This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33352d3335203d3e20323638373933.roa
File:                     323830343a356163303a3a2f33352d3335203d3e20323638373933.roa (raw, json)
Hash identifier:          1sqvB+iB6hTJE87SksNFqWAkmx6RLo7vB2DUPRbT7ow=
Subject key identifier:   A0:75:7B:24:C0:2E:65:A6:62:60:EF:0F:E9:09:D2:2C:4E:91:76:FA
Certificate issuer:       /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial:       5A2C143A3508F52FF3C6E190BFCF81D5E027861E
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33352d3335203d3e20323638373933.roa
Signing time:             Mon 15 Dec 2025 18:59:16 +0000
ROA not before:           Mon 15 Dec 2025 18:54:16 +0000
ROA not after:            Mon 14 Dec 2026 18:59:16 +0000
asID:                     268793
IP address blocks:        2804:5ac0::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
                          rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 11:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2c:14:3a:35:08:f5:2f:f3:c6:e1:90:bf:cf:81:d5:e0:27:86:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Validity
            Not Before: Dec 15 18:54:16 2025 GMT
            Not After : Dec 14 18:59:16 2026 GMT
        Subject: CN=A0757B24C02E65A66260EF0FE909D22C4E9176FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:8f:27:57:35:b0:3d:95:23:2e:b2:e5:4a:
                    0a:b9:c2:d5:05:ac:f4:63:eb:aa:e2:27:80:06:6d:
                    a8:f2:06:82:b3:1f:05:2b:f2:c7:da:67:ca:89:50:
                    e1:74:23:c5:c2:54:4f:83:f7:6d:d6:20:41:b0:d5:
                    0c:9d:f2:20:1c:e0:db:b2:67:6d:c8:57:14:41:f8:
                    2d:cc:47:4e:94:29:b5:d2:c1:5e:ab:b1:55:66:ab:
                    26:c5:58:49:10:77:fb:7b:06:63:69:03:6e:bf:3b:
                    62:16:d8:94:1a:47:b8:55:2e:a4:07:6b:44:d5:d1:
                    d9:29:f4:bc:fe:d9:06:ae:fe:cb:a0:aa:9b:5c:5c:
                    09:f7:ae:78:26:7b:05:e3:3e:fd:48:03:6a:e6:51:
                    6b:70:8b:11:37:d8:a9:d4:46:27:7c:32:70:e9:e9:
                    23:26:f5:72:4c:17:62:5a:d0:64:c2:3b:a8:27:3c:
                    9f:a1:7c:0f:bc:1b:ab:af:9c:a4:b6:8b:75:0b:a4:
                    70:32:0b:79:45:38:b4:16:26:47:29:34:06:00:18:
                    b9:cd:70:47:24:f9:e3:ec:6a:e0:5e:ca:55:9c:30:
                    ec:74:f0:ed:70:e7:a4:5f:9d:1e:c2:d9:eb:1d:ec:
                    7c:b8:a7:2e:20:f3:13:ff:65:42:49:87:27:8d:61:
                    2e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:75:7B:24:C0:2E:65:A6:62:60:EF:0F:E9:09:D2:2C:4E:91:76:FA
            X509v3 Authority Key Identifier:
                keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33352d3335203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac0::/35

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:10:0c:2a:f1:af:9b:2c:8f:17:cb:15:ff:5c:36:00:50:
         fd:88:52:19:84:1c:d5:38:02:eb:97:7c:ce:f2:79:dd:5e:58:
         07:dd:48:c4:21:04:47:7a:a6:a3:e9:67:d9:8c:7c:c2:f6:05:
         dd:16:d0:e8:dd:07:ea:e4:17:f9:0c:22:ca:05:65:0e:6d:c5:
         39:30:9b:d4:8a:9f:ab:bd:25:10:af:28:f9:7d:36:56:a4:21:
         5e:22:ac:68:9a:ce:b5:60:64:31:16:e3:57:df:40:a2:58:51:
         34:52:ed:28:71:d0:bf:d1:c4:5d:59:de:62:8a:f2:3f:a2:31:
         3d:8f:f7:97:e4:f5:bd:a7:fe:b5:5b:d4:17:e5:47:d2:e6:86:
         d5:3a:11:d4:db:7a:8d:10:9d:0e:c4:6b:d2:db:11:7e:0a:33:
         61:f0:82:ed:5b:5e:e7:6a:dc:0a:0d:39:55:d5:c6:e6:02:82:
         aa:66:00:56:47:1b:4b:38:18:a3:c2:72:77:63:5e:b4:7b:e2:
         2a:7c:77:4b:7f:22:87:87:4e:6c:93:ef:28:67:82:2c:2b:31:
         c1:cf:7e:2e:ea:b1:9f:02:a8:cc:fc:27:cb:37:0a:50:ce:52:
         5f:85:62:df:b8:2b:3e:5d:db:b2:85:59:e7:f0:3d:fd:2b:59:
         d7:c1:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:16:27 2025 by rpki-client