This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a393464633a3a2f33322d313238203d3e20323734343833.roa
File:                     323830343a393464633a3a2f33322d313238203d3e20323734343833.roa (raw, json)
Hash identifier:          w80nGPX/Zk6DYYzeJBB3nH8aTW6oT1vBnJBYBk+gV+s=
Subject key identifier:   F0:73:BB:AF:E3:F3:E1:91:E7:DB:AC:AB:75:A2:AC:AE:26:7C:B6:B6
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       5DC43F6B515FE7A88159530065A0E41A194D9EBF
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a393464633a3a2f33322d313238203d3e20323734343833.roa
Signing time:             Wed 17 Dec 2025 20:24:48 +0000
ROA not before:           Wed 17 Dec 2025 20:19:48 +0000
ROA not after:            Wed 16 Dec 2026 20:24:48 +0000
asID:                     274483
IP address blocks:        2804:94dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 10:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c4:3f:6b:51:5f:e7:a8:81:59:53:00:65:a0:e4:1a:19:4d:9e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Dec 17 20:19:48 2025 GMT
            Not After : Dec 16 20:24:48 2026 GMT
        Subject: CN=F073BBAFE3F3E191E7DBACAB75A2ACAE267CB6B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:f7:ca:e5:6f:69:1c:9d:85:64:dc:92:ca:
                    8d:21:12:61:73:17:c3:65:38:7a:14:0d:92:9c:74:
                    d7:27:8b:54:c9:e7:a3:d7:f8:8e:44:f0:c3:66:f6:
                    8a:c1:60:23:80:92:39:5e:87:b1:81:74:d7:e5:7e:
                    6b:96:03:46:8e:3f:84:35:c2:80:d4:5d:8b:b1:7f:
                    b8:af:72:d2:37:f4:6a:6a:b1:16:c6:b1:97:0b:1e:
                    98:db:b0:01:89:3c:e1:23:8a:f7:00:3f:34:f7:1e:
                    16:2e:ac:a6:60:bd:72:f5:eb:f9:32:2c:67:24:85:
                    37:ee:00:78:02:b3:eb:e7:4d:7e:dc:d7:1c:15:4e:
                    44:5e:25:c1:9a:1b:43:8d:fa:72:76:da:6e:9e:e5:
                    aa:0f:c7:b6:88:28:b1:a5:66:fb:3f:97:0c:a3:32:
                    ab:c3:6a:cc:24:d0:72:37:df:91:75:48:a9:fe:44:
                    ff:f9:43:69:34:57:d2:cd:36:9d:60:64:e8:ca:41:
                    b0:c7:aa:83:69:89:86:0d:58:ae:ff:a5:aa:f2:3f:
                    c9:32:2f:30:b8:37:28:82:f6:3c:3f:45:3c:bb:8c:
                    94:75:c0:f8:96:e7:69:fb:be:e2:f3:21:a3:a8:50:
                    db:8c:3d:e1:92:66:40:27:93:0c:ed:6f:18:29:09:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:73:BB:AF:E3:F3:E1:91:E7:DB:AC:AB:75:A2:AC:AE:26:7C:B6:B6
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a393464633a3a2f33322d313238203d3e20323734343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:94dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:44:ee:e3:20:b7:49:b7:6c:73:a3:10:04:11:a4:24:16:d6:
         51:28:06:92:74:32:16:34:6d:1e:0d:4b:29:b2:06:d4:dd:d8:
         81:dd:0c:18:12:90:2b:9d:ca:41:3c:ff:bf:80:e0:bc:30:bd:
         58:d4:ee:c6:5a:df:37:b1:3e:81:86:fa:c9:31:a2:c8:c3:b1:
         4d:9f:e7:e5:87:2f:78:e3:09:78:cf:ee:2f:bc:16:7f:d8:5d:
         32:d8:31:26:34:bd:af:fb:c3:2d:59:57:c2:ef:0e:b7:e0:0c:
         3b:72:5c:92:51:61:38:31:a5:f2:38:a0:0a:9b:8e:fa:b1:c5:
         27:6d:d8:0c:7f:d4:d1:be:c0:37:8e:c9:e9:25:61:6a:56:c3:
         db:db:b4:67:e6:d3:67:1b:ca:0c:35:51:9b:f2:7a:aa:ca:45:
         31:b0:52:19:14:40:6d:b0:29:af:24:0b:10:0b:9c:a9:41:16:
         14:b6:76:5a:a6:41:5b:93:9a:40:bf:62:f6:38:65:e6:05:77:
         2f:b8:2d:16:79:24:bb:fa:b7:57:76:50:56:ff:62:e5:4f:a1:
         ae:2d:4a:79:7f:15:ce:65:c1:6f:be:6f:d4:09:ed:9b:a4:81:
         fb:b2:b9:9f:09:16:2a:d5:1a:d5:23:17:cd:08:68:a0:b1:aa:
         e3:ed:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:48:54 2025 by rpki-client