This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a633030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a633030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          IsE2GOevef/r2aeCmKpKfXsIoZpiWWw6t99e3OOTtqg=
Subject key identifier:   75:F9:95:F5:FB:FE:5D:5E:49:3F:FD:C2:12:AB:7D:A0:EB:F3:CD:E6
Certificate issuer:       /CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
Certificate serial:       110798666AE61D76CE2D1B442E1FE05F19E42C5D
Authority key identifier: 44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a633030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Thu 11 Dec 2025 19:55:52 +0000
ROA not before:           Thu 11 Dec 2025 19:50:52 +0000
ROA not after:            Thu 10 Dec 2026 19:55:52 +0000
asID:                     269388
IP address blocks:        2804:63dc:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:07:98:66:6a:e6:1d:76:ce:2d:1b:44:2e:1f:e0:5f:19:e4:2c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
        Validity
            Not Before: Dec 11 19:50:52 2025 GMT
            Not After : Dec 10 19:55:52 2026 GMT
        Subject: CN=75F995F5FBFE5D5E493FFDC212AB7DA0EBF3CDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:f0:65:31:de:72:fb:d6:08:ec:77:21:d1:
                    2c:40:42:15:75:14:c4:39:5e:2a:16:17:8b:d4:b4:
                    1b:85:5a:1a:b3:25:4d:26:63:8d:ac:0c:b4:48:8d:
                    7b:9a:d6:fa:b9:f9:54:62:df:66:72:55:ab:6d:3c:
                    17:7d:19:fc:5f:df:d6:65:21:10:00:d9:93:cf:f7:
                    65:06:f7:96:68:7d:12:f9:28:04:75:70:8f:48:5b:
                    86:80:b6:e5:f9:b2:76:e0:6a:d0:7a:05:c2:64:9e:
                    43:9a:f8:81:97:23:df:71:c3:69:be:c8:cc:d8:af:
                    ac:12:6e:04:ae:52:30:86:37:fe:1b:48:bf:63:94:
                    39:c7:15:04:4b:8c:d0:cd:e8:25:9b:3b:02:de:11:
                    a4:6a:d8:b5:ae:87:7b:e6:e4:b6:26:a0:17:e5:e7:
                    a8:df:3a:49:c6:c1:d8:4f:a4:20:98:77:64:ad:f1:
                    f5:b8:85:01:86:35:e3:c8:bf:91:d5:2c:a0:ff:aa:
                    68:0d:92:ed:74:78:09:d1:12:f5:c7:b6:cd:f8:d6:
                    46:1c:43:8b:88:fd:3e:ab:b3:c1:30:4b:5d:b8:72:
                    16:fe:f5:e3:59:58:4e:99:e6:6e:9d:67:ff:25:40:
                    47:cb:26:70:a1:12:7c:83:27:39:5e:aa:93:16:e0:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F9:95:F5:FB:FE:5D:5E:49:3F:FD:C2:12:AB:7D:A0:EB:F3:CD:E6
            X509v3 Authority Key Identifier:
                keyid:44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a633030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:49:57:07:29:fb:0d:9c:92:98:6b:d3:78:d0:88:29:31:0e:
         8b:c3:de:05:62:b3:5a:ee:34:ad:12:43:68:67:17:e7:3c:9a:
         d2:fd:72:3b:74:58:47:69:19:94:04:66:bf:74:c5:48:a4:7e:
         20:3c:a9:81:10:e7:99:43:a0:d7:d6:dd:c9:57:bb:8c:05:cf:
         e2:5f:cd:61:75:49:c7:4f:49:40:c7:c1:fe:b4:54:20:8a:7f:
         b8:a0:6b:22:89:c1:ac:1f:86:44:ff:19:99:99:0d:d1:d3:7d:
         63:25:c4:10:0b:42:1c:ab:5c:4e:fe:5b:ad:40:5d:a9:ae:61:
         de:5a:c9:6c:5f:ee:3b:0e:3c:6b:13:ed:07:fa:ec:65:89:76:
         8a:65:36:3f:bd:86:d4:9b:a2:c3:73:0d:58:84:cd:9e:8d:5b:
         6c:c4:69:c6:d1:b0:fd:ff:28:6e:76:59:ef:8d:92:6e:45:15:
         b5:b7:30:45:2c:0b:bb:a1:83:39:06:45:8b:8c:58:f7:fd:27:
         37:28:3a:b2:0f:ba:63:69:bb:f0:71:1f:af:a2:3e:80:a2:55:
         41:45:95:c6:6a:e0:cd:48:32:77:90:88:43:57:a7:94:0c:73:
         70:ca:43:f4:e9:75:63:79:ad:90:53:d9:f9:50:f7:de:83:cc:
         47:e6:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:31:56 2025 by rpki-client