This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d313238203d3e20323636303434.roa
File:                     323830343a343639343a3a2f33322d313238203d3e20323636303434.roa (raw, json)
Hash identifier:          saluqtZll9/JbIR8d9XkT1OV8YNxvgAqufJOegztuEk=
Subject key identifier:   D6:88:ED:A9:90:F1:76:80:D9:4A:3F:24:5C:13:39:2D:35:A3:7A:17
Certificate issuer:       /CN=FA017484FF398FD3AA53F2B2FDC5C239E7917A65
Certificate serial:       04BBB4D86DB58474C5B7CC92A69F033703592DD9
Authority key identifier: FA:01:74:84:FF:39:8F:D3:AA:53:F2:B2:FD:C5:C2:39:E7:91:7A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d313238203d3e20323636303434.roa
Signing time:             Sat 06 Dec 2025 20:21:49 +0000
ROA not before:           Sat 06 Dec 2025 20:16:49 +0000
ROA not after:            Sat 05 Dec 2026 20:21:49 +0000
asID:                     266044
IP address blocks:        2804:4694::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.crl
                          rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bb:b4:d8:6d:b5:84:74:c5:b7:cc:92:a6:9f:03:37:03:59:2d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA017484FF398FD3AA53F2B2FDC5C239E7917A65
        Validity
            Not Before: Dec  6 20:16:49 2025 GMT
            Not After : Dec  5 20:21:49 2026 GMT
        Subject: CN=D688EDA990F17680D94A3F245C13392D35A37A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:86:8a:28:06:4d:60:b3:9d:41:1a:0d:94:
                    60:d4:6c:bf:2d:8e:ec:ab:60:ff:23:3e:de:5c:55:
                    6e:6f:2a:6d:81:82:c0:98:f9:31:46:c2:ad:b5:c1:
                    0a:47:52:17:44:3b:8e:42:d1:6e:f5:ac:aa:d4:2c:
                    30:19:7f:4a:c3:6a:2f:2f:83:ea:4b:45:dc:2a:11:
                    1b:b7:2a:88:fa:b1:d3:3b:92:11:0e:c3:53:21:9a:
                    ae:c0:9e:c2:98:8d:33:c4:2b:b9:a8:9e:85:cc:97:
                    c3:c8:cd:8e:af:ef:5e:30:4d:c5:c9:81:e9:47:d7:
                    e9:76:87:07:25:d1:5b:5c:9f:a2:8c:d6:7a:eb:b9:
                    e9:34:b9:8f:4a:f2:64:99:60:f5:4c:88:73:c5:79:
                    be:cb:25:9b:80:74:a6:ea:4a:2f:29:c3:92:3f:19:
                    ac:f1:88:21:0b:84:ce:44:40:a4:ee:79:ef:35:3b:
                    72:89:6f:72:83:95:1b:61:34:38:26:d2:b0:5c:81:
                    65:d2:15:7c:58:88:cc:06:cc:c9:dc:d4:ea:ff:17:
                    06:9f:13:7a:1e:81:2b:cc:dc:8d:ad:e5:04:d7:dc:
                    2e:eb:5c:93:c9:71:d2:d2:88:c2:88:09:37:1a:17:
                    e8:ea:df:c9:1f:7b:3e:54:56:64:ed:aa:ca:5e:89:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:88:ED:A9:90:F1:76:80:D9:4A:3F:24:5C:13:39:2D:35:A3:7A:17
            X509v3 Authority Key Identifier:
