This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/323830343a376537633a383330303a3a2f34302d3430203d3e20323731363237.roa
File:                     323830343a376537633a383330303a3a2f34302d3430203d3e20323731363237.roa (raw, json)
Hash identifier:          dr0kaJw/1x3zViNmb4QNYwwcvPCHwGYqKRssngw9gQY=
Subject key identifier:   4E:46:2B:DD:0B:39:A7:CA:CF:69:A8:16:39:E4:99:D3:F8:03:62:3B
Certificate issuer:       /CN=97BD08F65EE9CED01EAC61A0D095B170713D00DD
Certificate serial:       56DFB09DA4121B2DC0E75CCDA000A9D08AD874DA
Authority key identifier: 97:BD:08:F6:5E:E9:CE:D0:1E:AC:61:A0:D0:95:B1:70:71:3D:00:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97BD08F65EE9CED01EAC61A0D095B170713D00DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/323830343a376537633a383330303a3a2f34302d3430203d3e20323731363237.roa
Signing time:             Thu 11 Dec 2025 18:47:52 +0000
ROA not before:           Thu 11 Dec 2025 18:42:52 +0000
ROA not after:            Thu 10 Dec 2026 18:47:52 +0000
asID:                     271627
IP address blocks:        2804:7e7c:8300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.crl
                          rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97BD08F65EE9CED01EAC61A0D095B170713D00DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:df:b0:9d:a4:12:1b:2d:c0:e7:5c:cd:a0:00:a9:d0:8a:d8:74:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97BD08F65EE9CED01EAC61A0D095B170713D00DD
        Validity
            Not Before: Dec 11 18:42:52 2025 GMT
            Not After : Dec 10 18:47:52 2026 GMT
        Subject: CN=4E462BDD0B39A7CACF69A81639E499D3F803623B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:f0:d5:be:96:01:73:b2:2b:03:8c:8a:b3:
                    c1:40:de:35:35:f2:e2:2e:c1:4f:eb:f0:bf:52:72:
                    27:76:12:1c:89:25:2e:0d:4c:02:2a:d0:74:a2:65:
                    a9:ea:da:1a:3a:6f:33:1d:f4:76:9a:41:36:bb:aa:
                    96:05:08:ff:78:c8:35:c7:e9:cb:72:a1:22:62:38:
                    36:58:84:4c:bd:a2:2a:4b:a4:51:14:c0:82:7e:59:
                    2a:47:7f:0d:4f:38:52:1f:4a:17:6e:80:92:ad:da:
                    a1:c6:e2:90:a4:12:fe:0f:f2:3f:32:ce:55:83:f6:
                    30:97:f9:3a:38:90:e6:b9:6d:5f:f0:1d:a7:07:27:
                    52:83:ad:5c:9d:64:9b:bc:3b:c9:14:7d:96:81:2a:
                    bb:d1:b0:cb:a9:9c:31:56:85:c0:22:82:45:d6:dd:
                    bb:8f:37:50:76:b9:b7:3d:3e:12:a0:85:37:72:48:
                    1b:c9:1f:d7:cf:f8:95:6e:65:99:32:21:e8:d6:9e:
                    a9:9d:b4:b2:b2:ef:61:47:cb:f1:da:27:5e:71:8c:
                    8c:d8:ac:7f:8e:06:46:27:de:bb:ff:db:12:00:bc:
                    ed:f2:06:51:79:34:2e:97:b6:35:c0:95:82:2f:2c:
                    10:87:4d:b1:ea:be:18:46:57:39:6b:c8:0e:20:10:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:46:2B:DD:0B:39:A7:CA:CF:69:A8:16:39:E4:99:D3:F8:03:62:3B
            X509v3 Authority Key Identifier:
                keyid:97:BD:08:F6:5E:E9:CE:D0:1E:AC:61:A0:D0:95:B1:70:71:3D:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/97BD08F65EE9CED01EAC61A0D095B170713D00DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97BD08F65EE9CED01EAC61A0D095B170713D00DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/323830343a376537633a383330303a3a2f34302d3430203d3e20323731363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e7c:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:27:98:cb:98:c1:6e:0a:a8:94:90:af:cf:88:cc:5a:b8:89:
         56:a3:ae:04:82:38:6d:80:e5:fb:9b:3b:35:fd:62:cb:2b:2e:
         5c:c2:f1:3f:0c:cd:24:3f:5c:ba:77:bb:9a:4a:12:18:eb:16:
         ff:68:8f:7f:2e:2e:eb:22:e8:f2:ef:fa:a9:d9:27:dc:c5:91:
         f2:1b:a1:26:7e:e2:00:ff:56:8c:ba:3e:92:8d:87:76:3e:9c:
         70:f2:31:e9:e4:a0:8c:ac:27:de:5c:a8:05:ab:a7:1c:34:41:
         9a:f7:c0:cc:0f:b6:c4:b4:ed:ee:80:7b:45:cf:83:ca:8a:43:
         90:8a:44:d7:cc:f0:5c:1f:84:ab:66:dc:69:cb:12:b4:bc:3e:
         4c:63:75:87:13:a5:d8:80:bc:0f:ce:bb:cf:4f:85:ff:47:d4:
         b8:74:7d:30:c7:cc:d9:a0:aa:85:dc:c8:d9:2a:fd:1a:88:09:
         cf:0e:93:70:15:d7:2e:90:32:4f:23:c6:f9:8d:d1:a5:e2:41:
         d2:3d:76:0c:72:72:12:6e:f7:89:e5:66:5a:d6:40:53:6b:95:
         f6:72:bb:53:71:41:12:17:94:fb:e4:53:a8:20:50:5b:12:f0:
         b7:9e:e6:13:47:e4:68:b1:81:2f:b4:bf:74:4f:e4:41:a4:ea:
         f0:5a:66:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:35:18 2025 by rpki-client