This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a663030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a663030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          wJpgMy7kuTntxXNuYcmWy8xxon157hmCX8or5RUbS88=
Subject key identifier:   2C:DA:95:39:61:70:7F:08:EC:7C:5E:EB:63:12:D8:D9:EE:33:0F:9B
Certificate issuer:       /CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
Certificate serial:       5C236802E78111ADCC147D57700FCBB9EBC86379
Authority key identifier: 44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a663030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Thu 11 Dec 2025 19:56:18 +0000
ROA not before:           Thu 11 Dec 2025 19:51:18 +0000
ROA not after:            Thu 10 Dec 2026 19:56:18 +0000
asID:                     269388
IP address blocks:        2804:63dc:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:23:68:02:e7:81:11:ad:cc:14:7d:57:70:0f:cb:b9:eb:c8:63:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426F840AB62A6641638004D2D5DCF2DF128EE53
        Validity
            Not Before: Dec 11 19:51:18 2025 GMT
            Not After : Dec 10 19:56:18 2026 GMT
        Subject: CN=2CDA953961707F08EC7C5EEB6312D8D9EE330F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:40:4b:c5:6b:41:8c:4d:5d:42:3d:00:65:
                    b4:81:b1:b2:18:09:38:d9:36:67:7b:6a:40:fb:d8:
                    de:3d:66:ff:33:3e:3c:73:26:01:af:0a:9c:29:48:
                    55:75:a4:ed:07:50:40:ac:64:a0:bf:b8:23:fd:8a:
                    af:d4:1e:6e:0a:72:26:91:37:66:d0:56:4e:d8:34:
                    cc:e1:c8:bf:fc:b2:7c:21:69:21:37:b9:43:f1:10:
                    ae:b4:bb:52:45:8a:62:02:bb:e1:75:3c:ad:79:64:
                    60:a0:81:a3:ba:d1:6c:fd:22:ee:2f:8b:1e:46:9e:
                    f5:11:8b:49:b3:ad:94:d2:18:b5:36:01:16:e5:1e:
                    8d:25:8d:7c:cd:b3:ee:a3:27:7e:a2:b1:27:40:36:
                    f8:bd:ec:31:d9:d2:13:f0:6f:6f:fe:12:a8:64:5a:
                    65:0a:80:9c:cb:2b:1f:21:98:fe:b3:21:15:bd:56:
                    23:6a:6c:32:e4:da:c7:37:f5:4c:b9:84:95:fd:7d:
                    c7:40:72:e8:ed:db:eb:08:18:13:05:97:ac:c7:dd:
                    ee:da:9a:fb:7b:39:2a:61:e9:9d:bd:24:5a:50:9c:
                    df:45:9f:eb:a5:6f:63:0a:63:01:f5:ae:db:6c:ff:
                    21:c6:d2:d8:2a:3c:dd:56:4c:55:39:00:ef:fe:a9:
                    18:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DA:95:39:61:70:7F:08:EC:7C:5E:EB:63:12:D8:D9:EE:33:0F:9B
            X509v3 Authority Key Identifier:
                keyid:44:26:F8:40:AB:62:A6:64:16:38:00:4D:2D:5D:CF:2D:F1:28:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/4426F840AB62A6641638004D2D5DCF2DF128EE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4426F840AB62A6641638004D2D5DCF2DF128EE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a663030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:b4:a1:94:b9:97:4b:7d:92:eb:89:25:dd:01:fc:c1:d7:
         0e:a0:19:0b:38:47:5d:57:67:4c:92:45:9d:7a:0f:e2:13:8c:
         7e:5a:15:7d:f0:5a:cf:ae:7e:7c:c1:de:f9:c0:24:f7:c4:59:
         e5:12:a6:3c:c3:c3:97:84:f1:1e:d0:9e:78:bf:a9:63:03:95:
         94:10:58:02:e5:7b:a9:00:e3:ae:9a:cf:21:7d:db:e2:e9:ea:
         58:8a:c1:35:c6:dd:4e:06:5f:cf:c4:d6:2d:c5:b5:9c:79:15:
         bc:8e:0a:3a:67:2c:20:cb:73:16:cc:b3:47:4f:50:f1:f5:a2:
         a7:b9:b8:b5:a4:2b:42:fe:4a:b0:16:3d:1d:32:dc:8b:c4:a3:
         17:f4:e0:26:77:a4:80:56:38:46:fb:06:54:09:b5:c0:1c:48:
         5c:a6:b7:8b:ad:2b:79:1d:6e:53:c4:62:0e:1c:1d:97:9c:63:
         12:48:60:74:60:df:84:22:e4:d7:dd:41:6f:82:ec:f8:a9:81:
         81:67:fd:fb:be:27:76:cf:d0:7e:63:f5:e6:19:7d:86:c0:5c:
         61:95:b2:68:21:5d:b6:c2:53:ee:a5:c3:3e:8c:97:b4:87:2f:
         f2:6b:60:11:df:b0:02:95:dd:ac:e2:3b:2c:53:51:bb:21:7f:
         27:f0:b0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:31:59 2025 by rpki-client