This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a613030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a613030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          SOybGIYrja0pEvaW0cvwIthb7y/DvgQwxIzEAySKqog=
Subject key identifier:   CD:1D:F6:6B:B8:FB:5B:CB:96:1B:A0:3F:93:7E:CC:4B:17:78:33:9E
Certificate issuer:       /CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
Certificate serial:       5F07BD6F7531CFD758B1E4F2F246A6883CC86363
Authority key identifier: 44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a613030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Thu 11 Dec 2025 19:55:37 +0000
ROA not before:           Thu 11 Dec 2025 19:50:37 +0000
ROA not after:            Thu 10 Dec 2026 19:55:37 +0000
asID:                     269388
IP address blocks:        2804:63dc:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:07:bd:6f:75:31:cf:d7:58:b1:e4:f2:f2:46:a6:88:3c:c8:63:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
        Validity
            Not Before: Dec 11 19:50:37 2025 GMT
            Not After : Dec 10 19:55:37 2026 GMT
        Subject: CN=CD1DF66BB8FB5BCB961BA03F937ECC4B1778339E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:ff:aa:3f:6a:f8:4f:41:44:59:c4:52:cf:
                    de:c3:67:b0:06:7d:a4:b9:8c:96:ff:05:80:8b:68:
                    33:4d:72:1b:15:78:49:2f:9b:f3:aa:c3:ec:ab:60:
                    ea:7c:55:02:22:59:c4:f2:e2:5e:ed:52:06:66:00:
                    16:a7:b9:09:78:97:40:66:50:e5:ad:94:34:3b:3f:
                    a8:5d:3d:1f:07:2e:91:77:7d:a9:71:fe:2f:0c:db:
                    a3:18:d5:c7:04:32:b0:06:58:24:28:7a:21:a6:bb:
                    39:5a:4e:ad:ba:09:bd:a7:2f:e1:83:9b:8e:75:bf:
                    74:60:ba:c1:e4:62:6b:d3:6e:d0:30:9b:a0:22:5f:
                    cd:6c:e0:78:14:71:fe:74:44:28:c0:3e:f5:dd:60:
                    04:f5:24:e7:2f:4d:ac:6f:8d:bb:ab:bc:e1:e5:f7:
                    6e:84:56:5c:15:4d:63:77:6b:6e:77:d1:25:a6:65:
                    f0:28:06:b4:83:09:0d:02:d9:dc:78:c7:70:70:c1:
                    fe:d5:a5:df:0a:87:b7:c4:d2:5d:1f:f5:e2:35:13:
                    b0:43:ce:8a:c3:2c:c5:7d:b7:34:be:64:e0:00:4d:
                    b6:39:2d:f4:89:07:5d:7f:6d:fd:17:4c:48:b8:79:
                    e6:7d:ef:79:dd:1f:01:24:5e:1b:76:f2:e0:d6:56:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1D:F6:6B:B8:FB:5B:CB:96:1B:A0:3F:93:7E:CC:4B:17:78:33:9E
            X509v3 Authority Key Identifier:
                keyid:44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a613030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:37:5e:3b:10:ef:72:3d:aa:5f:b5:c8:fa:8d:77:51:d2:29:
         51:d7:ae:32:f2:0f:bd:54:71:b8:fc:0b:71:8f:c2:d7:81:e1:
         22:0d:b1:29:c0:b7:c6:e8:c4:84:7a:84:02:45:82:e0:b3:f9:
         0b:d6:23:0e:d2:f3:fa:ad:7f:58:64:d4:bb:b5:a5:aa:d0:2f:
         57:04:70:cf:f1:f0:a6:30:b5:94:7e:47:41:1d:33:da:0b:fe:
         73:44:ef:17:49:5a:c3:32:cc:fa:0e:df:33:65:a7:a6:a7:2a:
         1e:d5:6a:ad:0a:9b:5e:de:ae:18:7b:a5:97:05:3e:37:cb:6b:
         5f:35:b1:c9:33:64:b7:30:61:39:87:7e:22:d2:47:1f:db:5a:
         91:69:57:a5:2b:00:99:79:53:26:9c:43:70:a3:dc:68:19:ee:
         76:98:ef:e5:55:6c:d9:45:01:09:96:55:a4:4b:a5:e1:c3:f6:
         c7:a4:25:66:2b:12:ad:4c:ee:79:c2:7c:8b:d4:54:21:f9:2a:
         a0:22:14:98:76:a3:3e:b6:a3:3a:79:c2:f5:62:0b:93:cf:78:
         e6:28:5a:ac:16:48:cc:d0:15:d6:79:1e:b6:d2:bc:c8:6d:25:
         d4:b0:59:76:80:c9:99:a7:c8:38:65:5a:17:1e:1a:6c:6d:f3:
         d8:60:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:36:02 2025 by rpki-client