This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/323830343a373134343a3a2f33322d3332203d3e20323730373738.roa
File:                     323830343a373134343a3a2f33322d3332203d3e20323730373738.roa (raw, json)
Hash identifier:          dJ9e6TA1wPc8QXZc0DbPmxImZU0F1pq49RZgiYFID9Q=
Subject key identifier:   1D:58:50:3B:66:EA:50:1E:F7:4A:F7:BD:69:83:DB:95:43:40:26:91
Certificate issuer:       /CN=BAD5AE274E24DCF0BAD70F892E9A842029594116
Certificate serial:       2479B0EBAAADB709F95F72ACA8D6691884ED8B92
Authority key identifier: BA:D5:AE:27:4E:24:DC:F0:BA:D7:0F:89:2E:9A:84:20:29:59:41:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD5AE274E24DCF0BAD70F892E9A842029594116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/323830343a373134343a3a2f33322d3332203d3e20323730373738.roa
Signing time:             Sun 07 Dec 2025 16:33:50 +0000
ROA not before:           Sun 07 Dec 2025 16:28:50 +0000
ROA not after:            Sun 06 Dec 2026 16:33:50 +0000
asID:                     270778
IP address blocks:        2804:7144::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/BAD5AE274E24DCF0BAD70F892E9A842029594116.crl
                          rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/BAD5AE274E24DCF0BAD70F892E9A842029594116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD5AE274E24DCF0BAD70F892E9A842029594116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:79:b0:eb:aa:ad:b7:09:f9:5f:72:ac:a8:d6:69:18:84:ed:8b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD5AE274E24DCF0BAD70F892E9A842029594116
        Validity
            Not Before: Dec  7 16:28:50 2025 GMT
            Not After : Dec  6 16:33:50 2026 GMT
        Subject: CN=1D58503B66EA501EF74AF7BD6983DB9543402691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:3f:e4:b0:6c:b7:8e:de:7f:bd:db:50:ac:
                    06:59:7a:d8:bc:4a:60:eb:d3:11:ce:63:7c:b2:a0:
                    c9:f3:af:56:d4:1c:92:15:b2:1b:94:2c:c2:3c:df:
                    5c:4b:31:08:a2:20:7a:24:64:90:f4:8e:32:ef:5c:
                    b6:0a:01:9b:85:e4:f4:7b:95:41:30:70:af:aa:e1:
                    1e:fe:c0:1e:bf:e7:45:19:27:0c:87:74:fe:76:0f:
                    04:3e:fd:2a:bc:62:48:10:99:0b:b1:b6:12:c6:63:
                    b4:b2:0b:ac:aa:85:c7:d0:77:91:7c:8a:1c:c0:6c:
                    21:d4:af:c8:00:cf:c6:cf:12:3c:66:75:02:f2:71:
                    78:4e:2e:d6:71:d8:13:a0:7f:64:b9:fa:70:bd:e6:
                    02:8d:d9:a4:8c:e9:ee:fb:29:5f:19:b6:61:d5:44:
                    14:92:97:20:b7:b7:f4:9a:a5:2e:7b:49:b3:ed:37:
                    d6:8f:66:d9:a9:2d:56:ae:a3:95:03:96:58:3c:19:
                    33:49:78:f7:66:d9:3f:4e:67:39:a1:88:14:8f:ec:
                    79:4f:ee:c2:e7:cd:f4:a1:df:76:c1:f7:4d:a5:15:
                    ec:ab:8b:dc:e3:9d:52:03:9d:a4:4a:67:a7:4a:06:
                    00:04:7f:b4:9c:72:73:49:61:6e:db:e7:95:5c:e4:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:58:50:3B:66:EA:50:1E:F7:4A:F7:BD:69:83:DB:95:43:40:26:91
            X509v3 Authority Key Identifier:
