This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33322d3335203d3e20323637393633.roa
File:                     323830343a353565343a3a2f33322d3335203d3e20323637393633.roa (raw, json)
Hash identifier:          oGVBhmEn37u1dy57ekSmewEHC0VT6hymYGHLuvh4IS4=
Subject key identifier:   92:2A:8A:80:34:DB:72:06:A5:26:6B:BB:72:3B:8A:8B:13:11:42:A2
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       187732EAC1C133C0CAC4F09CD7590F3F8904BE7D
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33322d3335203d3e20323637393633.roa
Signing time:             Wed 10 Dec 2025 11:56:41 +0000
ROA not before:           Wed 10 Dec 2025 11:51:41 +0000
ROA not after:            Wed 09 Dec 2026 11:56:41 +0000
asID:                     267963
IP address blocks:        2804:55e4::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:77:32:ea:c1:c1:33:c0:ca:c4:f0:9c:d7:59:0f:3f:89:04:be:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Dec 10 11:51:41 2025 GMT
            Not After : Dec  9 11:56:41 2026 GMT
        Subject: CN=922A8A8034DB7206A5266BBB723B8A8B131142A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:31:23:9e:d1:51:70:c3:83:25:20:e5:e8:
                    93:11:9b:b6:82:38:c2:56:99:da:e7:19:21:b5:bc:
                    12:66:0c:36:9c:34:1a:5d:58:99:e2:bc:36:5f:98:
                    8d:cf:d4:81:94:ff:c7:fc:01:c9:3c:fc:b8:e9:b9:
                    66:28:f1:b6:b6:d8:09:f2:7b:4d:f3:09:64:3a:85:
                    62:6f:18:58:91:a1:de:88:ae:7e:24:b6:6d:f1:dc:
                    66:dc:37:fa:31:ab:f1:4f:f3:de:e5:85:c5:cf:be:
                    f8:c0:61:e1:88:34:63:a6:8e:be:4f:d0:67:a5:19:
                    1c:98:55:61:cd:0e:fc:db:ad:c2:ae:f0:ea:da:f9:
                    e1:8e:46:bf:c4:52:a8:0d:23:01:8b:0f:27:c0:45:
                    0f:51:0b:e3:8d:2c:8d:77:ae:5a:56:7c:30:ca:09:
                    e1:57:c1:51:77:54:4e:50:29:6f:10:90:74:bd:d9:
                    4c:fc:48:06:68:89:15:5a:b8:a5:e7:60:23:c9:d4:
                    16:30:97:49:fb:19:12:a7:d8:11:71:45:a3:d5:99:
                    ff:0f:8a:ab:02:ba:03:6b:0b:d0:db:7a:81:fa:43:
                    95:a7:c0:c9:04:44:45:30:18:12:60:14:e1:65:81:
                    ae:34:82:98:f4:1f:76:7a:53:cb:b8:9a:b8:96:43:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2A:8A:80:34:DB:72:06:A5:26:6B:BB:72:3B:8A:8B:13:11:42:A2
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33322d3335203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:f3:a0:c4:03:00:e8:70:82:85:b5:72:6e:8e:43:33:b0:8b:
         47:30:d6:19:8b:53:93:d2:41:77:f7:72:42:3a:12:df:02:97:
         de:46:e2:d7:17:d4:ce:ea:c9:e0:80:11:a0:7c:77:47:90:c2:
         6e:b6:55:b5:ab:43:34:57:a3:d4:62:00:77:76:42:dd:d2:f8:
         3d:44:0e:32:7a:65:e5:3a:10:fa:18:ff:5e:08:05:3d:0b:9d:
         9c:2c:28:ba:20:57:88:07:f2:bd:71:7f:23:67:f8:28:40:7d:
         89:05:1a:f8:ad:67:31:0a:63:6c:c7:a4:ba:ae:b1:09:6e:b5:
         34:9e:dd:10:4c:eb:43:2d:bb:fb:17:43:83:b4:7e:a1:28:2b:
         19:96:63:fe:39:8c:95:14:f5:75:b4:1a:68:9d:2e:04:9a:78:
         91:f6:51:66:b0:23:c1:a5:8f:94:f6:31:b3:b1:8c:7e:34:ab:
         3a:35:8d:c6:9a:d0:a6:28:28:6d:f6:35:08:a9:0b:a1:6b:35:
         b0:60:3b:99:2c:d4:a3:a7:81:bd:f0:d4:dd:30:6e:4c:c3:65:
         47:b8:52:72:35:16:7d:19:35:4a:39:6a:a5:a6:ea:6c:41:e3:
         42:f8:5d:18:85:83:c5:57:f8:11:09:9e:18:d9:5e:05:db:dd:
         2f:99:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:15:47 2025 by rpki-client