                keyid:FA:01:74:84:FF:39:8F:D3:AA:53:F2:B2:FD:C5:C2:39:E7:91:7A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d313238203d3e20323636303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4694::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:7c:ee:f3:92:46:aa:d0:5d:e4:71:16:4e:22:ee:9f:45:b1:
         5b:79:81:b5:d0:f1:c3:6b:79:5e:98:1d:cb:de:44:64:1f:d4:
         9f:f7:cc:fa:2e:d5:07:32:2b:53:a1:42:95:48:61:22:de:db:
         44:5f:3c:53:f6:15:86:3d:e3:0e:a3:e6:fe:2b:0b:4b:64:ce:
         99:de:05:82:ac:18:a8:4f:8d:a4:b6:02:7b:8e:27:37:e3:09:
         08:5c:f4:5c:85:5e:7f:33:45:ae:b3:6f:77:08:93:0b:a5:a8:
         50:b4:8c:36:1d:93:48:8e:36:7d:b0:51:5f:6a:db:ff:c9:e3:
         55:76:ba:d6:c0:fb:98:02:e6:8f:58:19:85:e9:33:26:ac:dc:
         9e:b5:37:70:01:27:7e:4d:20:43:9d:32:69:81:17:5c:bd:97:
         2e:3a:8e:1e:39:39:43:a3:07:03:f5:bd:a2:4d:bc:3d:a2:90:
         3d:10:9e:45:fb:db:69:6c:c3:a3:45:67:d7:32:40:e6:93:b5:
         ee:c3:8b:db:ae:f5:fc:34:b3:3f:12:ad:ac:73:bc:e9:47:d0:
         27:41:18:b1:2e:b7:e9:b3:2a:8e:7c:c7:5c:26:db:49:b8:f6:
         2a:3e:6d:03:f5:2a:a4:d3:83:9d:67:ce:90:dd:77:14:80:5e:
         80:5a:1b:b2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBLu02G21hHTFt8ySpp8DNwNZLdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkEwMTc0ODRGRjM5OEZEM0FBNTNGMkIyRkRDNUMyMzlF
NzkxN0E2NTAeFw0yNTEyMDYyMDE2NDlaFw0yNjEyMDUyMDIxNDlaMDMxMTAvBgNV
BAMTKEQ2ODhFREE5OTBGMTc2ODBEOTRBM0YyNDVDMTMzOTJEMzVBMzdBMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgeoaKKAZNYLOdQRoNlGDUbL8t
juyrYP8jPt5cVW5vKm2BgsCY+TFGwq21wQpHUhdEO45C0W71rKrULDAZf0rDai8v
g+pLRdwqERu3Koj6sdM7khEOw1Mhmq7AnsKYjTPEK7monoXMl8PIzY6v714wTcXJ
gelH1+l2hwcl0Vtcn6KM1nrruek0uY9K8mSZYPVMiHPFeb7LJZuAdKbqSi8pw5I/
GazxiCELhM5EQKTuee81O3KJb3KDlRthNDgm0rBcgWXSFXxYiMwGzMnc1Or/Fwaf
E3oegSvM3I2t5QTX3C7rXJPJcdLSiMKICTcaF+jq38kfez5UVmTtqspeiWGbAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU1ojtqZDxdoDZSj8kXBM5LTWjehcwHwYDVR0j
BBgwFoAU+gF0hP85j9OqU/Ky/cXCOeeRemUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHhpYVpmNXdLd0pRTTgzZW9iWnpRMmlVVmtXb1NhbWQ5ZUxQOTdGcjJO
dlMvMC9GQTAxNzQ4NEZGMzk4RkQzQUE1M0YyQjJGREM1QzIzOUU3OTE3QTY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMDE3NDg0RkYzOThGRDNB
QTUzRjJCMkZEQzVDMjM5RTc5MTdBNjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4aWFaZjV3S3dKUU04M2VvYlp6UTJpVVZrV29TYW1kOWVMUDk3RnIyTnZTLzAv
MzIzODMwMzQzYTM0MzYzOTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEaUMA0GCSqGSIb3DQEBCwUAA4IBAQAvfO7z
kkaq0F3kcRZOIu6fRbFbeYG10PHDa3lemB3L3kRkH9Sf98z6LtUHMitToUKVSGEi
3ttEXzxT9hWGPeMOo+b+KwtLZM6Z3gWCrBioT42ktgJ7jic34wkIXPRchV5/M0Wu
s293CJMLpahQtIw2HZNIjjZ9sFFfatv/yeNVdrrWwPuYAuaPWBmF6TMmrNyetTdw
ASd+TSBDnTJpgRdcvZcuOo4eOTlDowcD9b2iTbw9opA9EJ5F+9tpbMOjRWfXMkDm
k7Xuw4vbrvX8NLM/Eq2sc7zpR9AnQRixLrfpsyqOfMdcJttJuPYqPm0D9Sqk04Od
Z86Q3XcUgF6AWhuy
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:53:04 2025 by rpki-client