This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          Wxb5t2KAfHXdPnIG7ApkkwmhhjXpexcJsIQktIG+YLQ=
Subject key identifier:   26:A8:31:F5:FC:85:69:AE:01:08:20:A8:C0:B9:83:74:57:7B:C2:60
Certificate issuer:       /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Certificate serial:       7F8482EC1BF23555D789F333171AEA10E3B882B3
Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 09 Dec 2025 23:46:57 +0000
ROA not before:           Tue 09 Dec 2025 23:41:57 +0000
ROA not after:            Tue 08 Dec 2026 23:46:57 +0000
asID:                     267991
IP address blocks:        2804:5654::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 04:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:84:82:ec:1b:f2:35:55:d7:89:f3:33:17:1a:ea:10:e3:b8:82:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
        Validity
            Not Before: Dec  9 23:41:57 2025 GMT
            Not After : Dec  8 23:46:57 2026 GMT
        Subject: CN=26A831F5FC8569AE010820A8C0B98374577BC260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ef:42:c2:2b:41:80:9e:79:7a:9b:b8:bf:22:
                    76:34:b1:0d:32:65:25:92:b0:74:4d:6b:31:ef:51:
                    14:bc:60:12:c8:b6:e7:fa:ad:ce:cd:08:72:49:5d:
                    14:88:f3:fa:e1:81:06:ad:9f:bd:d0:59:59:a2:35:
                    0b:cc:78:9e:7a:83:d3:f8:d8:6a:f4:8f:94:c1:69:
                    3c:a2:f8:5d:32:f3:23:20:eb:c9:8b:23:41:48:bd:
                    3c:7f:65:4e:e6:c9:0f:be:2e:1d:9a:dd:23:ce:fa:
                    9e:d5:76:60:b6:92:33:eb:b3:7d:47:26:16:51:99:
                    cd:59:01:7e:ef:a9:35:fe:dc:27:fa:ad:94:d3:98:
                    b6:65:e6:76:94:5f:f3:d7:9a:50:cf:f6:8c:e3:1b:
                    bb:6e:3a:9d:a1:19:74:70:c6:2f:da:de:bc:7f:0d:
                    0b:9a:5b:b6:38:2e:60:3e:1e:2a:ed:a6:a7:f0:e6:
                    e7:6c:ed:4a:94:96:43:f8:d7:7a:f8:5f:f8:cd:57:
                    70:ac:72:e9:69:4b:8a:05:f1:42:e7:04:1a:17:c8:
                    a6:fd:26:bb:33:45:26:c4:1c:7d:6a:ed:16:c1:34:
                    be:e6:63:43:43:49:6b:e1:3c:4a:96:5c:76:e9:e4:
                    11:e4:8e:49:e0:bc:1c:58:9b:84:09:91:e6:45:38:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A8:31:F5:FC:85:69:AE:01:08:20:A8:C0:B9:83:74:57:7B:C2:60
            X509v3 Authority Key Identifier:
                keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:4a:92:fb:07:c8:86:2d:48:f9:38:df:1b:f5:a0:ea:01:6b:
         78:b2:f0:49:4e:25:8e:b1:0d:30:34:68:4c:5a:0e:0a:b2:cd:
         9e:7d:34:7d:51:3c:c0:70:dc:cb:28:fc:b1:42:cb:8a:6c:83:
         80:40:bf:2f:8a:25:72:f6:12:dc:b3:69:29:e1:21:74:aa:28:
         59:18:ad:14:d9:eb:6a:93:13:61:23:a3:3e:70:e7:c0:08:fc:
         8f:17:0d:db:f9:d8:20:55:2c:18:79:41:68:3d:3a:d0:43:15:
         52:d9:12:6a:37:05:6f:d2:22:d4:39:0c:26:9b:00:7a:64:fc:
         50:40:bb:9b:55:7e:55:c9:c8:c9:4c:72:54:d8:17:3f:d4:b2:
         25:8b:f5:6d:19:96:75:d8:28:c6:32:17:53:4b:31:fb:f4:5b:
         68:12:2d:e2:a3:f7:b9:ea:33:fb:77:db:17:6e:62:a7:fe:d3:
         1e:98:4b:71:d8:b8:4f:95:d7:1b:b6:88:88:8a:49:f3:29:9d:
         25:4e:85:aa:9e:6f:92:7d:44:3d:b7:5d:c1:9c:a7:c4:5d:ca:
         61:b0:fd:fe:c3:9c:18:5b:e6:a3:d1:73:c3:0c:85:59:9b:d3:
         71:b6:bf:b2:bf:22:c5:b5:52:f4:1b:11:4b:b2:3c:51:47:60:
         dd:a2:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:51:51 2025 by rpki-client