This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa
File:                     323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa (raw, json)
Hash identifier:          YCzMlhnH691OzwYxUJMSo2yeiC3mwPEU1gjT/6k7e5g=
Subject key identifier:   C7:C0:85:77:D7:3F:DE:3A:50:A5:38:71:B8:A6:CA:B2:55:4E:3D:06
Certificate issuer:       /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial:       75D7083EEFE962893C3948DCF594678C438420C1
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa
Signing time:             Mon 08 Dec 2025 01:35:26 +0000
ROA not before:           Mon 08 Dec 2025 01:30:26 +0000
ROA not after:            Mon 07 Dec 2026 01:35:26 +0000
asID:                     28594
IP address blocks:        2804:5208:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d7:08:3e:ef:e9:62:89:3c:39:48:dc:f5:94:67:8c:43:84:20:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
        Validity
            Not Before: Dec  8 01:30:26 2025 GMT
            Not After : Dec  7 01:35:26 2026 GMT
        Subject: CN=C7C08577D73FDE3A50A53871B8A6CAB2554E3D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:76:ac:79:c3:eb:03:12:63:59:87:17:89:
                    0c:7a:d6:3f:31:ec:ab:c3:2d:ae:ad:da:1e:38:4b:
                    ec:7c:f4:de:65:46:31:af:b1:d3:2f:55:93:0f:47:
                    73:b5:b5:d6:c7:0e:4d:44:c7:4b:88:ce:ba:e3:cd:
                    96:08:60:a5:f1:8e:d3:0a:48:f3:fa:5d:d0:e8:65:
                    2d:d3:93:4c:4c:0b:79:0f:de:b4:b3:32:ce:32:17:
                    89:93:a1:8f:87:7d:6e:44:68:18:81:57:7e:e9:f6:
                    20:60:e2:1e:5b:e2:64:cf:46:8b:07:40:ca:79:f2:
                    4b:7f:b7:75:57:21:a6:fb:d5:83:b8:72:a9:fc:cb:
                    13:41:fb:dd:ee:67:7f:4e:df:4f:3e:49:19:cf:22:
                    d1:69:47:59:46:cf:3e:29:4d:15:df:85:12:e1:d6:
                    82:ad:df:21:b9:93:1a:a4:2d:07:94:d6:b0:7a:3f:
                    64:c8:29:13:5c:e3:80:5c:be:51:7f:26:0e:08:01:
                    ef:14:32:67:67:f7:f9:33:f3:fc:75:d7:0b:6d:7c:
                    a9:4a:d2:fb:3f:09:21:eb:9c:1a:aa:0c:e8:29:a2:
                    4c:fa:5a:6c:19:41:84:ad:77:24:9d:47:04:c4:d2:
                    de:a7:99:53:7c:85:26:a7:65:01:fd:df:a6:05:c6:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C0:85:77:D7:3F:DE:3A:50:A5:38:71:B8:A6:CA:B2:55:4E:3D:06
            X509v3 Authority Key Identifier:
                keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:44:bb:c7:d0:b6:0f:f8:63:fc:a5:d9:e5:51:39:78:bd:
         be:eb:7b:75:01:b5:4a:9c:9f:72:75:e2:7b:9a:71:9c:b0:19:
         2c:29:af:7d:f8:41:ec:61:56:2b:d9:9c:d6:a9:aa:2a:79:50:
         f9:c4:f9:c3:a2:25:84:aa:f1:b9:3c:11:26:9c:0d:4c:b2:99:
         5d:3b:f2:16:ae:9a:12:bd:df:aa:57:c3:36:e4:90:7a:c9:b1:
         bc:d4:9e:be:bb:17:8e:53:b9:60:34:ca:56:53:54:85:19:ca:
         56:d1:c2:18:85:ea:02:b0:3d:2c:6d:7a:ad:58:54:80:ac:fc:
         65:b1:88:f2:80:42:a2:0d:96:66:41:09:6a:6d:8b:31:07:79:
         69:49:b5:d6:61:db:a4:47:d2:e6:d7:c5:d1:19:77:82:84:d1:
         e8:09:05:6d:c4:cf:95:98:14:2a:cc:45:70:8d:ac:92:3a:ef:
         a1:58:82:bc:9f:32:89:21:aa:6f:e6:2f:93:31:f3:4c:dc:a6:
         f2:72:bf:76:97:b6:6c:a1:12:4e:08:f4:b2:ba:d8:96:25:b2:
         c5:fe:76:a6:07:94:dc:43:97:8d:4b:69:88:4e:c6:1c:68:78:
         76:07:c8:16:83:8f:6b:68:b8:7b:27:7c:a9:78:7f:56:34:e8:
         ad:36:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:18:27 2025 by rpki-client