This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
File:                     323830343a336230633a3a2f33322d3333203d3e20323636313236.roa (raw, json)
Hash identifier:          3f7u0nGtmYPujjf5NI+PCEdSA22DcU67wz8Hg0MAc+k=
Subject key identifier:   41:89:C8:00:5D:22:2A:02:03:ED:E4:78:1E:64:18:7D:C0:1B:68:3D
Certificate issuer:       /CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
Certificate serial:       0A6C97CD3D8CB0C8C3FC049F33A47E4FA9808750
Authority key identifier: A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
Signing time:             Thu 27 Nov 2025 22:19:05 +0000
ROA not before:           Thu 27 Nov 2025 22:14:05 +0000
ROA not after:            Thu 26 Nov 2026 22:19:05 +0000
asID:                     266126
IP address blocks:        2804:3b0c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl
                          rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 15:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6c:97:cd:3d:8c:b0:c8:c3:fc:04:9f:33:a4:7e:4f:a9:80:87:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
        Validity
            Not Before: Nov 27 22:14:05 2025 GMT
            Not After : Nov 26 22:19:05 2026 GMT
        Subject: CN=4189C8005D222A0203EDE4781E64187DC01B683D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:dc:38:83:8d:b7:55:58:c8:24:8c:70:35:
                    3d:8f:ea:25:12:79:a7:a7:1f:e6:bf:43:50:53:97:
                    c0:b7:a5:5f:52:a5:2b:66:5a:3c:bb:78:d0:97:2d:
                    5f:e3:2f:17:67:64:d7:39:92:ca:b9:73:91:47:7c:
                    a9:a8:b9:41:97:ef:8f:61:ac:25:53:7d:6b:1a:ee:
                    2b:1f:43:96:7d:f8:59:a9:f6:3d:62:f2:1d:a9:36:
                    17:d5:9d:13:ea:62:38:d9:19:4e:bf:49:a8:87:50:
                    65:6b:73:1e:2f:39:31:ab:e4:e4:9e:8b:1a:3b:19:
                    cf:14:65:e0:2f:5a:14:e7:29:96:72:01:77:38:2b:
                    93:0d:20:47:39:37:ed:a3:80:5c:94:22:12:6e:4d:
                    f8:4d:57:2e:90:88:03:e3:e2:04:77:aa:61:44:94:
                    e0:27:57:29:6a:0f:5e:42:aa:b6:80:d3:e4:ed:72:
                    80:75:10:f8:43:24:f3:72:fa:ae:97:ef:cd:57:3b:
                    da:9a:52:fd:95:d8:1e:53:f9:c2:3d:e0:8e:2d:8a:
                    75:a4:76:a6:9b:f6:45:cc:ab:b2:68:30:fd:05:37:
                    dd:d5:21:9f:41:bd:c2:39:a0:7c:f2:99:43:ef:21:
                    74:81:8b:89:1f:7a:8d:4b:0b:94:75:0d:72:ff:b4:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:89:C8:00:5D:22:2A:02:03:ED:E4:78:1E:64:18:7D:C0:1B:68:3D
            X509v3 Authority Key Identifier:
                keyid:A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:8e:5a:71:42:53:2e:55:57:7e:87:ab:a0:a6:73:ca:89:
         da:ce:63:55:0a:22:ab:d9:a6:6d:1b:e3:28:da:7b:5d:26:ce:
         7a:8b:8e:64:b1:7a:8c:4e:d1:6e:b7:f6:11:db:a2:76:37:81:
         b3:33:9a:5d:d7:df:1a:d0:b5:79:2e:28:61:86:59:55:fe:94:
         be:75:35:e3:90:51:7e:4f:c7:7d:6a:f3:be:3e:b0:8a:da:c3:
         a7:c0:9f:12:92:cb:57:61:1a:d9:46:d9:53:a9:8b:d7:17:52:
         d1:90:79:70:e4:96:39:2c:ca:d3:d2:8f:5a:32:bb:db:cd:7e:
         7e:94:07:3b:db:1d:e3:9f:3b:df:79:a1:67:d9:1f:ca:6f:79:
         8d:e1:26:f8:19:23:9e:42:83:d7:36:ce:52:18:99:d5:03:51:
         87:ff:59:8d:30:80:2d:04:5f:0c:bc:69:dc:b4:a0:f1:c9:13:
         f5:9a:89:89:1a:c9:ae:ce:a6:99:34:5a:0c:07:e1:3c:ba:b2:
         b4:84:01:74:26:0d:6c:7c:f5:4c:cf:b3:4a:68:02:de:5a:61:
         19:5d:21:4a:cb:27:aa:37:f1:9f:a0:2b:c0:43:b0:a8:59:9f:
         ce:41:5c:20:88:77:66:7c:3e:91:81:d1:ec:8b:a8:6c:24:eb:
         cf:7b:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:41:31 2025 by rpki-client