This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/323830343a373633303a3a2f33332d3333203d3e20323731303935.roa
File:                     323830343a373633303a3a2f33332d3333203d3e20323731303935.roa (raw, json)
Hash identifier:          QDDfeteaggs/iCgxCSGNvWlivL2Hv9lAYEaXAs7iN9g=
Subject key identifier:   77:EE:D7:CC:09:29:69:84:52:38:50:71:B8:02:66:1A:43:AD:3F:B5
Certificate issuer:       /CN=BB28C577DF924111463D0D089EB3700DB6333A08
Certificate serial:       12276C8FA84D36306FABD7BA32B8870C205979DB
Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/323830343a373633303a3a2f33332d3333203d3e20323731303935.roa
Signing time:             Mon 15 Dec 2025 16:59:24 +0000
ROA not before:           Mon 15 Dec 2025 16:54:24 +0000
ROA not after:            Mon 14 Dec 2026 16:59:24 +0000
asID:                     271095
IP address blocks:        2804:7630::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl
                          rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:27:6c:8f:a8:4d:36:30:6f:ab:d7:ba:32:b8:87:0c:20:59:79:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08
        Validity
            Not Before: Dec 15 16:54:24 2025 GMT
            Not After : Dec 14 16:59:24 2026 GMT
        Subject: CN=77EED7CC0929698452385071B802661A43AD3FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:6d:59:4b:a6:3a:35:7b:a1:2d:0c:84:62:
                    1d:7d:1f:63:9c:dc:5a:2e:3e:53:9f:24:0b:33:42:
                    37:dc:66:99:26:89:46:ea:56:1e:8a:c9:21:fc:a1:
                    6d:c6:a5:4b:1e:e5:86:63:b1:49:83:b3:b4:02:8c:
                    75:60:db:66:49:2e:44:d4:a6:02:58:c7:94:89:06:
                    c7:ca:b3:40:bf:d6:ef:88:a0:68:6e:b5:ec:95:8a:
                    85:ef:c4:4f:f8:8e:ec:c5:31:98:a4:75:fa:38:9f:
                    38:0f:a7:d9:6e:b4:ee:0d:41:a6:5f:7e:4e:69:84:
                    bf:90:82:48:64:69:05:25:00:de:e6:84:26:25:c8:
                    cc:33:4f:31:9c:44:7e:a6:a0:b5:96:a7:8b:23:d7:
                    65:20:eb:23:bc:ed:23:9f:8f:a5:fb:c7:e2:44:5e:
                    85:42:d3:d9:d6:04:bf:62:7a:3a:62:7e:0a:00:f3:
                    73:29:70:3b:e1:11:ad:11:4e:61:59:09:19:b8:e6:
                    f7:26:74:4a:35:d9:21:a7:be:e1:80:81:4e:a5:53:
                    f5:9b:00:fd:5b:5d:6f:ff:87:29:2d:be:f8:f7:ee:
                    fd:65:d9:3c:d5:1b:a6:de:2b:a7:11:60:98:2b:d3:
                    e1:23:51:ea:b6:8a:ac:b1:c9:3c:34:7d:c3:ea:7e:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:D7:CC:09:29:69:84:52:38:50:71:B8:02:66:1A:43:AD:3F:B5
            X509v3 Authority Key Identifier:
                keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/323830343a373633303a3a2f33332d3333203d3e20323731303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7630::/33

    Signature Algorithm: sha256WithRSAEncryption
         b8:f4:f7:f7:01:5d:fd:ab:a8:ac:c6:79:3f:dd:c3:df:ba:df:
         54:1f:fd:45:22:e9:9a:83:bd:e7:3b:8d:87:38:89:28:97:f0:
         45:be:c7:e0:91:d2:7f:e1:7e:3a:2a:c4:1e:a7:4d:a9:9e:24:
         9a:37:16:51:ba:21:14:66:15:6e:7c:3c:db:b4:e7:5c:49:72:
         43:da:0a:86:92:9b:04:b5:0f:53:90:70:e8:71:31:40:99:4f:
         2f:a0:b1:41:a8:2e:5d:f5:33:4c:af:22:5d:db:8f:f3:fe:33:
         aa:ab:eb:46:e8:57:c8:d2:f3:9d:61:b9:65:0e:e5:8a:39:86:
         ed:b9:d1:1e:6f:42:5b:5d:c4:29:31:51:59:c9:27:55:29:49:
         55:7d:1f:d8:9f:75:68:8e:a8:f1:c5:b1:f3:11:00:35:cb:09:
         34:d9:ea:00:5a:66:0d:ef:f7:5b:d2:f2:47:59:e5:47:08:89:
         a2:b4:ec:b3:dc:2d:fe:96:11:ac:57:a2:ee:6e:1a:b1:16:8e:
         82:6a:97:b0:92:b2:a4:02:22:54:14:23:a3:dd:e5:be:d9:b6:
         ba:aa:f7:99:dc:40:f0:75:52:a2:e2:f7:d4:a1:18:8f:13:aa:
         8c:64:29:39:96:d5:0d:15:82:a0:52:09:76:d3:67:bc:6f:8e:
         1e:06:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:57:31 2025 by rpki-client