This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/323830343a353738343a3a2f33322d3334203d3e20323638303639.roa
File:                     323830343a353738343a3a2f33322d3334203d3e20323638303639.roa (raw, json)
Hash identifier:          olwz3K7P+NSd+lKq/c1008ymYUXH+0/yCdorTQnZ79M=
Subject key identifier:   95:0D:51:8E:C5:BA:0F:D2:4E:62:D7:83:FC:D2:8E:33:EE:47:D7:7C
Certificate issuer:       /CN=C70B4F98326F0C82AA39763975F56D6A09ADFE5E
Certificate serial:       06AB293F18F5AE4EAF1FB3BBD2561E30A02D66DC
Authority key identifier: C7:0B:4F:98:32:6F:0C:82:AA:39:76:39:75:F5:6D:6A:09:AD:FE:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/323830343a353738343a3a2f33322d3334203d3e20323638303639.roa
Signing time:             Tue 09 Dec 2025 15:08:00 +0000
ROA not before:           Tue 09 Dec 2025 15:03:00 +0000
ROA not after:            Tue 08 Dec 2026 15:08:00 +0000
asID:                     268069
IP address blocks:        2804:5784::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.crl
                          rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ab:29:3f:18:f5:ae:4e:af:1f:b3:bb:d2:56:1e:30:a0:2d:66:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70B4F98326F0C82AA39763975F56D6A09ADFE5E
        Validity
            Not Before: Dec  9 15:03:00 2025 GMT
            Not After : Dec  8 15:08:00 2026 GMT
        Subject: CN=950D518EC5BA0FD24E62D783FCD28E33EE47D77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:e0:bd:97:15:dc:a7:c0:a9:8f:8a:8c:ab:
                    5d:1a:d4:44:be:0d:5c:5f:8d:97:63:f0:d1:6d:13:
                    06:d7:bd:23:54:56:39:53:28:25:13:0c:88:da:7b:
                    e6:18:d1:b5:a9:92:b3:df:e1:fa:5e:97:46:37:e1:
                    05:ee:9b:eb:07:09:8a:e8:db:2f:a8:3b:f0:1c:ac:
                    7c:5e:17:88:46:ea:aa:da:7e:90:c4:67:39:94:0c:
                    36:9c:92:e3:c6:34:86:12:59:c8:9d:6c:ed:9d:8d:
                    1d:a2:5a:80:f5:36:3e:36:e8:90:a9:31:8f:39:76:
                    50:57:3a:ad:70:62:8d:cf:c4:f5:79:d7:de:88:57:
                    63:9d:33:d0:90:9a:ec:0c:01:58:70:f3:84:4f:29:
                    1c:34:bb:b1:dc:22:b5:e7:21:9e:4c:cf:fa:be:a9:
                    82:c7:0c:ec:69:5f:9a:86:5b:da:f0:31:de:1c:54:
                    24:d4:3c:22:0f:4c:d4:07:73:5f:cb:bf:dc:98:b5:
                    78:72:db:1d:29:bb:fb:1f:55:00:4e:8d:67:f6:bb:
                    54:38:64:07:10:f4:bc:6f:1f:23:ad:34:b9:6d:36:
                    d1:40:39:ee:01:ae:e2:f7:8e:2c:19:e3:a0:ff:15:
                    68:2f:e8:80:35:31:e2:d0:16:80:e7:b7:f5:6a:01:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0D:51:8E:C5:BA:0F:D2:4E:62:D7:83:FC:D2:8E:33:EE:47:D7:7C
            X509v3 Authority Key Identifier:
                keyid:C7:0B:4F:98:32:6F:0C:82:AA:39:76:39:75:F5:6D:6A:09:AD:FE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/323830343a353738343a3a2f33322d3334203d3e20323638303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5784::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:5b:8a:10:99:e2:28:bf:8d:a3:66:73:82:83:ea:3a:57:dc:
         9d:28:1d:7a:11:f8:43:9c:66:d8:9c:ac:2f:8f:48:d8:f1:03:
         f1:2b:9d:ae:60:e9:a6:b8:16:ec:37:1e:6f:77:3c:e8:72:1e:
         39:7c:66:48:c7:f8:d3:68:f0:00:56:f2:d7:50:73:a5:96:68:
         ee:8d:87:53:ab:a3:f6:60:ce:c8:86:e2:a4:e5:5d:ed:77:c8:
         fc:30:73:96:4b:16:65:79:11:2a:b3:06:16:9a:bb:ed:b9:2c:
         fa:fe:b7:8a:ff:dc:11:24:08:58:6e:d7:7f:c5:5a:cd:a7:7d:
         b3:70:e8:15:a3:af:74:a8:b1:99:cb:63:ee:1c:18:a6:d4:8d:
         49:5b:5a:db:d7:7a:1a:2b:f7:65:15:cb:f4:50:c5:82:88:27:
         d4:a9:ba:ae:45:c9:a4:68:98:12:81:16:18:1b:05:89:30:6b:
         b2:d0:ec:13:71:7a:33:e2:43:8f:ea:a9:ba:43:5e:c1:b4:91:
         df:6e:4b:c0:07:00:f1:f5:c3:aa:cd:ca:13:16:ba:84:fa:ab:
         d4:5e:bd:6c:5c:98:83:a9:24:3f:5d:13:41:d4:e6:94:9e:a6:
         69:55:36:60:d3:71:64:5b:92:57:26:2b:f0:6c:79:9d:1d:8a:
         3b:a2:45:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:57:56 2025 by rpki-client