This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa
File:                     323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa (raw, json)
Hash identifier:          gJ9sCMUbwIzIpklo/oH9Pw3grp+elaLKgEC+KEtJv/c=
Subject key identifier:   1F:DE:9B:99:8E:17:C6:DA:43:5F:DF:1F:FC:D5:11:B3:F6:9E:B7:00
Certificate issuer:       /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial:       1C913D163F7CFD6ABB31DBE96E8D28FC44218E4F
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa
Signing time:             Mon 08 Dec 2025 01:35:29 +0000
ROA not before:           Mon 08 Dec 2025 01:30:29 +0000
ROA not after:            Mon 07 Dec 2026 01:35:29 +0000
asID:                     28594
IP address blocks:        2804:5208:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:91:3d:16:3f:7c:fd:6a:bb:31:db:e9:6e:8d:28:fc:44:21:8e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
        Validity
            Not Before: Dec  8 01:30:29 2025 GMT
            Not After : Dec  7 01:35:29 2026 GMT
        Subject: CN=1FDE9B998E17C6DA435FDF1FFCD511B3F69EB700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:25:af:e7:b9:a8:c1:34:2d:fc:fc:a1:20:
                    bd:77:b9:6c:e8:33:6b:5e:20:95:23:d7:14:d2:0f:
                    c6:f3:1a:e8:60:91:dc:c6:31:69:ea:50:32:db:b1:
                    db:c4:18:31:2e:4f:bb:80:dd:83:2a:31:8e:3a:ba:
                    52:fb:26:40:22:e7:ad:c1:1d:a4:b6:1d:81:0e:e8:
                    3e:a8:03:06:1b:4c:bb:96:ec:0a:7c:15:0d:43:90:
                    7d:c3:07:0d:af:cd:87:e4:ff:92:d5:69:87:9d:4a:
                    da:a4:a8:b0:fd:19:71:bd:d1:e2:37:41:3b:c6:8c:
                    8a:f3:4d:04:bc:90:a7:bb:ca:ff:89:7a:11:59:c8:
                    e8:ee:42:9a:da:05:4c:e6:6e:62:af:fd:21:0c:b4:
                    a4:10:91:59:3e:3a:88:18:62:c2:92:ed:01:3c:be:
                    2f:96:a9:ea:7d:7a:bd:39:e6:63:7e:38:1a:a1:bc:
                    40:05:30:ef:e9:02:af:9d:30:09:60:43:f8:ba:ec:
                    df:67:f5:08:28:d8:4c:5f:2b:cf:b9:1a:fe:ac:71:
                    1b:f9:b7:b5:45:22:d3:28:f3:c2:86:72:87:1c:3c:
                    4d:b3:a8:34:d1:fa:92:93:ca:2f:e7:6c:19:69:4d:
                    88:7e:bf:8c:19:d1:7d:65:59:47:22:03:ca:3b:32:
                    0f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DE:9B:99:8E:17:C6:DA:43:5F:DF:1F:FC:D5:11:B3:F6:9E:B7:00
            X509v3 Authority Key Identifier:
                keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a383030303a3a2f34382d3438203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:62:55:70:c3:44:73:ac:2f:8f:de:d0:1d:46:4d:bf:30:d6:
         02:1b:58:0d:bf:5d:51:80:c5:3a:50:9b:42:ec:a6:a8:56:4e:
         22:23:84:8f:d2:30:d0:18:43:1a:df:15:d3:63:a0:fc:0d:58:
         cd:55:9f:48:ee:a2:c9:4e:59:3d:5d:a3:b6:2b:f9:e6:cf:d1:
         cc:b5:df:1f:62:a6:91:0c:26:f0:9d:31:89:7d:e8:72:a0:4e:
         f9:b4:d5:81:6f:97:1c:53:84:c1:ce:f6:37:cc:77:56:3c:77:
         1c:56:19:11:41:18:11:5e:d8:84:7b:0e:89:ce:78:ad:32:a4:
         e6:33:43:7f:45:77:44:12:99:af:69:98:e6:29:49:ad:95:09:
         b4:22:36:c2:cf:b5:e6:a2:1b:a5:bc:8b:d6:68:76:b8:bb:5c:
         64:d4:e7:2e:9e:19:69:ca:e7:b8:e6:8d:39:13:56:57:d8:a8:
         35:e0:ba:26:5f:01:19:6a:49:13:7f:aa:30:62:eb:e4:0b:db:
         8f:ef:52:7e:bd:d5:f2:db:e0:6d:9e:b6:dc:b1:a7:27:61:d9:
         b2:5e:ae:7a:41:6d:b3:3b:d8:0d:7a:05:dd:a5:ae:22:58:ff:
         5e:11:d8:e7:bb:8a:0e:e7:53:19:03:28:76:de:b8:0f:23:66:
         4a:56:f0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:23:16 2025 by rpki-client