This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a343030303a3a2f33342d3334203d3e20323634393939.roa
File:                     323830343a333133303a343030303a3a2f33342d3334203d3e20323634393939.roa (raw, json)
Hash identifier:          NCBuuPblEVrxIrkYfyjEwG2xPTHXlF5aTi+HV5oeNdo=
Subject key identifier:   FB:94:57:CC:6C:35:2E:C6:62:85:DD:B1:6A:68:37:AE:41:41:DB:4A
Certificate issuer:       /CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Certificate serial:       3EA27DE509BA939F547A3EAB3D0EA407631C341F
Authority key identifier: 80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a343030303a3a2f33342d3334203d3e20323634393939.roa
Signing time:             Tue 09 Dec 2025 16:52:30 +0000
ROA not before:           Tue 09 Dec 2025 16:47:30 +0000
ROA not after:            Tue 08 Dec 2026 16:52:30 +0000
asID:                     264999
IP address blocks:        2804:3130:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 11:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a2:7d:e5:09:ba:93:9f:54:7a:3e:ab:3d:0e:a4:07:63:1c:34:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
        Validity
            Not Before: Dec  9 16:47:30 2025 GMT
            Not After : Dec  8 16:52:30 2026 GMT
        Subject: CN=FB9457CC6C352EC66285DDB16A6837AE4141DB4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:56:b4:de:26:45:37:0f:0f:16:1b:f3:21:d3:
                    44:68:1f:01:73:c7:b3:99:15:bc:ea:db:d4:30:0f:
                    44:a5:fb:15:2d:79:6f:d2:4b:44:19:34:69:bb:8d:
                    33:21:ed:18:c6:63:07:7a:09:fb:a5:73:e7:59:9a:
                    61:bc:2c:19:6c:18:fd:55:06:0b:ec:a9:1e:68:38:
                    e4:78:1e:df:1b:f9:c8:e9:18:d9:2d:79:62:ed:53:
                    9e:ba:6c:76:99:12:0b:44:ee:1b:82:cd:96:30:f0:
                    d7:40:d8:c5:ce:37:23:01:5b:9a:49:2c:58:3c:97:
                    0c:52:c7:e1:1c:ff:a3:01:3e:46:94:2d:65:64:fb:
                    24:37:44:0d:dc:bc:20:48:22:ab:d3:2c:13:b2:3f:
                    89:4e:1b:5b:e6:c0:1e:d7:f8:3f:04:83:5e:b7:49:
                    cf:8b:46:54:8c:df:d5:cf:bf:99:82:11:8c:be:7e:
                    54:72:72:3c:d5:d6:63:1f:3c:6a:a9:70:0e:98:a7:
                    9b:16:74:a3:5b:b6:cf:f2:4a:35:3b:ae:c5:b3:ae:
                    83:ff:94:ed:f9:5f:5b:cd:f3:40:ac:04:36:44:38:
                    bf:3e:c8:41:ed:55:54:15:e5:dc:72:7c:56:be:54:
                    cd:ef:af:41:59:d9:e9:43:87:95:42:aa:09:6c:74:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:94:57:CC:6C:35:2E:C6:62:85:DD:B1:6A:68:37:AE:41:41:DB:4A
            X509v3 Authority Key Identifier:
                keyid:80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a343030303a3a2f33342d3334203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3130:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:24:a5:20:d0:6e:80:3b:73:37:59:a3:b0:97:d2:5c:98:37:
