This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33332d3333203d3e20323638373933.roa
File:                     323830343a356163303a3a2f33332d3333203d3e20323638373933.roa (raw, json)
Hash identifier:          KP7MhLgJW9UTRlElJGBok4504xtTSfGVFdAlcoHdlic=
Subject key identifier:   A7:16:7D:96:60:CE:CB:50:27:93:14:BE:3A:EA:B4:B3:86:42:04:7B
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       332D04240E97D1181CFA571F706EE13F62E1DC27
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33332d3333203d3e20323638373933.roa
Signing time:             Mon 15 Dec 2025 18:59:16 +0000
ROA not before:           Mon 15 Dec 2025 18:54:16 +0000
ROA not after:            Mon 14 Dec 2026 18:59:16 +0000
asID:                     268793
IP address blocks:        2804:5ac0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
                          rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 11:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2d:04:24:0e:97:d1:18:1c:fa:57:1f:70:6e:e1:3f:62:e1:dc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Dec 15 18:54:16 2025 GMT
            Not After : Dec 14 18:59:16 2026 GMT
        Subject: CN=A7167D9660CECB50279314BE3AEAB4B38642047B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:82:bb:b8:72:57:a8:c8:ec:62:a9:63:2e:
                    63:69:d6:37:f5:30:56:4b:a4:15:3c:2a:33:9d:1f:
                    b1:ad:3a:a4:c0:f5:86:e1:5a:92:2b:9d:34:e3:66:
                    e8:a8:8e:ce:c4:df:dc:de:95:1e:54:70:51:f6:06:
                    a3:b9:98:7d:16:76:1b:d3:57:13:75:e0:fc:aa:78:
                    da:ed:b5:a9:ca:ef:ab:9c:32:31:a6:98:c6:85:84:
                    8d:34:3b:81:5b:a0:e3:8f:5c:2c:5d:2c:6f:01:bd:
                    74:62:a6:f4:87:cf:f7:c0:bc:8f:ae:30:4c:26:06:
                    20:59:c7:f9:79:bc:1a:af:af:4e:cd:66:45:9c:74:
                    c6:d8:10:6f:15:72:d4:84:94:29:48:8d:ce:bc:36:
                    4e:a1:9d:c1:42:56:51:86:25:3a:22:b0:78:81:e3:
                    33:45:4f:2e:6a:47:25:f7:10:8a:16:4c:ec:30:b7:
                    2d:49:c5:80:57:13:8c:fe:ae:13:c1:60:a2:5e:a4:
                    6a:51:6f:14:2e:79:cb:e3:5d:13:c6:96:de:6f:0d:
                    40:4d:10:ea:4f:ef:06:c2:f2:95:8f:17:73:b5:86:
                    a2:3d:3e:41:4a:6e:f2:9f:29:c8:14:57:af:2e:48:
                    2f:ab:4e:9e:72:49:e1:d5:b4:f8:85:4b:16:47:4e:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:16:7D:96:60:CE:CB:50:27:93:14:BE:3A:EA:B4:B3:86:42:04:7B
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33332d3333203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac0::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:79:94:6e:06:78:05:df:aa:90:14:93:f5:4b:7c:92:bb:a0:
         6f:cd:63:ff:0f:57:41:cc:33:d9:b1:ae:1e:91:2e:92:5b:22:
         a4:ef:d6:79:e2:c2:4d:87:0e:db:43:80:08:8e:6c:cc:60:50:
         ee:57:e0:ad:6b:5e:77:29:9e:61:45:82:e0:64:16:ba:c6:9b:
         c1:2c:de:2f:42:e3:74:d6:df:ce:9c:d7:b7:1d:90:eb:1a:98:
         e0:22:43:fe:23:0a:de:99:bf:1f:3f:60:d5:40:51:1f:ca:a1:
         29:79:a1:ff:f2:c3:13:95:09:1f:bd:98:54:9d:b9:87:1b:df:
         c6:bb:c9:e0:f8:37:ed:58:37:51:9e:7f:c9:04:e3:10:e7:87:
         ea:a1:dc:e2:ea:12:15:92:bc:db:8d:11:2d:a4:ed:f6:f3:ad:
         d9:97:fc:35:af:da:9f:9d:35:4b:6b:c6:d3:88:d9:35:38:60:
         c2:37:49:e3:54:59:ea:bc:9f:15:bf:7c:8d:be:9c:68:fb:bd:
         26:4b:5e:1e:e3:dc:e2:e8:d5:d7:6d:89:7d:c4:48:47:b8:cb:
         05:cb:79:70:61:b6:86:e2:fa:eb:1e:a3:f2:c2:31:35:93:63:
         54:aa:2b:6e:29:95:1b:8e:9e:65:6f:a1:c7:e2:e7:ef:3f:7d:
         49:14:25:5b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMy0EJA6X0Rgc+lcfcG7hP2Lh3CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI1NDJEMDREN0IwODY2ODlDNkUzRkU3RDc3RjI3MDYx
ODI0RDQ3ODAeFw0yNTEyMTUxODU0MTZaFw0yNjEyMTQxODU5MTZaMDMxMTAvBgNV
BAMTKEE3MTY3RDk2NjBDRUNCNTAyNzkzMTRCRTNBRUFCNEIzODY0MjA0N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtW4K7uHJXqMjsYqljLmNp1jf1
MFZLpBU8KjOdH7GtOqTA9YbhWpIrnTTjZuiojs7E39zelR5UcFH2BqO5mH0WdhvT
VxN14PyqeNrttanK76ucMjGmmMaFhI00O4FboOOPXCxdLG8BvXRipvSHz/fAvI+u
MEwmBiBZx/l5vBqvr07NZkWcdMbYEG8VctSElClIjc68Nk6hncFCVlGGJToisHiB
4zNFTy5qRyX3EIoWTOwwty1JxYBXE4z+rhPBYKJepGpRbxQuecvjXRPGlt5vDUBN
EOpP7wbC8pWPF3O1hqI9PkFKbvKfKcgUV68uSC+rTp5ySeHVtPiFSxZHTsCpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpxZ9lmDOy1AnkxS+Ouq0s4ZCBHswHwYDVR0j
BBgwFoAUYlQtBNewhmicbj/n138nBhgk1HgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpLcWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0
OWMvMS82MjU0MkQwNEQ3QjA4NjY4OUM2RTNGRTdENzdGMjcwNjE4MjRENDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNTQyRDA0RDdCMDg2Njg5
QzZFM0ZFN0Q3N0YyNzA2MTgyNEQ0NzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzEv
MzIzODMwMzQzYTM1NjE2MzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARawAAwDQYJKoZIhvcNAQELBQADggEBAFV5lG4G
eAXfqpAUk/VLfJK7oG/NY/8PV0HMM9mxrh6RLpJbIqTv1nniwk2HDttDgAiObMxg
UO5X4K1rXncpnmFFguBkFrrGm8Es3i9C43TW386c17cdkOsamOAiQ/4jCt6Zvx8/
YNVAUR/KoSl5of/ywxOVCR+9mFSduYcb38a7yeD4N+1YN1Gef8kE4xDnh+qh3OLq
EhWSvNuNES2k7fbzrdmX/DWv2p+dNUtrxtOI2TU4YMI3SeNUWeq8nxW/fI2+nGj7
vSZLXh7j3OLo1ddtiX3ESEe4ywXLeXBhtobi+useo/LCMTWTY1SqK24plRuOnmVv
ocfi5+8/fUkUJVs=
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:59:04 2025 by rpki-client