This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a633030303a3a2f33342d3334203d3e20323634393939.roa
File:                     323830343a333133303a633030303a3a2f33342d3334203d3e20323634393939.roa (raw, json)
Hash identifier:          OAmaALNKs/JLcC0f7KpXIIakzC+B1Gp5pkD5fCw785s=
Subject key identifier:   60:14:6B:FA:6A:B7:5B:7B:58:89:36:46:16:82:F4:F3:5E:EF:CF:13
Certificate issuer:       /CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Certificate serial:       39C55658CE3674728EEEF61B61096D055A8598AF
Authority key identifier: 80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a633030303a3a2f33342d3334203d3e20323634393939.roa
Signing time:             Tue 09 Dec 2025 16:52:46 +0000
ROA not before:           Tue 09 Dec 2025 16:47:46 +0000
ROA not after:            Tue 08 Dec 2026 16:52:46 +0000
asID:                     264999
IP address blocks:        2804:3130:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 11:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c5:56:58:ce:36:74:72:8e:ee:f6:1b:61:09:6d:05:5a:85:98:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
        Validity
            Not Before: Dec  9 16:47:46 2025 GMT
            Not After : Dec  8 16:52:46 2026 GMT
        Subject: CN=60146BFA6AB75B7B588936461682F4F35EEFCF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8d:d8:b9:d0:f9:a3:82:82:ba:48:c2:7e:4d:
                    52:04:d0:bd:94:63:fd:51:af:fc:e0:2f:dd:26:96:
                    b8:be:69:47:f4:77:c9:6d:99:57:19:e1:78:c1:81:
                    e0:fb:70:4e:77:09:8b:9d:dc:96:e4:95:1e:20:47:
                    d6:1f:09:a4:48:e6:3d:1c:80:53:30:b8:5a:47:06:
                    c1:b3:9d:c1:5f:ec:f5:dd:2d:64:80:08:f8:68:0c:
                    8c:b5:62:0d:97:83:59:89:0e:31:e6:72:5b:95:30:
                    0a:6e:53:5f:66:13:d8:46:4c:1a:c7:2d:da:a7:fc:
                    10:b0:be:8b:96:18:37:00:e5:f3:62:47:e7:3f:02:
                    93:79:4f:df:33:fe:b0:b5:e0:b7:05:79:c1:67:a7:
                    ae:23:64:6f:29:50:d5:19:08:ff:0d:44:0d:4f:fb:
                    50:d8:a9:2e:6d:b7:ad:dc:4d:76:86:8a:58:5c:36:
                    16:4b:8d:4a:94:80:c4:49:c0:bd:ef:af:58:4a:81:
                    5d:74:8b:b5:19:06:5a:33:c3:41:9c:43:87:5b:ac:
                    89:b3:21:81:d9:eb:33:52:ed:75:e5:f5:80:f1:ca:
                    49:e4:3c:fd:45:37:54:69:52:24:aa:f3:3b:3f:17:
                    96:f0:84:fa:35:9b:7d:d3:44:ad:c0:3d:cf:7f:b4:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:14:6B:FA:6A:B7:5B:7B:58:89:36:46:16:82:F4:F3:5E:EF:CF:13
            X509v3 Authority Key Identifier:
                keyid:80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a633030303a3a2f33342d3334203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3130:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:c5:62:c9:78:f1:72:05:d1:35:19:f8:de:13:e1:43:d7:af:
