This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/323830343a353664633a3a2f33322d313238203d3e20323638303238.roa
File:                     323830343a353664633a3a2f33322d313238203d3e20323638303238.roa (raw, json)
Hash identifier:          99aLqpqF3pIsHru1daPpoll1w7WAarMG1DzekpaNGlg=
Subject key identifier:   16:DD:D2:06:DC:86:41:B0:EC:36:14:23:47:8A:C4:7F:40:48:D7:1C
Certificate issuer:       /CN=6A7229281936FDF6807C956949B8906409365025
Certificate serial:       7214FBF1135B70E5C5C15B5DDD85C961AFCF4B26
Authority key identifier: 6A:72:29:28:19:36:FD:F6:80:7C:95:69:49:B8:90:64:09:36:50:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7229281936FDF6807C956949B8906409365025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/323830343a353664633a3a2f33322d313238203d3e20323638303238.roa
Signing time:             Mon 08 Dec 2025 19:56:01 +0000
ROA not before:           Mon 08 Dec 2025 19:51:01 +0000
ROA not after:            Mon 07 Dec 2026 19:56:01 +0000
asID:                     268028
IP address blocks:        2804:56dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/6A7229281936FDF6807C956949B8906409365025.crl
                          rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/6A7229281936FDF6807C956949B8906409365025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7229281936FDF6807C956949B8906409365025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 06:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:14:fb:f1:13:5b:70:e5:c5:c1:5b:5d:dd:85:c9:61:af:cf:4b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7229281936FDF6807C956949B8906409365025
        Validity
            Not Before: Dec  8 19:51:01 2025 GMT
            Not After : Dec  7 19:56:01 2026 GMT
        Subject: CN=16DDD206DC8641B0EC361423478AC47F4048D71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:45:77:8d:53:31:51:c2:c4:77:8e:1b:92:
                    fd:4b:e6:b5:18:c3:c0:ff:af:5e:59:63:d0:32:cf:
                    64:a9:1a:f3:c6:49:a4:a0:f4:49:8d:07:2d:d4:03:
                    4c:2b:aa:0c:5b:23:21:34:9e:0e:b6:cc:d0:56:4d:
                    db:fb:94:f8:60:71:50:32:d6:81:66:19:8a:eb:98:
                    3e:02:9f:f1:38:56:f4:32:33:01:40:76:a0:56:87:
                    67:99:75:64:dc:42:06:11:dc:9a:f0:b6:3f:b2:b3:
                    03:89:43:52:7b:26:9e:15:f5:64:04:04:53:8a:da:
                    55:cd:ba:d6:ec:39:2b:f5:7d:37:8f:e2:aa:9e:51:
                    0b:58:7d:60:b7:1b:45:12:f6:b5:0b:4f:41:09:13:
                    cd:4f:6d:2b:28:9e:42:33:e4:52:f1:6e:f7:63:5f:
                    48:a2:3b:07:9e:eb:02:94:15:03:99:66:4d:59:43:
                    6d:38:ae:d4:6f:ee:f1:fa:50:08:b7:db:f3:d5:70:
                    88:8c:85:75:46:3a:bc:93:27:3b:14:18:b8:03:6e:
                    0c:dd:be:15:4e:6a:af:a6:9b:c0:c4:f2:51:44:1a:
                    5e:7f:f0:9b:ea:d7:aa:41:cb:bb:23:9f:b8:af:c2:
                    c8:c0:bd:c8:6e:f1:c0:1c:ab:66:c0:62:ec:03:53:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DD:D2:06:DC:86:41:B0:EC:36:14:23:47:8A:C4:7F:40:48:D7:1C
            X509v3 Authority Key Identifier:
                keyid:6A:72:29:28:19:36:FD:F6:80:7C:95:69:49:B8:90:64:09:36:50:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/6A7229281936FDF6807C956949B8906409365025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A7229281936FDF6807C956949B8906409365025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/323830343a353664633a3a2f33322d313238203d3e20323638303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:22:a3:d7:0a:ec:67:31:c6:24:50:ad:05:e5:30:9a:29:
         d2:65:36:f8:92:30:26:34:48:f3:f7:c6:18:72:97:48:48:d6:
         4d:a2:e8:67:bc:e3:14:52:9a:46:e8:66:08:29:d5:3a:77:28:
         0f:2f:16:97:3d:15:96:09:d0:6b:97:1a:80:f2:73:71:82:9e:
         3f:93:c7:44:39:fa:26:d9:2d:1e:a8:e3:71:2c:ec:63:86:02:
         b4:0f:c0:12:50:40:89:36:7c:80:3c:40:da:1b:8f:d4:0c:cc:
         b8:34:31:c6:71:f6:11:83:6a:73:14:f7:ed:d7:5d:3c:8b:28:
         5c:eb:d5:b4:66:e2:30:ce:01:42:2b:44:70:50:c1:73:9e:00:
         7f:43:05:73:71:8d:47:97:a2:37:bb:65:36:64:5a:90:b5:7f:
         f3:81:cb:9c:86:d0:c8:11:58:67:db:f8:6a:f5:6a:cf:e9:12:
         ca:5b:6a:00:f6:44:cf:5e:24:f5:f4:4b:cd:71:a7:42:6b:fd:
         1d:c4:21:fb:ea:29:79:d7:bc:c4:4e:d8:c4:1b:f9:b3:71:e3:
         47:57:41:90:9d:7c:c8:c9:8f:4c:31:6f:6c:a7:39:7e:8b:40:
         1a:6c:44:ba:e5:0a:6b:28:e6:08:6c:5c:02:3a:ab:87:a0:68:
         d4:e9:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:07:38 2025 by rpki-client