         3d:f2:e1:9e:0c:0f:63:3f:3c:0b:5c:f9:b0:37:dc:f9:ce:a9:
         90:e9:37:6d:e5:f3:74:58:e7:07:b7:ae:74:d3:48:21:f9:b2:
         57:04:59:67:02:07:25:14:c8:c8:b8:19:9d:0e:33:80:c1:09:
         d8:cb:6f:ef:d6:de:31:62:32:be:df:1e:41:fb:c0:41:b8:af:
         e5:0a:4e:76:80:c4:6d:e0:73:6d:29:10:17:bb:d6:d9:5c:85:
         b1:f7:1c:69:0f:1a:dd:db:4d:73:14:b8:39:9b:cb:39:d7:8d:
         e0:02:ae:3a:c2:7c:0f:08:a5:05:1e:e1:f4:46:1a:5f:03:6f:
         fb:8c:63:e4:11:a0:fa:68:fa:06:e4:7b:76:73:ea:fd:c5:85:
         8a:00:f3:87:cc:44:f5:1e:b0:57:eb:98:03:9c:b8:b8:12:d6:
         f9:98:b5:fb:80:79:cc:ed:51:50:97:b1:98:43:46:c0:d0:6f:
         25:68:4b:41:f8:53:2c:58:6b:f5:3c:dc:cb:75:f4:b3:fe:f7:
         b1:e0:20:cc:52:87:a6:85:78:0c:79:ec:95:56:3b:89:ab:fc:
         46:8e:55:ea:65:1f:d9:67:97:29:fb:36:cc:34:e6:53:29:b6:
         8e:b1:10:b3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPqJ95Qm6k59Uej6rPQ6kB2McNB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA2OUVFQURDRUU5REQ5MkIxOTVFNTBGOUZDQjM1QTAz
NjI2RDlDQzAeFw0yNTEyMDkxNjQ3MzBaFw0yNjEyMDgxNjUyMzBaMDMxMTAvBgNV
BAMTKEZCOTQ1N0NDNkMzNTJFQzY2Mjg1RERCMTZBNjgzN0FFNDE0MURCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiVrTeJkU3Dw8WG/Mh00RoHwFz
x7OZFbzq29QwD0Sl+xUteW/SS0QZNGm7jTMh7RjGYwd6Cfulc+dZmmG8LBlsGP1V
BgvsqR5oOOR4Ht8b+cjpGNkteWLtU566bHaZEgtE7huCzZYw8NdA2MXONyMBW5pJ
LFg8lwxSx+Ec/6MBPkaULWVk+yQ3RA3cvCBIIqvTLBOyP4lOG1vmwB7X+D8Eg163
Sc+LRlSM39XPv5mCEYy+flRycjzV1mMfPGqpcA6Yp5sWdKNbts/ySjU7rsWzroP/
lO35X1vN80CsBDZEOL8+yEHtVVQV5dxyfFa+VM3vr0FZ2elDh5VCqglsdNmZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+5RXzGw1LsZihd2xamg3rkFB20owHwYDVR0j
BBgwFoAUgGnurc7p3ZKxleUPn8s1oDYm2cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWcxamdLMkVaNXp4b0dzRk1aRGttZVJlb2FhaVl3RW5xeDVyd1BBUXZN
eE4vMC84MDY5RUVBRENFRTlERDkyQjE5NUU1MEY5RkNCMzVBMDM2MjZEOUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwNjlFRUFEQ0VFOUREOTJC
MTk1RTUwRjlGQ0IzNUEwMzYyNkQ5Q0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VnMWpnSzJFWjV6eG9Hc0ZNWkRrbWVSZW9hYWlZd0VucXg1cndQQVF2TXhOLzAv
MzIzODMwMzQzYTMzMzEzMzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM5MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMTBAMA0GCSqGSIb3DQEBCwUA
A4IBAQB0JKUg0G6AO3M3WaOwl9JcmDc98uGeDA9jPzwLXPmwN9z5zqmQ6Tdt5fN0
WOcHt65000gh+bJXBFlnAgclFMjIuBmdDjOAwQnYy2/v1t4xYjK+3x5B+8BBuK/l
Ck52gMRt4HNtKRAXu9bZXIWx9xxpDxrd201zFLg5m8s5143gAq46wnwPCKUFHuH0
RhpfA2/7jGPkEaD6aPoG5Ht2c+r9xYWKAPOHzET1HrBX65gDnLi4Etb5mLX7gHnM
7VFQl7GYQ0bA0G8laEtB+FMsWGv1PNzLdfSz/vex4CDMUoemhXgMeeyVVjuJq/xG
jlXqZR/ZZ5cp+zbMNOZTKbaOsRCz
-----END CERTIFICATE-----
Generated at Tue Dec 23 16:09:55 2025 by rpki-client