         64:0c:3c:26:97:67:50:07:66:73:81:19:24:86:32:54:b1:6e:
         d7:04:1e:0f:22:55:72:95:27:d9:fc:7c:c5:7f:ca:7b:a4:54:
         e8:f6:db:e1:28:07:ca:43:ff:6e:82:06:2c:30:17:73:cd:99:
         e7:0e:72:be:60:60:c2:27:76:74:4d:15:f7:b7:de:0f:c7:7d:
         91:c3:b8:34:8f:d9:ec:19:b6:bf:23:80:12:96:1f:50:27:7f:
         dd:fc:24:51:3a:11:91:cb:76:24:e4:f3:b6:63:a4:fd:12:76:
         80:07:fb:4b:e0:54:1c:50:ee:ee:a4:f9:2c:dc:1e:fa:d4:d2:
         35:fd:fa:32:82:a6:75:63:00:bb:9b:d3:01:cf:27:2f:6e:0d:
         ef:d5:32:7c:ef:08:29:31:ad:a7:f4:f4:9c:2b:45:75:94:de:
         67:51:07:72:8f:71:aa:6b:43:d8:73:6c:5c:d7:a1:23:ae:9a:
         e9:ab:76:1a:7d:77:ab:8b:c1:0d:f1:e0:09:75:1e:a8:fa:1b:
         f1:5d:51:78:76:80:01:ef:86:79:00:fc:aa:90:b5:76:62:98:
         73:03:a8:dd:40:3a:e8:ee:aa:29:84:25:10:3b:fc:8b:c2:32:
         17:ff:db:13
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOcVWWM42dHKO7vYbYQltBVqFmK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA2OUVFQURDRUU5REQ5MkIxOTVFNTBGOUZDQjM1QTAz
NjI2RDlDQzAeFw0yNTEyMDkxNjQ3NDZaFw0yNjEyMDgxNjUyNDZaMDMxMTAvBgNV
BAMTKDYwMTQ2QkZBNkFCNzVCN0I1ODg5MzY0NjE2ODJGNEYzNUVFRkNGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgjdi50PmjgoK6SMJ+TVIE0L2U
Y/1Rr/zgL90mlri+aUf0d8ltmVcZ4XjBgeD7cE53CYud3JbklR4gR9YfCaRI5j0c
gFMwuFpHBsGzncFf7PXdLWSACPhoDIy1Yg2Xg1mJDjHmcluVMApuU19mE9hGTBrH
Ldqn/BCwvouWGDcA5fNiR+c/ApN5T98z/rC14LcFecFnp64jZG8pUNUZCP8NRA1P
+1DYqS5tt63cTXaGilhcNhZLjUqUgMRJwL3vr1hKgV10i7UZBlozw0GcQ4dbrImz
IYHZ6zNS7XXl9YDxyknkPP1FN1RpUiSq8zs/F5bwhPo1m33TRK3APc9/tJfzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUYBRr+mq3W3tYiTZGFoL0817vzxMwHwYDVR0j
BBgwFoAUgGnurc7p3ZKxleUPn8s1oDYm2cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWcxamdLMkVaNXp4b0dzRk1aRGttZVJlb2FhaVl3RW5xeDVyd1BBUXZN
eE4vMC84MDY5RUVBRENFRTlERDkyQjE5NUU1MEY5RkNCMzVBMDM2MjZEOUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwNjlFRUFEQ0VFOUREOTJC
MTk1RTUwRjlGQ0IzNUEwMzYyNkQ5Q0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VnMWpnSzJFWjV6eG9Hc0ZNWkRrbWVSZW9hYWlZd0VucXg1cndQQVF2TXhOLzAv
MzIzODMwMzQzYTMzMzEzMzMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM5MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMTDAMA0GCSqGSIb3DQEBCwUA
A4IBAQChxWLJePFyBdE1GfjeE+FD169kDDwml2dQB2ZzgRkkhjJUsW7XBB4PIlVy
lSfZ/HzFf8p7pFTo9tvhKAfKQ/9uggYsMBdzzZnnDnK+YGDCJ3Z0TRX3t94Px32R
w7g0j9nsGba/I4ASlh9QJ3/d/CRROhGRy3Yk5PO2Y6T9EnaAB/tL4FQcUO7upPks
3B761NI1/foygqZ1YwC7m9MBzycvbg3v1TJ87wgpMa2n9PScK0V1lN5nUQdyj3Gq
a0PYc2xc16Ejrprpq3YafXeri8EN8eAJdR6o+hvxXVF4doAB74Z5APyqkLV2Yphz
A6jdQDro7qophCUQO/yLwjIX/9sT
-----END CERTIFICATE-----
Generated at Tue Dec 23 16:09:57 2025 by rpki-client