                keyid:BA:D5:AE:27:4E:24:DC:F0:BA:D7:0F:89:2E:9A:84:20:29:59:41:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/BAD5AE274E24DCF0BAD70F892E9A842029594116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD5AE274E24DCF0BAD70F892E9A842029594116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/323830343a373134343a3a2f33322d3332203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7144::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:b4:1a:fa:aa:46:2f:f0:60:5b:80:a0:1e:16:db:9a:c3:
         6f:78:5e:9d:4a:9c:6e:51:de:e5:c3:a5:26:0d:5d:b9:66:5f:
         e0:db:f0:07:66:d8:de:86:45:85:6f:bc:2d:9f:38:89:dc:ec:
         31:ef:46:f7:da:0c:07:61:58:a7:2f:f9:8a:cf:ec:96:b3:3e:
         0a:2a:10:9a:7d:56:90:aa:88:bd:fc:c1:80:51:db:74:3e:bd:
         5a:e0:4f:f1:1c:68:6b:e7:ba:94:3a:f0:c6:7e:34:8c:fc:38:
         9b:59:16:5a:a0:4a:2c:7c:06:bc:6e:c3:5a:59:5e:77:86:41:
         71:ad:f9:8d:7a:ea:70:8f:98:f0:b1:37:6b:21:47:8f:75:6b:
         e7:a7:d7:6c:f1:78:78:94:53:01:b2:39:bc:85:9d:cd:bd:03:
         32:d8:f3:c8:f1:0b:d5:0e:a6:23:d4:79:24:98:fd:67:49:1a:
         73:a2:ed:60:bc:ab:9b:21:42:92:e6:4e:1e:50:93:9d:81:d3:
         57:e1:41:05:9a:1b:cf:f7:d1:88:46:b1:63:89:b5:68:8b:21:
         7e:b5:ea:63:b3:25:3c:c2:b3:63:98:16:3c:4f:f6:a6:51:bc:
         9a:9d:71:82:22:c1:d2:38:4b:ac:bc:27:6a:ff:91:8e:d9:2f:
         f2:4f:2f:ec
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJHmw66qttwn5X3KsqNZpGITti5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFENUFFMjc0RTI0RENGMEJBRDcwRjg5MkU5QTg0MjAy
OTU5NDExNjAeFw0yNTEyMDcxNjI4NTBaFw0yNjEyMDYxNjMzNTBaMDMxMTAvBgNV
BAMTKDFENTg1MDNCNjZFQTUwMUVGNzRBRjdCRDY5ODNEQjk1NDM0MDI2OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBD/ksGy3jt5/vdtQrAZZeti8
SmDr0xHOY3yyoMnzr1bUHJIVshuULMI831xLMQiiIHokZJD0jjLvXLYKAZuF5PR7
lUEwcK+q4R7+wB6/50UZJwyHdP52DwQ+/Sq8YkgQmQuxthLGY7SyC6yqhcfQd5F8
ihzAbCHUr8gAz8bPEjxmdQLycXhOLtZx2BOgf2S5+nC95gKN2aSM6e77KV8ZtmHV
RBSSlyC3t/SapS57SbPtN9aPZtmpLVauo5UDllg8GTNJePdm2T9OZzmhiBSP7HlP
7sLnzfSh33bB902lFeyri9zjnVIDnaRKZ6dKBgAEf7SccnNJYW7b55Vc5NN3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHVhQO2bqUB73Sve9aYPblUNAJpEwHwYDVR0j
BBgwFoAUutWuJ04k3PC61w+JLpqEIClZQRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE1mM0FvTEdteG9odVR1TnBTSkw1cVJXTFdZZ2dYNGV3RGRXUmZuc1ZC
Rm0vMC9CQUQ1QUUyNzRFMjREQ0YwQkFENzBGODkyRTlBODQyMDI5NTk0MTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDVBRTI3NEUyNERDRjBC
QUQ3MEY4OTJFOUE4NDIwMjk1OTQxMTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RNZjNBb0xHbXhvaHVUdU5wU0pMNXFSV0xXWWdnWDRld0RkV1JmbnNWQkZtLzAv
MzIzODMwMzQzYTM3MzEzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzczNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARxRDANBgkqhkiG9w0BAQsFAAOCAQEAqLG0Gvqq
Ri/wYFuAoB4W25rDb3henUqcblHe5cOlJg1duWZf4NvwB2bY3oZFhW+8LZ84idzs
Me9G99oMB2FYpy/5is/slrM+CioQmn1WkKqIvfzBgFHbdD69WuBP8Rxoa+e6lDrw
xn40jPw4m1kWWqBKLHwGvG7DWlled4ZBca35jXrqcI+Y8LE3ayFHj3Vr56fXbPF4
eJRTAbI5vIWdzb0DMtjzyPEL1Q6mI9R5JJj9Z0kac6LtYLyrmyFCkuZOHlCTnYHT
V+FBBZobz/fRiEaxY4m1aIshfrXqY7MlPMKzY5gWPE/2plG8mp1xgiLB0jhLrLwn
av+Rjtkv8k8v7A==
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:58:28 2025 by rpki-client