This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a373030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a373030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          bsxufagw7zsxWpge9S610Vwa2slqZn3AB1iSAYDsGyA=
Subject key identifier:   42:1B:0A:EE:2B:F7:EA:3D:AB:C7:63:0A:73:1F:CF:24:11:3B:8D:22
Certificate issuer:       /CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
Certificate serial:       2AE09B9EB2B5EC6307591D6AC5FB79504B979F84
Authority key identifier: 44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a373030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Thu 11 Dec 2025 19:55:12 +0000
ROA not before:           Thu 11 Dec 2025 19:50:12 +0000
ROA not after:            Thu 10 Dec 2026 19:55:12 +0000
asID:                     269388
IP address blocks:        2804:63dc:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e0:9b:9e:b2:b5:ec:63:07:59:1d:6a:c5:fb:79:50:4b:97:9f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
        Validity
            Not Before: Dec 11 19:50:12 2025 GMT
            Not After : Dec 10 19:55:12 2026 GMT
        Subject: CN=421B0AEE2BF7EA3DABC7630A731FCF24113B8D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:52:41:c2:ee:d8:ba:c4:ac:67:3a:99:b8:
                    9d:dd:b1:9b:37:4e:cb:40:13:23:db:94:e5:3e:2b:
                    27:8c:60:fd:84:71:d8:25:aa:69:f8:e9:6a:bb:c4:
                    ad:e9:5d:11:80:e7:be:80:38:fc:ec:78:1c:34:ce:
                    e3:ab:fa:5c:47:c5:a5:c0:2e:e0:ac:e8:17:7c:5e:
                    66:20:5c:18:99:6d:3f:ac:ac:ea:78:d5:67:d4:0e:
                    d9:f8:f9:c7:b1:ce:bd:28:a8:40:72:c5:03:1f:15:
                    ce:fd:2a:75:27:fc:1e:b8:ae:94:c5:f4:57:c9:94:
                    8a:35:33:34:af:c6:b3:17:b2:fa:0e:23:db:99:7c:
                    77:f3:f3:5c:30:22:ab:8c:d8:af:35:e6:a0:05:4e:
                    6e:c3:d1:e3:7b:b7:0c:d0:60:4a:75:9b:91:f7:49:
                    81:a8:fd:da:99:e2:f4:58:75:49:9b:c3:e8:a5:15:
                    cb:b8:9a:69:d2:f7:d1:6b:1c:86:94:66:16:0e:93:
                    58:fd:2d:63:45:dd:ad:16:d9:27:e2:d5:48:d3:88:
                    cf:75:e5:43:c6:32:14:ab:69:5d:bb:1c:7f:96:ff:
                    78:06:bc:5d:d7:65:e4:87:7a:6a:c1:99:bb:35:06:
                    b0:a2:ab:54:38:74:57:0d:08:99:ce:04:ca:82:c2:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1B:0A:EE:2B:F7:EA:3D:AB:C7:63:0A:73:1F:CF:24:11:3B:8D:22
            X509v3 Authority Key Identifier:
                keyid:44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a373030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:15:cf:d6:4e:6f:8f:c0:1a:71:7b:d1:75:0e:9e:95:32:
         68:39:e5:0e:a2:65:42:9a:81:5b:5e:94:e0:c2:d7:6f:62:18:
         17:64:c3:ab:75:57:b9:2e:e3:61:1c:98:6c:d2:b6:85:47:a7:
         52:88:e3:68:bb:29:c3:f1:23:0e:d8:ea:bd:61:96:1f:69:69:
         41:b9:f7:32:53:54:45:81:26:51:a8:30:46:05:77:9e:86:2f:
         42:71:1d:5d:5a:c2:fa:32:63:06:7f:e3:51:f8:f4:3a:e6:b6:
         be:d9:6f:be:84:7c:b8:ea:57:5f:94:f8:15:5e:75:a7:e0:51:
         46:df:bd:a6:e2:a9:48:fc:e5:8e:9e:d4:a0:b4:5f:4c:d2:9e:
         2e:79:00:0f:04:d9:a0:06:c3:a7:d2:55:4f:dd:b8:39:01:86:
         e1:0c:d3:8d:cc:b3:3d:0e:62:c0:df:f7:07:4e:9c:16:f9:04:
         2c:d6:0f:00:a3:43:7b:5b:bf:c2:1b:fe:51:2e:e6:c7:1a:e4:
         3a:8c:cb:a4:9c:1e:aa:99:07:b2:80:b9:0a:7e:5b:20:c1:e2:
         7f:18:df:02:e6:21:c7:5f:ca:3c:43:6c:02:5c:65:a0:b1:76:
         75:10:f0:66:7b:d1:cd:7d:80:c2:5e:49:f0:f0:59:d8:d7:fc:
         fa:56:28:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:36:03 2025 by rpki-client