This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/323830343a363836303a3a2f33322d3438203d3e20323639363838.roa
File:                     323830343a363836303a3a2f33322d3438203d3e20323639363838.roa (raw, json)
Hash identifier:          HQd92IP7ULesHnNOu6+3TpHvIP9wDZNpP3FLH1DfnLA=
Subject key identifier:   11:85:23:C9:61:19:93:F6:61:DE:FE:91:78:AB:77:BD:69:F1:FC:36
Certificate issuer:       /CN=364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA
Certificate serial:       2DC0EDE4B8BD718D7434098F1680EEF37BD38EA4
Authority key identifier: 36:4C:C6:EA:CD:A2:90:A3:F1:61:DF:11:EF:6B:A7:6F:D4:0E:D8:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/323830343a363836303a3a2f33322d3438203d3e20323639363838.roa
Signing time:             Sat 06 Dec 2025 12:13:25 +0000
ROA not before:           Sat 06 Dec 2025 12:08:25 +0000
ROA not after:            Sat 05 Dec 2026 12:13:25 +0000
asID:                     269688
IP address blocks:        2804:6860::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.crl
                          rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 16:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c0:ed:e4:b8:bd:71:8d:74:34:09:8f:16:80:ee:f3:7b:d3:8e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA
        Validity
            Not Before: Dec  6 12:08:25 2025 GMT
            Not After : Dec  5 12:13:25 2026 GMT
        Subject: CN=118523C9611993F661DEFE9178AB77BD69F1FC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:97:93:9a:ff:66:96:4c:03:21:25:60:53:
                    8a:d5:91:54:f5:ba:15:49:ac:bd:63:d2:de:77:6b:
                    3c:af:c4:b8:cc:fe:8c:e5:16:9b:2b:4c:b2:ac:11:
                    25:71:fe:4f:70:0d:55:2c:97:15:90:d1:9e:0b:94:
                    e6:f2:d0:9c:e9:2a:85:d3:92:5a:24:d7:0d:1c:39:
                    51:66:93:60:4e:f8:d2:96:b5:7f:9a:66:97:0d:72:
                    e1:d2:28:8e:c1:08:37:af:55:1e:91:69:b1:c4:11:
                    4d:8e:54:82:a9:72:bb:83:d6:54:4d:f3:bd:3b:8b:
                    6e:90:41:b8:3d:d4:fe:cb:4a:87:c0:5e:94:fb:35:
                    68:25:f0:c0:f7:2f:77:a9:67:24:fa:2a:78:b1:3c:
                    c5:14:03:a2:f3:c8:63:dd:12:df:46:f7:33:0f:1b:
                    98:06:bb:d1:8e:25:7f:02:6d:3f:86:54:fc:ba:f6:
                    89:15:64:5a:1d:fa:50:35:c2:f2:03:c6:2e:eb:f0:
                    e5:32:43:ec:40:90:3a:89:41:ae:c2:72:b6:a9:fe:
                    0d:c5:b1:b9:c1:ca:83:05:4a:50:2c:c5:d3:68:c9:
                    b2:55:92:53:76:06:7f:96:3c:7f:21:d3:a7:ff:e5:
                    21:23:f1:cf:71:82:17:b6:4b:cf:6f:54:3a:1d:03:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:85:23:C9:61:19:93:F6:61:DE:FE:91:78:AB:77:BD:69:F1:FC:36
            X509v3 Authority Key Identifier:
                keyid:36:4C:C6:EA:CD:A2:90:A3:F1:61:DF:11:EF:6B:A7:6F:D4:0E:D8:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/323830343a363836303a3a2f33322d3438203d3e20323639363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6860::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:dc:1c:40:35:ba:ed:60:5e:fc:ff:e6:41:7a:6e:6b:74:a0:
         6a:90:1f:bf:27:cf:c7:c8:19:9b:fd:a9:a9:83:fb:55:55:79:
         de:5b:09:96:25:95:92:d4:00:1b:c5:16:19:6e:68:26:5a:ee:
         15:d4:e4:91:df:62:a3:2a:3b:06:c4:93:f1:63:28:b3:ba:11:
         5b:54:03:3f:d6:87:30:e2:32:af:91:25:a0:f9:87:a1:c7:3e:
         ce:fa:ee:fe:c2:57:65:7d:71:db:e4:04:55:f1:cb:8d:71:be:
         d4:04:22:ef:65:c6:4a:6d:e4:f9:bd:62:84:4c:93:bd:96:63:
         74:8f:07:f9:44:71:0f:6f:02:8e:ba:7f:1d:88:a6:05:df:d9:
         06:21:bd:46:65:c6:36:3d:0e:20:a2:dc:c4:52:ac:c0:f5:31:
         28:ea:95:5a:ec:6b:0f:e5:e3:81:c2:45:64:dd:56:cf:67:c0:
         52:02:12:e1:c4:48:90:da:a3:f9:a4:9e:7e:8e:19:2a:fb:50:
         f4:df:e3:38:d5:8b:7f:00:62:27:43:e1:29:5e:eb:b0:04:ee:
         6d:a6:c7:80:7c:cf:f9:78:fc:37:70:23:f5:d3:2e:86:54:07:
         de:ef:a9:3b:c8:19:b3:58:4f:82:35:a8:27:95:80:5e:0c:55:
         c1:9e:f6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 16:56:40 2025 by rpki-client