This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/323830343a353430383a3a2f33322d3332203d3e20323638363234.roa
File:                     323830343a353430383a3a2f33322d3332203d3e20323638363234.roa (raw, json)
Hash identifier:          fa85KeSDixA2To2+dHNwDmkDchJqAPwrvgDu3vPR3KU=
Subject key identifier:   FA:AD:D1:5C:FA:EB:7B:15:C6:7C:57:54:4D:65:4A:37:59:84:16:14
Certificate issuer:       /CN=64BE4E7240DE353E8AA99AF76D96CEF4251C7B10
Certificate serial:       1E0EC31C88823EB963EDE1F8CD4EDE3254E9F02B
Authority key identifier: 64:BE:4E:72:40:DE:35:3E:8A:A9:9A:F7:6D:96:CE:F4:25:1C:7B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/323830343a353430383a3a2f33322d3332203d3e20323638363234.roa
Signing time:             Thu 11 Dec 2025 20:02:58 +0000
ROA not before:           Thu 11 Dec 2025 19:57:58 +0000
ROA not after:            Thu 10 Dec 2026 20:02:58 +0000
asID:                     268624
IP address blocks:        2804:5408::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.crl
                          rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0e:c3:1c:88:82:3e:b9:63:ed:e1:f8:cd:4e:de:32:54:e9:f0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64BE4E7240DE353E8AA99AF76D96CEF4251C7B10
        Validity
            Not Before: Dec 11 19:57:58 2025 GMT
            Not After : Dec 10 20:02:58 2026 GMT
        Subject: CN=FAADD15CFAEB7B15C67C57544D654A3759841614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:8a:62:a8:f5:9b:80:81:f7:14:21:a8:2c:
                    53:d4:a9:79:e6:d2:42:61:0c:18:ce:e7:fe:e8:cc:
                    02:e9:54:b5:7e:8f:6f:bb:e2:7b:7e:74:93:29:af:
                    f8:24:68:96:9c:7f:89:15:fc:88:50:6b:7e:15:f9:
                    ae:9c:f1:b4:bd:86:24:e6:a5:d7:d4:4d:fe:b4:82:
                    15:d4:6d:3a:1d:14:0c:78:18:04:84:e9:1c:2e:9b:
                    e9:4d:cc:00:d6:91:05:5f:2d:44:a1:d4:66:de:f8:
                    1e:90:24:83:f5:54:df:7c:5c:4d:84:be:68:ac:d6:
                    71:62:5a:6e:a6:91:0e:15:05:dc:20:ce:f5:10:b9:
                    c0:03:66:15:39:a2:a7:a2:59:cf:51:68:6c:ab:b4:
                    ae:60:a2:8e:d7:c1:98:ca:bf:f2:25:ab:b2:37:fa:
                    94:c2:5e:48:ee:bc:78:c4:d7:0f:e0:ca:73:ab:28:
                    7f:50:38:84:f4:d4:39:a1:e3:1d:43:ac:39:29:dd:
                    50:b8:94:b9:3e:2d:76:83:85:f4:98:48:c6:0d:30:
                    95:43:8d:11:05:51:95:11:3e:89:79:85:24:11:d1:
                    e8:2e:31:e1:db:f6:aa:bf:03:57:2d:34:fc:a5:3e:
                    31:2e:62:d0:91:3f:9e:70:a9:26:3d:ac:1f:3a:a7:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AD:D1:5C:FA:EB:7B:15:C6:7C:57:54:4D:65:4A:37:59:84:16:14
            X509v3 Authority Key Identifier:
                keyid:64:BE:4E:72:40:DE:35:3E:8A:A9:9A:F7:6D:96:CE:F4:25:1C:7B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64BE4E7240DE353E8AA99AF76D96CEF4251C7B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79KSmiH7dUja9Has2119CsPudkJuEB8GFQGw7MfjMQPg/0/323830343a353430383a3a2f33322d3332203d3e20323638363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5408::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:40:46:c5:4a:0c:aa:c8:0b:b7:91:f9:72:ca:dd:1d:d1:72:
         7b:4a:10:e4:43:e9:15:4c:f2:a8:3c:df:6e:e8:6d:27:41:81:
         f7:dc:a0:da:d7:b8:f6:34:ca:ef:16:63:27:68:28:c6:12:ab:
         e5:83:30:cb:c4:d9:12:99:c7:b7:ff:46:64:24:6f:d3:06:0d:
         bc:17:a4:70:93:bb:dc:94:d7:08:6d:cf:a8:df:cc:f5:7f:ea:
         ed:d2:d7:bf:dc:b7:07:5b:63:d2:9c:7a:1d:03:41:32:b7:7e:
         37:bb:52:c5:7c:16:aa:86:73:69:a8:32:c9:12:45:94:5f:d1:
         b7:32:c0:b3:cb:58:47:be:8a:a9:1f:24:6d:67:58:30:c2:d7:
         31:9f:51:be:12:1d:8c:24:98:17:fd:22:8b:04:73:84:5b:0a:
         a1:5f:ef:df:35:c2:24:63:fa:de:18:27:49:a8:67:a3:f0:7c:
         92:f1:77:3d:3d:7a:f8:9f:28:6e:ed:85:a1:1f:f5:bd:dc:52:
         33:2d:25:bb:18:c9:cc:da:ed:67:94:89:54:b7:dd:af:9a:cc:
         9f:45:fd:84:65:88:56:4d:49:70:0e:18:b7:ef:0c:95:af:32:
         25:58:35:3c:6e:43:75:95:ce:c3:70:fd:dc:4b:53:47:b4:0e:
         a1:78:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:18:02 2025 by rpki-client