This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          Szxac7wlzLf3u2aZlrmjJ2inyNHOlhv/Gw5bsyFJO58=
Subject key identifier:   E9:FE:72:29:30:EE:83:7B:DC:24:64:BB:B4:30:84:7D:90:31:E4:AE
Certificate issuer:       /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
Certificate serial:       74B58F0AFF78B39028C963B4CA153CA667F982DB
Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 17 Dec 2025 18:11:31 +0000
ROA not before:           Wed 17 Dec 2025 18:06:31 +0000
ROA not after:            Wed 16 Dec 2026 18:11:31 +0000
asID:                     264425
IP address blocks:        2804:1e60:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b5:8f:0a:ff:78:b3:90:28:c9:63:b4:ca:15:3c:a6:67:f9:82:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215
        Validity
            Not Before: Dec 17 18:06:31 2025 GMT
            Not After : Dec 16 18:11:31 2026 GMT
        Subject: CN=E9FE722930EE837BDC2464BBB430847D9031E4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:65:bf:4a:6c:f5:d6:4f:4f:08:00:e9:4f:
                    99:a9:97:25:50:cf:25:7f:bf:33:d9:24:0e:fe:f2:
                    fb:9c:33:4f:4a:2c:00:85:21:5d:1c:17:e4:69:3a:
                    2c:2b:64:39:e8:76:aa:ba:e5:64:50:25:b3:6e:d1:
                    90:4f:d1:3a:ee:ce:bd:f7:87:f4:9a:2c:ec:66:93:
                    3f:7a:d7:a1:fd:ff:50:85:5c:85:b0:f6:0f:8f:bd:
                    2f:1a:bb:65:c7:75:1b:87:d2:de:ba:56:8a:ff:d8:
                    fb:d5:4c:67:7b:32:b6:77:10:26:75:73:5a:15:6b:
                    20:bf:97:a6:d7:e6:c3:b3:c2:5e:64:51:36:fd:d2:
                    44:89:52:8e:22:71:f3:93:61:f0:41:a8:09:d5:8d:
                    f0:c6:e0:24:f1:ab:52:59:7f:54:ed:45:fe:3d:3f:
                    61:d5:b8:cd:1d:65:72:73:d9:2c:20:79:68:17:a0:
                    7a:50:20:3e:a2:09:8b:50:2a:b2:41:20:c7:25:b0:
                    b2:e7:b7:db:5c:91:99:86:4b:df:b2:03:0b:b9:52:
                    a6:0a:64:f8:fc:2d:26:a6:ed:13:26:72:72:4e:93:
                    66:48:3b:92:9d:dd:d7:ea:81:3a:d7:3f:b9:35:9e:
                    0d:45:44:0f:8f:f5:93:a8:4b:6d:75:f8:53:bd:c5:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:72:29:30:EE:83:7B:DC:24:64:BB:B4:30:84:7D:90:31:E4:AE
            X509v3 Authority Key Identifier:
                keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d9:6a:96:c0:2d:95:83:e3:39:d7:2a:4d:03:c1:fa:1a:1c:c9:
         9b:f8:67:7e:d7:df:8a:f0:0b:af:36:fb:cc:e9:42:2f:72:a2:
         d9:61:3a:63:c2:b3:71:0e:cd:7c:20:56:82:a2:b3:09:97:44:
         10:e4:7b:ac:12:a1:2b:a7:ec:bf:4b:7a:41:35:03:53:62:35:
         98:da:4f:ed:c2:c0:60:bc:d9:13:de:e2:4a:13:4f:6e:0b:ea:
         df:a5:8b:35:7e:96:3a:53:c3:29:ae:5d:29:aa:7d:f9:58:d7:
         1c:09:74:c1:27:04:7f:de:c7:01:4a:88:38:68:7f:a4:70:0c:
         2c:0c:36:dd:75:f3:33:19:c0:6a:c6:ce:e1:f1:f8:b3:06:5e:
         3b:fd:33:ee:5c:3b:4a:5d:49:fa:5f:50:40:4b:d6:c5:e2:40:
         85:ce:fd:4b:fb:72:e2:f8:8e:0b:24:1c:60:46:d1:ce:db:2f:
         59:d2:19:98:60:8a:b9:ca:9d:71:9a:56:16:98:39:98:c0:12:
         b0:97:e7:3a:03:d5:bc:78:3c:1e:ca:d5:03:fe:d5:56:43:0d:
         46:41:df:9a:ae:a6:2c:16:41:00:b6:4e:4c:39:e2:9a:4e:37:
         f0:f9:00:a4:35:d5:fa:37:58:92:9f:11:5f:6f:48:65:98:06:
         03:94:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:51:06 2025 by rpki-client