This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a343030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a343030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          jUrfvO9GfiEDqBqsmJWsMY0IDu1epUwQ0GKyOSiw6Mc=
Subject key identifier:   FC:10:CB:CA:D1:C3:FD:A2:AE:6E:6E:EB:7D:4B:8D:25:9E:5B:68:DA
Certificate issuer:       /CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
Certificate serial:       4098F64D2F62C7DE7A93CB441F77BB89583D9301
Authority key identifier: 44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a343030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Thu 11 Dec 2025 19:54:44 +0000
ROA not before:           Thu 11 Dec 2025 19:49:44 +0000
ROA not after:            Thu 10 Dec 2026 19:54:44 +0000
asID:                     269388
IP address blocks:        2804:63dc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:f6:4d:2f:62:c7:de:7a:93:cb:44:1f:77:bb:89:58:3d:93:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
        Validity
            Not Before: Dec 11 19:49:44 2025 GMT
            Not After : Dec 10 19:54:44 2026 GMT
        Subject: CN=FC10CBCAD1C3FDA2AE6E6EEB7D4B8D259E5B68DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f6:0b:64:25:95:13:36:a8:11:35:ed:f3:eb:
                    99:99:5a:20:2a:9d:a2:74:e8:04:d7:39:3a:f7:73:
                    82:38:c4:51:c6:17:f6:a2:7b:91:7c:06:8b:83:f3:
                    0d:0c:c1:d8:4d:f2:08:e0:f6:f2:fd:31:53:4d:29:
                    11:2b:20:83:a6:8e:29:0d:23:b6:45:93:a7:5b:00:
                    32:5e:7e:44:c5:34:b3:27:98:93:56:7b:81:8a:60:
                    47:a9:89:3e:7a:18:5e:80:1e:5c:7d:6c:1c:ee:43:
                    18:69:a8:2d:ff:b5:62:69:ea:29:fe:99:f3:2d:ae:
                    31:a5:d1:ef:66:98:d9:db:09:d0:f3:72:98:c3:e4:
                    c0:6d:fc:53:7e:3a:63:04:05:c4:7f:c9:1f:7e:39:
                    6f:d4:93:fa:7e:2b:32:ba:24:ec:e6:e2:86:9c:8f:
                    3a:64:ba:89:ea:3c:45:6f:35:61:e5:3b:c6:4e:29:
                    e6:8d:f8:a6:6c:b8:c0:b8:e9:c6:2c:68:a3:ca:51:
                    b7:d0:8f:0b:47:39:33:a3:ff:74:df:98:04:73:f2:
                    3d:36:47:55:cd:2b:f9:e0:f4:f0:f9:8d:8c:0f:4b:
                    48:a3:2a:ec:5e:75:d2:ba:a9:33:ec:89:c2:30:2f:
                    7a:54:4c:f3:4c:b1:7b:61:d0:f7:69:d7:77:0b:3e:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:CB:CA:D1:C3:FD:A2:AE:6E:6E:EB:7D:4B:8D:25:9E:5B:68:DA
            X509v3 Authority Key Identifier:
                keyid:44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a343030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:a8:79:eb:e7:00:a7:f5:c6:86:93:92:22:23:b8:90:da:c2:
         1e:1b:c0:26:0c:a0:9e:c9:02:f1:98:e8:0e:af:12:ce:59:70:
         c0:9c:99:53:a7:bc:58:aa:32:9d:bf:43:f8:05:8b:3a:7e:90:
         84:7e:7f:37:75:b7:83:5f:b2:fa:13:91:a3:71:18:35:a1:20:
         35:56:65:97:5b:e3:68:a0:da:94:1b:a5:5c:65:4e:f6:ba:4d:
         99:69:fe:0d:af:85:cb:3f:13:1d:4e:23:b4:a5:75:71:eb:3f:
         a2:26:6a:d0:19:27:23:9b:53:84:f8:e6:81:72:a6:85:0c:30:
         39:e4:9e:0c:b5:4f:f1:a0:99:48:a5:f3:7c:d1:16:e9:99:58:
         15:a9:fa:5c:9c:a9:8e:9f:c7:26:70:7d:65:27:4d:21:c3:02:
         fe:df:4f:6d:f9:66:9d:c6:13:b2:93:e3:58:01:e8:be:1f:f1:
         63:4c:1b:bf:d1:c4:80:58:a0:dd:64:fa:8c:a3:5f:e5:5b:02:
         b9:be:f1:68:f6:84:75:7e:06:a3:68:14:18:54:e1:16:7a:bc:
         17:b9:7e:fc:8f:2a:bc:a2:88:3d:bb:ad:3f:3a:c5:4d:f6:bd:
         91:bb:f9:57:20:4d:f2:22:5d:35:a6:c7:91:20:b0:1a:55:2d:
         ed:47:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:36:04 2025 by rpki-client