This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d313238203d3e20323632343934.roa
File:                     323830343a343637383a3a2f33322d313238203d3e20323632343934.roa (raw, json)
Hash identifier:          U50yj5rP4ULArJGl2whn+MdMROdzIZS5ZZOsuarmx2I=
Subject key identifier:   C2:9A:A8:14:BB:AC:2B:68:DB:BF:C6:CF:B0:44:8F:67:4D:14:1B:F0
Certificate issuer:       /CN=FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772
Certificate serial:       357B1FAF422C8C59FD8B09836FFA57764CA98D78
Authority key identifier: FE:5F:4F:A6:B8:8A:1C:2C:36:12:16:A2:D7:C5:0C:8D:96:9A:27:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d313238203d3e20323632343934.roa
Signing time:             Tue 09 Dec 2025 19:34:19 +0000
ROA not before:           Tue 09 Dec 2025 19:29:19 +0000
ROA not after:            Tue 08 Dec 2026 19:34:19 +0000
asID:                     262494
IP address blocks:        2804:4678::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7b:1f:af:42:2c:8c:59:fd:8b:09:83:6f:fa:57:76:4c:a9:8d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772
        Validity
            Not Before: Dec  9 19:29:19 2025 GMT
            Not After : Dec  8 19:34:19 2026 GMT
        Subject: CN=C29AA814BBAC2B68DBBFC6CFB0448F674D141BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:eb:1c:f1:18:4f:d8:d0:79:13:9e:ab:c1:
                    09:e0:89:66:7b:0c:cc:2f:5f:5b:65:c7:3a:5a:02:
                    97:01:53:de:a3:a1:7f:d7:8d:2e:0b:c7:dc:25:86:
                    0b:6d:54:bf:2b:c5:33:f2:1b:cc:0f:c2:f4:2b:6f:
                    c6:2f:8f:29:2b:dc:48:91:30:56:10:72:88:81:d8:
                    ae:9f:dc:4b:28:69:d5:12:59:df:a0:91:0b:f6:5b:
                    9f:05:03:e5:c0:25:bf:24:03:42:d5:73:aa:1b:93:
                    ae:74:6a:83:c0:3e:ef:a1:d0:8b:f1:58:11:9f:11:
                    ee:07:9a:20:ab:a5:f1:20:33:fa:af:f7:03:2e:9e:
                    33:3a:e2:25:72:c5:bf:df:67:c6:11:3c:c5:bd:80:
                    20:74:79:42:be:8c:08:0d:fc:7d:6b:09:19:dc:08:
                    3c:4a:1c:13:cb:71:21:d8:7d:02:6a:28:2b:98:79:
                    67:bb:21:48:9e:f2:69:8f:7e:ea:09:f1:41:0a:88:
                    89:87:a4:a6:b9:5c:a0:b0:c5:08:64:a3:96:2b:25:
                    59:b2:80:36:f4:f7:6e:72:cd:4c:cb:23:18:99:06:
                    59:23:7b:c7:cf:7f:6c:fa:f3:64:a8:cf:d1:90:f8:
                    8e:e6:e7:6d:a6:7b:3a:28:7a:00:9e:d0:3b:11:62:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9A:A8:14:BB:AC:2B:68:DB:BF:C6:CF:B0:44:8F:67:4D:14:1B:F0
            X509v3 Authority Key Identifier:
                keyid:FE:5F:4F:A6:B8:8A:1C:2C:36:12:16:A2:D7:C5:0C:8D:96:9A:27:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5F4FA6B88A1C2C361216A2D7C50C8D969A2772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d313238203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:cd:28:1a:a0:32:1e:89:74:99:6b:de:b6:a4:3d:3e:0e:
         6f:f4:88:a0:8b:85:0a:d6:19:b6:41:83:26:d0:bc:44:d1:ee:
         94:5f:c5:80:d4:9b:c4:63:4d:6e:7c:8d:89:89:01:46:8e:f1:
         08:6f:7e:be:2a:72:b6:b6:99:29:15:fc:54:ce:6b:bb:6a:98:
         84:72:a0:c4:75:4e:31:d4:a0:e9:fc:40:d7:f3:80:3a:b5:c8:
         b7:2b:41:bc:df:16:2e:50:c2:c2:05:79:d7:22:ec:fe:d9:5b:
         47:52:50:94:56:9b:5a:b7:b0:8f:ea:dd:61:5c:f2:de:8c:a0:
         46:86:7a:79:52:dc:cf:55:b9:e6:0f:b1:9d:09:c7:4a:79:8e:
         bd:d0:e4:11:6c:ad:61:5e:b3:3e:cb:b2:81:11:b1:03:ef:96:
         d3:db:3f:0a:f4:1d:be:62:61:e5:23:67:70:ab:23:cb:98:e5:
         33:62:8a:a8:9b:80:dd:c1:75:1d:d5:c0:53:50:a5:86:1c:c4:
         92:33:06:9e:a8:62:e7:f3:4b:94:ee:32:34:b2:5b:80:bb:61:
         e1:e1:90:ce:f6:a8:aa:64:5a:4a:e5:c8:aa:a6:80:e2:e2:6e:
         ad:4b:c7:f6:9f:33:89:12:ab:15:72:6b:56:f2:b6:a7:18:b8:
         8a:01:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:19:48 2025 by rpki-client