This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383033303a3a2f34342d3434203d3e20323634343739.roa
File:                     323830343a323033633a383033303a3a2f34342d3434203d3e20323634343739.roa (raw, json)
Hash identifier:          axqC4g62TEIpotTa+JEMJAbY64e/48ECa/D2Odjhabg=
Subject key identifier:   C4:66:4F:00:4B:FF:B6:3F:AF:BF:51:7B:8E:7D:FE:F3:03:A9:E1:E8
Certificate issuer:       /CN=B314917F1BC8CD321336C2D44EF8E783D4576716
Certificate serial:       1D9429B673939A62ED1C3A2FE6D3589A1E18AF6E
Authority key identifier: B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383033303a3a2f34342d3434203d3e20323634343739.roa
Signing time:             Fri 12 Dec 2025 18:08:24 +0000
ROA not before:           Fri 12 Dec 2025 18:03:24 +0000
ROA not after:            Fri 11 Dec 2026 18:08:24 +0000
asID:                     264479
IP address blocks:        2804:203c:8030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:94:29:b6:73:93:9a:62:ed:1c:3a:2f:e6:d3:58:9a:1e:18:af:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B314917F1BC8CD321336C2D44EF8E783D4576716
        Validity
            Not Before: Dec 12 18:03:24 2025 GMT
            Not After : Dec 11 18:08:24 2026 GMT
        Subject: CN=C4664F004BFFB63FAFBF517B8E7DFEF303A9E1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:45:3f:5f:f3:49:73:dc:14:f6:62:86:91:
                    4a:1f:7a:a4:33:54:89:5f:1b:68:2e:2d:2b:fa:28:
                    57:3b:0d:45:7a:5a:7b:4f:d4:67:7d:49:30:8d:9d:
                    3b:58:8f:bc:e1:b2:a8:34:f2:b8:9c:99:d6:f9:21:
                    1d:a6:96:b8:e1:49:95:5a:50:03:a4:9c:a6:79:f5:
                    b7:d0:1b:b4:17:d5:d2:b1:9f:f3:cb:d9:d7:c1:bb:
                    0e:6f:f3:1c:78:98:ee:df:72:8d:7a:a9:42:67:0b:
                    c7:37:22:f5:17:59:94:da:03:91:5b:73:9a:a2:5a:
                    b9:58:79:ae:49:2b:e0:90:03:e1:d3:43:7a:16:96:
                    2c:5f:13:45:7d:30:3f:1e:75:de:00:6a:32:12:57:
                    98:7a:f4:5c:e1:70:9a:c7:50:93:3e:9d:ae:75:a5:
                    59:ab:30:6a:b0:7f:83:94:f2:63:89:1b:0e:41:bb:
                    30:6f:9e:84:c4:ac:08:b5:cf:38:95:cd:5c:70:37:
                    76:d4:f5:f8:df:01:4c:90:dd:bb:16:7b:25:e4:e8:
                    4f:84:54:91:54:65:f3:f8:b5:ef:53:0f:b7:42:9b:
                    56:db:d9:d7:7d:ef:b8:7a:13:99:69:6b:9e:64:43:
                    e4:66:95:1f:72:88:f8:c0:7a:b3:a7:df:af:06:8e:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:66:4F:00:4B:FF:B6:3F:AF:BF:51:7B:8E:7D:FE:F3:03:A9:E1:E8
            X509v3 Authority Key Identifier:
                keyid:B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383033303a3a2f34342d3434203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:203c:8030::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:db:bc:59:3f:e9:12:52:16:bb:49:50:d0:24:ff:73:68:
         5c:6d:cd:ee:cf:d0:0e:7c:32:c5:6b:8a:61:e0:1f:62:85:5a:
         e6:0a:25:6f:f0:74:9d:20:29:53:e2:04:dd:90:6e:f4:f4:2f:
         a6:8d:40:e8:d6:f4:4e:85:3c:2c:49:3c:27:1b:2b:aa:c2:64:
         d4:5c:29:22:d5:19:68:8c:e5:0b:b6:5a:88:f4:1b:f8:4c:d5:
         85:60:0d:b6:e2:81:d1:cf:47:c5:86:9f:bb:e3:81:04:2a:c6:
         45:29:c2:ec:ee:a4:18:96:61:15:2c:45:8d:aa:e9:28:52:17:
         ee:ba:7e:5a:04:49:09:f9:b5:a1:47:d1:7f:b0:2b:63:4e:c7:
         00:14:3d:75:2a:94:74:d3:01:76:75:26:4c:eb:97:99:ac:8b:
         c0:cb:be:cf:cb:56:1f:09:84:a2:56:1a:a4:58:39:69:5a:87:
         ff:2e:68:24:0e:47:b7:73:3e:de:7e:34:8e:b1:3b:ee:e5:d5:
         de:ab:9d:62:34:7b:d9:ec:4f:a1:88:b0:47:0d:f4:26:03:3b:
         5c:83:7a:d0:9c:9d:41:91:93:7f:f8:c5:b5:6b:83:cb:f4:b9:
         6c:45:e2:b5:d8:5b:db:ff:62:e5:75:61:72:03:53:62:5e:13:
         61:82:b6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 16:03:34 2025 by rpki-client