This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a653030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a653030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          TFM177W5ufU+xul7EJsUcpga1BbfoMx+hjZRkGSKhUo=
Subject key identifier:   86:94:3D:6D:FD:FC:C2:97:7E:E9:F4:4B:77:4D:0D:0B:E4:BB:7E:77
Certificate issuer:       /CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
Certificate serial:       59C68100D4CD2D8F6442DE8AB17A951C1DC4DB8B
Authority key identifier: 44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a653030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Thu 11 Dec 2025 19:56:07 +0000
ROA not before:           Thu 11 Dec 2025 19:51:07 +0000
ROA not after:            Thu 10 Dec 2026 19:56:07 +0000
asID:                     269388
IP address blocks:        2804:63dc:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c6:81:00:d4:cd:2d:8f:64:42:de:8a:b1:7a:95:1c:1d:c4:db:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
        Validity
            Not Before: Dec 11 19:51:07 2025 GMT
            Not After : Dec 10 19:56:07 2026 GMT
        Subject: CN=86943D6DFDFCC2977EE9F44B774D0D0BE4BB7E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:1f:63:2f:5f:3e:ab:b5:1c:33:a2:bd:0e:
                    5f:26:b8:dd:ac:8e:4a:3e:8e:36:32:fa:5b:3f:3d:
                    09:cd:7a:07:d6:ce:f3:e2:ea:42:53:da:ca:3b:9e:
                    de:5d:0a:c9:d5:d5:4b:88:0d:8a:47:3c:a3:28:e3:
                    84:c7:aa:98:ac:29:28:82:d0:50:86:b4:1c:4e:c8:
                    4b:8c:4a:cc:0a:bd:e9:e8:f5:08:11:75:a0:8e:a7:
                    9b:3b:26:0a:ba:33:db:93:fe:b0:35:f9:aa:fe:18:
                    b9:f6:83:91:20:ff:14:59:88:5a:4c:75:8f:75:b9:
                    d7:b7:70:09:19:4a:3d:8f:c8:28:e2:93:17:75:88:
                    d3:72:88:97:b4:7a:a0:8b:a4:39:99:68:56:e3:f2:
                    a8:82:bb:54:fb:00:ea:82:8a:a6:64:2a:ac:0a:61:
                    6b:7d:9c:cd:94:7e:87:36:4d:6d:7f:9c:ce:8f:fe:
                    90:c4:82:71:a4:92:a0:b4:57:f1:f9:be:be:fe:b6:
                    1e:bc:f5:87:e6:67:68:50:8f:e4:01:94:fb:ad:17:
                    eb:14:ad:06:9a:70:44:c4:47:14:1a:a4:43:d1:2b:
                    88:d9:6d:ac:23:9b:2a:e2:d8:f2:17:ff:e2:f1:d0:
                    4b:98:18:5d:0c:c6:9d:3d:e6:5b:d2:e3:76:11:88:
                    3d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:94:3D:6D:FD:FC:C2:97:7E:E9:F4:4B:77:4D:0D:0B:E4:BB:7E:77
            X509v3 Authority Key Identifier:
                keyid:44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a653030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:cb:94:9d:1d:78:8f:fe:b8:56:4d:71:c8:49:1b:14:1a:f4:
         ed:98:e3:d5:f9:c3:f7:eb:9f:bc:82:48:1c:50:95:81:46:30:
         9f:b7:ba:d8:2d:d7:ce:5b:7e:85:4b:b4:b7:21:fd:53:ce:f0:
         27:93:10:d9:00:d4:b3:c2:6b:4a:1b:e5:44:fe:bc:5a:5a:0b:
         2a:fe:f1:46:3f:80:4d:6e:7d:8e:28:6e:e9:bf:07:03:29:79:
         1b:c8:d4:a7:7d:a3:55:53:29:41:c0:be:d7:9e:be:ec:61:05:
         2b:d5:6b:92:9d:3f:71:e2:ba:2d:43:36:0a:0b:61:17:58:cc:
         f2:30:3e:3f:ff:fc:30:6c:fd:a1:84:2c:79:43:cc:67:d7:31:
         30:9e:23:08:a3:b6:83:02:b1:0a:0f:79:39:a6:04:1a:2c:88:
         0e:3e:a0:87:0d:e8:12:44:38:2b:18:65:70:1b:6b:11:75:40:
         dd:2c:2b:89:75:9c:85:13:62:fc:fe:ae:94:c7:5c:31:fd:bf:
         27:e1:ac:9b:f6:ce:d8:78:ec:d4:00:68:35:e5:03:2b:34:39:
         4d:56:48:e0:7f:ae:7b:92:6e:77:3e:dd:aa:e1:20:c8:30:a0:
         7c:d3:ad:80:96:a4:aa:c7:87:97:17:b1:f7:06:6b:7f:7b:75:
         8b:79:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:35:58 2025 by rpki-client