This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33322d313238203d3e20323638303239.roa
File:                     323830343a353665303a3a2f33322d313238203d3e20323638303239.roa (raw, json)
Hash identifier:          9UIszYZkhpVs9wK2eHP/lQRo6Nr68hz+J8Wx8NEt2sI=
Subject key identifier:   E0:5B:AB:70:17:3B:A4:A2:62:38:57:48:55:6B:90:40:72:5D:5A:91
Certificate issuer:       /CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
Certificate serial:       688D293E36A826A59E804FCDC50E735444F6B278
Authority key identifier: 67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33322d313238203d3e20323638303239.roa
Signing time:             Fri 19 Dec 2025 15:22:34 +0000
ROA not before:           Fri 19 Dec 2025 15:17:34 +0000
ROA not after:            Fri 18 Dec 2026 15:22:34 +0000
asID:                     268029
IP address blocks:        2804:56e0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl
                          rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 12:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8d:29:3e:36:a8:26:a5:9e:80:4f:cd:c5:0e:73:54:44:f6:b2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
        Validity
            Not Before: Dec 19 15:17:34 2025 GMT
            Not After : Dec 18 15:22:34 2026 GMT
        Subject: CN=E05BAB70173BA4A262385748556B9040725D5A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:7c:07:44:e7:1c:e2:95:3c:10:9b:ca:64:
                    94:fd:69:2e:c4:82:be:31:9c:ab:1d:8b:5a:36:ac:
                    11:67:b6:16:71:1c:d5:8f:c3:39:2d:38:f1:a1:fb:
                    10:04:35:66:de:7c:f2:e7:e7:85:12:5d:5e:34:99:
                    79:9c:a8:24:0d:9c:1b:82:dd:5f:e1:42:81:e0:4c:
                    a4:a6:4c:a6:e6:b5:92:b8:ff:7f:bc:5c:fe:ea:ed:
                    1f:b8:3d:f8:ef:36:19:c5:0d:9e:0a:b5:58:37:dc:
                    72:75:66:eb:6f:4c:81:bb:1a:7a:00:32:8e:8e:8e:
                    e9:8e:de:c5:14:fa:ca:25:95:a0:fe:56:46:8f:0a:
                    47:17:27:e9:12:79:1b:a1:f4:fd:c6:35:12:94:11:
                    ac:c4:19:87:e5:8a:3c:b6:1d:1f:09:ca:78:a8:1c:
                    59:79:24:4b:55:38:78:1c:27:e5:83:27:ea:e0:46:
                    fb:56:28:98:41:03:96:2c:c0:7b:e9:2b:12:24:8f:
                    7c:1a:19:cd:43:e3:43:54:26:38:f6:df:27:fa:85:
                    f3:21:23:76:dd:cc:65:34:f5:03:4e:76:7e:52:f9:
                    33:0a:47:ab:d2:c1:61:77:01:6d:fc:84:0b:3f:91:
                    45:26:0d:49:c5:35:54:9b:d1:b9:77:37:92:47:88:
                    98:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5B:AB:70:17:3B:A4:A2:62:38:57:48:55:6B:90:40:72:5D:5A:91
            X509v3 Authority Key Identifier:
                keyid:67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33322d313238203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:77:5e:b2:b7:8c:bd:26:44:f5:2f:db:6a:3c:a1:d2:7d:
         73:9e:4b:1c:85:22:73:fc:e1:c2:26:19:19:78:4a:78:ee:64:
         8b:a0:17:25:92:8e:77:d0:d5:35:5b:59:54:59:50:09:7b:aa:
         6c:e2:71:bc:9a:90:8a:b5:eb:83:c6:09:fb:90:f4:35:60:ab:
         12:b7:bf:8a:d5:e8:01:33:ea:96:1a:8f:ad:c6:aa:e0:af:5b:
         ac:36:ec:d2:87:e7:a8:02:3b:78:5d:03:d4:ee:57:a7:9d:06:
         8a:ae:c6:26:8a:ca:a2:34:be:ca:dc:59:86:0f:00:99:3e:b5:
         d1:d4:fd:39:e3:3b:a2:cb:a2:58:44:bb:5c:9f:13:e8:ab:2c:
         57:10:00:f5:82:56:4d:9d:63:ba:80:57:38:c9:83:8d:38:21:
         c7:88:0d:94:c1:05:fd:8e:64:c2:8a:e8:15:fe:66:32:cd:0c:
         95:bc:17:ca:17:72:c0:52:4b:8e:c5:23:8a:29:e4:3b:9d:d0:
         98:6c:42:29:0a:0b:72:26:55:e9:af:cb:af:5b:89:0a:22:36:
         31:2d:f2:22:bc:53:66:c9:d9:59:78:ae:c4:75:f9:87:90:6d:
         ea:34:e4:22:81:4e:b1:4b:fa:6b:d8:86:29:02:19:77:b3:c3:
         d9:8b:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:27:59 2025 by rpki-client