This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a393030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a393030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          nLptUlG1ogqQUfAtxQ/NpfdZCVxIMNWLtzf0GgDqGHY=
Subject key identifier:   C6:1A:A0:61:62:B6:E8:AD:6D:5D:21:2B:86:4B:8C:D6:FB:2B:58:B3
Certificate issuer:       /CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
Certificate serial:       427CAEAD0BAA0D22B1FA55057CE04824755D7940
Authority key identifier: 44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a393030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Thu 11 Dec 2025 19:55:30 +0000
ROA not before:           Thu 11 Dec 2025 19:50:30 +0000
ROA not after:            Thu 10 Dec 2026 19:55:30 +0000
asID:                     269388
IP address blocks:        2804:63dc:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7c:ae:ad:0b:aa:0d:22:b1:fa:55:05:7c:e0:48:24:75:5d:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
        Validity
            Not Before: Dec 11 19:50:30 2025 GMT
            Not After : Dec 10 19:55:30 2026 GMT
        Subject: CN=C61AA06162B6E8AD6D5D212B864B8CD6FB2B58B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:3d:d6:4e:e6:54:c7:75:8c:86:fe:a6:fc:
                    c2:a1:2a:0c:e4:57:df:0c:c9:2e:a4:9b:94:9a:6d:
                    d0:a3:b2:1a:92:9a:da:92:eb:96:ec:a8:3b:17:99:
                    f8:40:63:0c:07:95:42:cd:17:ad:4f:2c:4e:5d:67:
                    47:18:cb:46:6b:8b:b3:2d:6e:6d:74:74:e7:49:be:
                    08:35:e8:0e:5b:b2:5d:d7:22:13:1d:53:a8:37:4e:
                    12:fe:5f:f2:4f:fb:5f:e7:66:60:6c:02:8c:a8:41:
                    cd:37:aa:ba:46:51:4a:4c:9a:e8:9f:58:72:0b:42:
                    64:02:e8:d8:43:46:57:86:22:b1:08:f9:7c:e8:bd:
                    19:e3:b8:dc:e3:de:4e:ed:ff:6c:de:69:8a:fd:7f:
                    18:08:39:b3:b9:c4:c8:eb:6f:aa:11:a3:5f:de:0d:
                    25:85:4d:4f:b3:f3:02:19:9e:7b:37:0d:30:0e:02:
                    b5:92:17:02:f4:4b:67:be:0b:6c:bc:e1:92:ea:94:
                    8e:f7:1c:7b:ac:a0:ce:27:3f:66:6b:06:61:bc:ad:
                    25:72:e2:ee:be:3e:5c:42:04:b3:ac:af:96:fb:3d:
                    58:a2:1a:7a:2d:04:94:c7:11:82:71:e2:3c:63:44:
                    e5:8b:24:5c:26:2c:c8:16:a7:dd:c5:5a:be:2d:de:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:A0:61:62:B6:E8:AD:6D:5D:21:2B:86:4B:8C:D6:FB:2B:58:B3
            X509v3 Authority Key Identifier:
                keyid:44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a393030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ce:77:5a:d6:30:49:06:72:41:a1:1b:9f:09:4d:0e:7f:6d:52:
         f7:41:65:89:e0:89:00:9d:fc:a0:45:8d:38:7e:1d:f1:ed:c1:
         ad:91:76:1b:ea:79:ff:1a:ef:31:12:0b:50:4a:1e:1a:df:80:
         73:fc:c2:ec:e9:18:2e:4e:2d:3f:70:bc:0f:56:b1:bd:c2:5b:
         a2:e2:18:b3:b1:cf:7a:5e:a3:eb:5f:bf:e9:c8:60:d8:7f:29:
         c5:0d:d3:77:c9:9e:94:87:a7:22:ab:09:a9:b1:f0:a4:49:62:
         95:9e:60:37:d2:10:9d:dd:f5:05:a7:1b:2b:79:2a:b8:0d:ea:
         b7:03:fe:f1:08:3a:01:dc:40:78:40:de:88:0f:9f:20:81:be:
         55:1d:71:22:4d:ee:20:0f:d7:3b:68:48:5b:a3:f7:db:97:f7:
         6b:20:6c:50:09:7e:03:9c:32:27:f1:86:83:62:24:86:0a:14:
         d4:9f:5e:7a:38:00:2a:8a:3c:af:42:f4:dd:7f:fe:dc:91:47:
         14:bb:ef:d1:fd:90:4b:b3:bb:79:bf:2e:8b:eb:0c:75:58:a9:
         d5:80:08:43:35:3c:d8:8d:d2:aa:45:e2:d5:4b:24:b2:b3:bf:
         66:30:1d:90:b3:16:a0:a3:61:da:81:84:01:2d:35:1a:83:98:
         75:ae:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:36:03 2025 by rpki-client