This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          PTEV3PyHg2kJTzVWyM/Iys1/NMWojMeZvzNNGfTI/Hw=
Subject key identifier:   B7:8B:D2:B1:66:8A:58:E0:9F:D2:9B:33:48:04:64:DF:62:19:F8:41
Certificate issuer:       /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial:       52C9259F7BFC07CE28B1714FA873C388AF2CDA69
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 17 Dec 2025 18:11:31 +0000
ROA not before:           Wed 17 Dec 2025 18:06:31 +0000
ROA not after:            Wed 16 Dec 2026 18:11:31 +0000
asID:                     264425
IP address blocks:        2804:1e60:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c9:25:9f:7b:fc:07:ce:28:b1:71:4f:a8:73:c3:88:af:2c:da:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
        Validity
            Not Before: Dec 17 18:06:31 2025 GMT
            Not After : Dec 16 18:11:31 2026 GMT
        Subject: CN=B78BD2B1668A58E09FD29B33480464DF6219F841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e1:52:f3:dc:db:92:08:bb:fb:8f:a4:09:c1:
                    89:a7:9b:4b:c2:6b:0f:3f:8b:17:dd:06:9e:e0:88:
                    e6:7f:fb:02:6d:7b:a8:ce:8b:f3:55:91:fc:a6:61:
                    a6:e8:2a:bf:fc:31:a8:bb:06:27:4d:f6:05:40:02:
                    de:bd:24:8d:30:fd:fc:0b:01:9e:b6:55:04:bb:ae:
                    42:d2:7a:e4:47:0e:b2:81:8b:c8:01:59:3a:91:53:
                    6c:0b:95:bf:fc:b5:68:0d:3e:e5:6c:a5:f1:e0:bb:
                    3a:de:13:bd:76:f8:ce:31:91:f5:c0:58:ba:19:a9:
                    f8:c7:0c:2f:e7:49:3a:d9:84:82:7c:08:07:b6:2d:
                    01:46:24:5b:12:40:3f:76:ae:4f:ae:ec:f0:1f:fb:
                    eb:d5:4c:31:f8:51:71:fd:5e:92:a8:8b:9d:bd:1a:
                    d1:a0:c8:18:6a:bc:ef:12:e8:6e:98:89:7c:79:66:
                    f6:58:8a:4e:23:25:b1:83:e7:37:9a:94:49:1b:1e:
                    c6:e8:34:08:4e:f6:8f:b9:e3:17:83:f1:1e:6f:f3:
                    53:b9:06:51:92:a1:8b:b8:e0:42:a3:47:e6:23:86:
                    f3:d0:d6:33:b4:30:ed:39:8b:21:da:ab:25:83:d9:
                    da:67:0a:bd:0f:fc:01:fc:ed:99:9a:9e:3c:76:16:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8B:D2:B1:66:8A:58:E0:9F:D2:9B:33:48:04:64:DF:62:19:F8:41
            X509v3 Authority Key Identifier:
                keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cf:29:34:22:fa:c0:4f:92:24:b2:d8:ac:c4:65:aa:73:75:1e:
         40:49:9e:b8:a9:f6:f2:c5:ec:da:69:a5:d2:de:f2:94:67:00:
         e2:9a:f8:fa:76:06:b6:3d:43:69:9a:73:0d:3e:56:a8:78:c2:
         89:bc:6c:9a:0a:c5:75:3b:24:a5:7f:27:f1:49:13:86:67:5b:
         c2:f1:24:6a:b1:c1:16:1a:bf:48:1f:13:c9:2b:3d:86:d9:4d:
         49:04:46:39:b4:9a:d1:cb:cd:3a:33:5a:a0:b9:a7:00:7a:4a:
         a4:d3:5f:bc:9c:12:2d:e1:6e:ea:32:4f:05:52:f4:85:b5:48:
         44:06:eb:1b:46:a4:57:f8:c4:0e:91:d6:06:7a:e9:f0:30:c9:
         b8:c5:60:a1:9d:f1:de:57:0f:6b:ec:39:60:4c:ce:21:b9:5b:
         85:d4:f6:3e:93:fb:b7:e3:7e:38:d9:44:c6:55:ec:b1:9d:62:
         86:e4:fb:98:40:54:85:79:a1:de:5a:0e:4c:90:da:e9:a9:e5:
         e4:f8:c6:d2:c3:85:bb:cc:73:21:f6:0a:3d:b8:c8:e1:55:83:
         be:17:e7:5b:61:4a:78:b5:46:b9:1b:1d:f4:cb:0d:74:32:c1:
         a3:d8:84:b8:01:81:c6:25:0b:d4:a8:f3:b1:a5:7e:17:13:ac:
         e9:a1:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:52:48 2025 by rpki-client