This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d3332203d3e20323733363539.roa
File:                     323830343a386134383a3a2f33322d3332203d3e20323733363539.roa (raw, json)
Hash identifier:          +UwnYWXxDQDVtwRzeru4Duqn3nPLH6luPP7a+h+KY/4=
Subject key identifier:   29:6C:DD:C2:B5:D0:C4:96:F3:C3:C3:2F:BB:70:D9:49:9D:7F:83:17
Certificate issuer:       /CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
Certificate serial:       5B8487338C2205BC80356863B74F0843CB8D715A
Authority key identifier: A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d3332203d3e20323733363539.roa
Signing time:             Tue 16 Dec 2025 19:58:01 +0000
ROA not before:           Tue 16 Dec 2025 19:53:01 +0000
ROA not after:            Tue 15 Dec 2026 19:58:01 +0000
asID:                     273659
IP address blocks:        2804:8a48::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl
                          rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 20:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:84:87:33:8c:22:05:bc:80:35:68:63:b7:4f:08:43:cb:8d:71:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
        Validity
            Not Before: Dec 16 19:53:01 2025 GMT
            Not After : Dec 15 19:58:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:d8:5e:bf:33:aa:6f:f4:15:80:fc:df:ea:
                    d0:57:b9:bc:e1:15:7a:30:cf:50:6b:5a:33:e9:f3:
                    83:59:bf:09:a5:e6:c9:e5:72:40:68:24:49:e5:f1:
                    fd:6a:a5:74:d3:58:01:49:ab:19:c0:85:98:37:5c:
                    b0:4c:7f:6d:30:f5:99:b2:b9:ed:2b:a6:a8:d9:90:
                    d6:80:0f:c6:bb:f5:95:a6:91:66:fd:38:79:e6:cd:
                    7a:65:7b:2e:02:d6:78:3e:ca:12:a8:bc:1b:40:3b:
                    5b:2b:39:83:22:5c:db:5a:40:d1:09:c2:5e:af:22:
                    55:fc:01:f0:e7:3f:05:7f:df:a9:81:ad:3a:cf:13:
                    30:f2:1a:b3:a5:83:77:88:51:ad:13:d8:5b:5d:85:
                    e6:f4:37:46:7a:75:51:1b:c5:35:9e:7f:bb:cc:b1:
                    e8:00:35:23:37:52:a2:96:e8:67:28:7f:01:6b:b3:
                    ef:55:6f:34:9d:98:05:1d:1c:a6:ee:5b:d2:21:5c:
                    da:cb:fa:ba:45:ce:af:b4:cf:92:1a:87:93:2f:0b:
                    5d:3c:b2:4c:8c:cb:86:b7:d2:cb:3d:ed:c3:61:0a:
                    04:8b:11:13:b6:54:01:04:e6:dc:6e:2d:a8:13:cc:
                    bb:84:ba:c4:f1:91:61:9b:db:ac:5b:66:ad:6b:52:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6C:DD:C2:B5:D0:C4:96:F3:C3:C3:2F:BB:70:D9:49:9D:7F:83:17
            X509v3 Authority Key Identifier:
                keyid:A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d3332203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:39:97:cb:c6:fb:dd:e4:cb:d1:11:49:cd:cb:31:8a:9a:75:
         1f:70:1b:3a:13:21:ef:5e:cd:e5:4a:08:74:b3:a7:64:e7:14:
         07:be:3e:d0:b1:3b:27:ad:4e:9f:07:dc:c3:8a:ce:5b:8a:50:
         63:7f:d1:f7:53:e8:17:c7:64:46:4a:bf:37:1a:fc:73:4f:da:
         7a:00:35:d3:f2:e7:7a:23:16:7d:dd:80:13:92:7a:9e:1a:fb:
         e2:6c:99:75:d7:9f:48:82:c1:92:bb:a0:4d:6a:34:93:4f:b1:
         0b:5e:93:ac:7d:c6:5e:2e:b3:39:d0:8d:89:d7:08:c8:fd:61:
         fd:fd:5b:58:7b:00:e2:0d:df:07:98:be:df:fb:a2:3c:c8:cb:
         a0:18:05:47:e5:5d:27:1b:3a:4f:25:16:67:5e:8c:1b:25:79:
         5b:21:09:79:e2:84:3d:63:04:bf:83:f4:8f:d9:17:04:b3:f7:
         db:8d:bd:9d:91:e1:07:f6:8b:e9:a3:8c:a1:78:ff:9e:91:a9:
         a5:de:e7:b8:7d:19:2a:bc:d3:06:41:9e:bc:b9:ee:a7:68:06:
         8f:df:2d:b1:61:dd:c9:94:15:cc:34:4c:fe:48:a7:ef:b6:a7:
         fc:73:50:ad:32:17:6a:83:c3:a9:f5:bc:e3:9d:b9:fb:dc:b8:
         c5:65:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----