This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa
File:                     323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (raw, json)
Hash identifier:          liUwlmRsLROgEFIRorcVo4wkRIukQ80gom0ndXpXupg=
Subject key identifier:   71:19:B4:36:6D:96:79:1D:C1:10:B9:1B:22:D5:28:51:2F:60:02:DE
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       71C4A0C3D84895392D253FF747BDA2B2F3CE5EB8
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa
Signing time:             Sun 07 Dec 2025 10:49:07 +0000
ROA not before:           Sun 07 Dec 2025 10:44:07 +0000
ROA not after:            Sun 06 Dec 2026 10:49:07 +0000
asID:                     269053
IP address blocks:        2804:5ebc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 06:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c4:a0:c3:d8:48:95:39:2d:25:3f:f7:47:bd:a2:b2:f3:ce:5e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Dec  7 10:44:07 2025 GMT
            Not After : Dec  6 10:49:07 2026 GMT
        Subject: CN=7119B4366D96791DC110B91B22D528512F6002DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:30:11:ed:c3:f9:ca:11:f6:88:e0:3f:bb:
                    74:ba:d7:66:0b:3c:38:36:a4:9b:0e:2e:04:43:b0:
                    34:0f:2e:b5:73:08:35:28:8d:7f:0c:a9:4c:29:55:
                    69:9e:d2:55:e6:66:91:b9:87:4e:5a:88:86:b6:19:
                    9f:c5:28:05:83:f7:0c:3d:3b:7b:b3:dc:49:9f:e1:
                    b2:88:99:a8:37:3f:b3:a6:cf:8f:6a:a6:02:7d:b6:
                    3a:81:2f:0c:7a:98:1a:6f:6c:fc:b2:e9:76:95:aa:
                    bb:50:83:1e:5c:96:4d:77:54:76:65:e7:b4:b0:2a:
                    ba:c5:ec:83:d7:27:ff:50:4f:21:90:2b:fc:85:90:
                    13:6d:c4:eb:3a:38:15:02:9b:cf:19:da:72:e9:29:
                    c2:ec:c0:b4:62:c0:9c:31:80:d8:83:d6:9f:bb:b3:
                    ba:85:39:ce:78:9f:59:ce:e7:a2:9d:f4:ff:06:74:
                    1c:c3:32:fd:2c:85:43:14:cb:34:1f:92:ac:9e:94:
                    2c:70:ef:c3:5f:dc:32:e6:11:5c:e2:0f:32:68:43:
                    fb:a3:3a:2b:95:10:2f:6f:57:cf:c9:f7:b4:15:5a:
                    0c:35:91:a8:ff:ba:21:d9:53:ca:9d:1f:a4:6d:32:
                    70:ae:b4:d5:6f:49:e3:a4:07:6b:62:5c:b3:d2:ec:
                    1e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:19:B4:36:6D:96:79:1D:C1:10:B9:1B:22:D5:28:51:2F:60:02:DE
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ebc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:44:36:c7:a8:99:e2:2d:55:c5:81:03:f1:68:54:7e:e3:
         09:94:40:f2:b5:fd:94:b5:44:64:5b:a8:19:4e:91:ac:56:19:
         ce:f2:19:30:d8:74:8d:9a:ff:f4:98:11:5f:63:d0:bb:9a:dd:
         d0:8c:01:77:83:70:10:9e:0a:84:22:21:05:ab:5f:75:6c:06:
         93:93:5c:e3:e8:5e:4d:a2:6f:b1:4b:27:c0:f2:0c:98:77:c2:
         b7:0a:7e:72:73:77:9a:b5:6d:75:fd:d7:26:50:67:dd:da:83:
         be:bd:10:4d:1d:41:11:3a:94:b1:84:1a:e9:2f:a9:de:4e:9f:
         9b:35:ba:14:7b:c5:d7:b2:49:c7:69:78:4e:1a:d7:4a:f2:8a:
         aa:85:55:cd:cd:40:d4:04:46:6d:ce:4f:cd:3c:d6:04:bc:35:
         dc:1d:97:3d:ce:9f:d5:82:1f:61:de:86:12:8c:fb:a4:bb:9d:
         e7:2c:94:c2:c4:26:3e:65:f0:9d:43:d4:45:cc:85:08:04:e4:
         87:dc:82:68:d5:77:2e:56:69:ca:f1:d4:3f:0e:62:6a:44:70:
         59:47:70:81:69:d0:a1:18:94:02:a5:81:b2:63:5d:70:8f:ef:
         9c:5a:c2:90:60:fc:3a:83:bb:e2:12:d8:64:02:74:86:2c:3f:
         ac:29:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 10:28:56 2025 by rpki-client