This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          seo5AyP8pZXGXJNh1icScd67u2tKSyZldsov4qju+nI=
Subject key identifier:   7B:20:36:2C:73:CD:5F:5B:A8:57:42:4A:BB:A2:41:B9:FD:A2:5A:20
Certificate issuer:       /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Certificate serial:       59A5A271D9999D5D09BB576C2636845A3B7FECED
Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 09 Dec 2025 23:47:00 +0000
ROA not before:           Tue 09 Dec 2025 23:42:00 +0000
ROA not after:            Tue 08 Dec 2026 23:47:00 +0000
asID:                     267991
IP address blocks:        2804:5654:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 04:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a5:a2:71:d9:99:9d:5d:09:bb:57:6c:26:36:84:5a:3b:7f:ec:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
        Validity
            Not Before: Dec  9 23:42:00 2025 GMT
            Not After : Dec  8 23:47:00 2026 GMT
        Subject: CN=7B20362C73CD5F5BA857424ABBA241B9FDA25A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:90:08:f5:c8:6a:44:c1:40:e9:29:59:4b:
                    a0:9f:b5:bf:38:34:c0:4a:cc:43:c5:b3:d3:b0:87:
                    a1:96:c0:7b:77:ec:1b:f4:82:7f:f9:92:6e:87:19:
                    89:b0:61:be:81:87:db:0e:03:ea:1d:61:1c:c3:f0:
                    d4:c9:24:d4:8e:6e:06:64:59:1f:90:36:78:a8:26:
                    ba:83:a9:cb:c0:02:7b:4c:b1:8e:71:85:39:fc:29:
                    57:23:48:4d:b0:f4:b8:1e:5b:b7:fe:eb:d1:1a:1e:
                    86:c4:02:c0:90:15:0c:86:f1:77:8c:15:f8:14:55:
                    a1:a0:05:4d:44:f2:a7:89:f1:dd:14:3b:ef:38:91:
                    f2:fc:c6:04:df:e2:21:98:99:1d:44:ba:86:80:8c:
                    d8:68:91:72:21:88:0f:60:75:b9:91:68:7a:fd:24:
                    84:5b:70:eb:bd:8c:22:6d:d3:38:eb:a5:00:47:f8:
                    2e:aa:4b:d4:4b:56:09:b7:49:c5:dd:aa:5e:5e:08:
                    5d:c8:e7:87:04:df:ef:2d:4f:96:b0:79:23:dc:1a:
                    23:2f:26:c6:0b:c2:ca:3e:e0:40:ab:1f:b7:03:7a:
                    c3:a8:41:1b:93:32:d6:09:64:48:6a:95:34:eb:fd:
                    43:d3:ab:7a:97:a5:2e:cd:5b:5d:43:6b:a8:85:ba:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:20:36:2C:73:CD:5F:5B:A8:57:42:4A:BB:A2:41:B9:FD:A2:5A:20
            X509v3 Authority Key Identifier:
                keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:ec:d2:ac:34:6d:2b:e3:1e:7f:a7:0a:c0:3c:db:ab:64:
         d7:c4:8a:6f:1c:ad:89:30:18:47:42:de:4f:29:b0:ef:5f:05:
         9c:15:ba:bd:51:b5:80:79:b4:b2:80:a6:a1:a4:bd:dc:dd:1b:
         0a:c9:f0:21:b6:f3:55:ad:24:3a:84:be:14:26:25:77:d1:f8:
         2a:e9:83:c9:99:e1:3d:66:24:92:df:90:6f:5a:13:c6:5f:fe:
         97:6b:64:37:a5:9e:7a:97:3f:24:c2:49:e0:3e:b0:6a:2b:33:
         93:23:a6:ad:3f:17:ff:7a:d7:7f:ef:9f:9b:88:48:86:9b:a3:
         58:1a:e5:4c:e2:4d:f7:7b:34:92:57:aa:e6:37:5c:d6:a6:47:
         d0:ac:25:db:9d:d6:35:d6:47:70:86:c8:72:a1:0b:30:d6:d4:
         a7:c0:b8:ec:33:b4:78:78:ed:ac:fe:ec:10:88:08:29:27:a0:
         43:68:e2:e1:f1:4c:07:9a:61:e9:9a:20:ce:8c:5c:77:ef:52:
         1f:96:4f:48:45:aa:27:94:8c:18:a1:46:80:13:27:9b:8d:5a:
         48:c4:09:f0:bc:49:95:ed:72:5c:79:89:9b:d2:a4:61:d4:c2:
         ce:da:3e:20:2a:b0:28:c2:3e:21:d7:ef:f0:59:00:02:b6:4a:
         18:4e:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:51:45 2025 by rpki-client