This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/323830343a373639303a3a2f33322d3334203d3e20323731313230.roa
File:                     323830343a373639303a3a2f33322d3334203d3e20323731313230.roa (raw, json)
Hash identifier:          xVcxNYqKybbN/Ps4xlecaMMazfKtFl+FisOE5h/ALPs=
Subject key identifier:   33:C7:73:C7:CB:CE:75:05:70:DA:D7:EA:73:80:F8:6B:B9:BB:F2:4A
Certificate issuer:       /CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
Certificate serial:       5D68DBC71751CE057BD9953DC88006FA20242D2C
Authority key identifier: 7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/323830343a373639303a3a2f33322d3334203d3e20323731313230.roa
Signing time:             Fri 12 Dec 2025 16:08:09 +0000
ROA not before:           Fri 12 Dec 2025 16:03:09 +0000
ROA not after:            Fri 11 Dec 2026 16:08:09 +0000
asID:                     271120
IP address blocks:        2804:7690::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl
                          rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 15:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:68:db:c7:17:51:ce:05:7b:d9:95:3d:c8:80:06:fa:20:24:2d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
        Validity
            Not Before: Dec 12 16:03:09 2025 GMT
            Not After : Dec 11 16:08:09 2026 GMT
        Subject: CN=33C773C7CBCE750570DAD7EA7380F86BB9BBF24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:ca:97:ae:4b:6b:22:0e:37:9b:e1:b3:b6:
                    30:e4:0b:00:21:34:bf:61:f7:54:88:26:7a:76:73:
                    ea:56:56:ff:e7:d6:85:88:5e:3d:80:2c:a4:d3:58:
                    f8:e6:3a:59:f0:25:0b:e5:c8:39:4a:9d:80:37:8a:
                    d4:65:fe:9e:3f:83:bb:6f:62:21:6a:4d:cb:2e:2d:
                    37:40:99:14:21:74:1d:8d:6f:b4:02:d4:c5:bf:72:
                    1f:d3:a0:bc:ca:f2:c5:27:ef:01:0d:42:85:15:d2:
                    cb:08:74:1a:94:b8:ae:9b:c0:b6:7b:f7:8b:dd:69:
                    15:10:cd:ed:61:6c:a3:f1:cb:b8:32:8c:f6:51:af:
                    18:61:00:ba:db:7c:11:b0:af:7a:96:c4:e4:ed:ee:
                    ba:c2:3a:b1:42:ce:c4:1e:df:6c:66:4b:b5:8e:15:
                    86:3a:0c:7f:1e:69:6f:cc:a7:d5:24:36:7b:77:8c:
                    c1:4c:e6:c3:dd:84:da:d7:bb:a4:b1:4e:d7:65:ce:
                    74:a8:bc:7b:47:55:ee:e7:5e:0b:2c:b8:c8:43:52:
                    0b:65:20:fb:11:7b:43:dc:d0:14:0b:63:3e:aa:a1:
                    80:2a:15:d2:35:18:d7:67:10:c0:e4:56:06:ee:c6:
                    c3:59:0d:ec:5b:e5:b7:c0:84:d3:90:35:e6:d2:98:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C7:73:C7:CB:CE:75:05:70:DA:D7:EA:73:80:F8:6B:B9:BB:F2:4A
            X509v3 Authority Key Identifier:
                keyid:7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/323830343a373639303a3a2f33322d3334203d3e20323731313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7690::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:f3:f4:02:35:d8:69:26:89:5c:73:61:ab:1b:76:d6:c7:
         0e:02:fe:6e:9d:fa:17:2d:8c:b9:b9:a0:a6:5f:8b:d4:a0:cc:
         ae:8e:96:ad:86:fb:58:ef:ed:2a:f5:cc:55:10:f3:f4:d4:3e:
         7e:64:52:34:25:80:3d:90:3d:80:4f:b9:19:17:ba:60:23:42:
         c8:39:2a:37:8a:33:c2:d7:cd:59:69:11:22:d2:c3:e5:f4:49:
         07:ad:88:bf:34:5e:d4:d8:40:c5:5b:f0:ea:a1:32:0a:54:b3:
         7e:09:3d:cc:8f:4b:f4:05:fa:f0:b7:b3:8a:6b:e6:47:bd:68:
         2d:33:c9:2a:da:23:17:67:e7:3f:e6:7e:aa:2d:9a:e5:c4:25:
         bb:71:1d:4a:0e:f5:d9:54:31:e2:69:b6:d3:a8:84:36:ac:24:
         f7:18:c1:03:ce:21:1c:69:3d:fe:e0:7d:f0:27:f1:f4:e2:d7:
         06:d2:02:5d:b8:01:67:08:1a:5e:b3:ca:ac:1e:01:0c:92:a7:
         67:76:c5:33:c2:0c:72:0e:51:a0:80:bc:67:d8:7d:3e:26:d9:
         fd:62:78:0c:0e:e2:fe:80:aa:73:8e:08:fb:fb:6b:57:d8:ae:
         33:4f:9e:e3:0f:1b:b4:a8:cf:13:58:28:d1:3a:cf:be:d9:64:
         12:dc:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:24:05 2025 by rpki-client