8e:90:42:02:38:a4:1c:7c:64:f1:cc:29:85:
         b6:a3:62:6c:1b:62:9a:c8:b8:2e:d5:e9:d7:b1:f3:c9:3b:19:
         0e:b3:01:77:9e:5e:e8:28:73:67:4d:62:71:c8:11:0b:1f:61:
         b0:30:47:44:75:5e:59:e0:2a:15:16:1a:d8:b8:0e:a6:d2:dd:
         40:78:4f:18:b6:5c:41:1f:85:79:0c:85:be:7b:f3:e5:6f:ec:
         30:f2:ab:5d:8d:8e:5c:61:f2:e3:2b:f8:97:67:c9:bf:9a:a3:
         de:9f:ce:da:9d:09:72:1b:60:e3:a3:23:fa:5f:81:99:02:a4:
         9e:3b:81:df:bc:d4:65:5d:c1:ba:80:15:4f:28:7d:48:30:4a:
         f1:31:3f:60:09:21:ac:de:01:f1:7e:c9:9e:31:29:a5:bd:fb:
         df:4c:d4:25:e3:a8:1e:64:1d:29:88:e0:3f:5b:9a:43:73:0e:
         fa:db:4e:92:7e:67:82:47:c7:a8:89:33:f5:c3:a9:14:ff:10:
         fb:b1:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:09:51 2025 by rpki-client