This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/323830343a336666303a3a2f33322d3332203d3e20323635393233.roa
File:                     323830343a336666303a3a2f33322d3332203d3e20323635393233.roa (raw, json)
Hash identifier:          n2aLfiA0MOPiE0dQgrx/PWO6ypK9Km67yOLk0BA0N7w=
Subject key identifier:   7E:A2:F1:FD:89:55:A5:57:6C:87:5A:55:9B:5B:53:2D:C0:44:6A:23
Certificate issuer:       /CN=56FA1262F260972F129A8C634E9B1017D011C283
Certificate serial:       426B97F8C9C5CD7AA5869692D537E9EC5EEA781B
Authority key identifier: 56:FA:12:62:F2:60:97:2F:12:9A:8C:63:4E:9B:10:17:D0:11:C2:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/323830343a336666303a3a2f33322d3332203d3e20323635393233.roa
Signing time:             Fri 12 Dec 2025 19:30:27 +0000
ROA not before:           Fri 12 Dec 2025 19:25:27 +0000
ROA not after:            Fri 11 Dec 2026 19:30:27 +0000
asID:                     265923
IP address blocks:        2804:3ff0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.crl
                          rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 08:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6b:97:f8:c9:c5:cd:7a:a5:86:96:92:d5:37:e9:ec:5e:ea:78:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56FA1262F260972F129A8C634E9B1017D011C283
        Validity
            Not Before: Dec 12 19:25:27 2025 GMT
            Not After : Dec 11 19:30:27 2026 GMT
        Subject: CN=7EA2F1FD8955A5576C875A559B5B532DC0446A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:12:98:72:de:f9:dd:d6:53:38:22:ec:15:
                    30:a0:74:66:51:64:d1:20:69:61:a3:ab:39:95:31:
                    ac:41:04:90:01:4c:f3:c3:c5:77:65:80:67:f0:2a:
                    c5:38:01:92:12:a7:d3:44:fb:d2:31:ec:9b:b1:d2:
                    40:85:c2:69:ca:15:a5:18:f9:6a:e4:1c:d6:14:83:
                    91:40:91:f6:2e:2d:13:6b:cd:dd:31:41:b0:8b:11:
                    dd:33:4d:7a:34:a7:86:69:d7:8d:7a:f8:f9:94:1d:
                    fb:1a:d2:cf:21:1a:ef:d4:e8:a7:bc:8d:ee:0c:19:
                    cb:97:86:0b:59:f4:97:7a:f6:a5:b0:fb:c2:bb:30:
                    db:16:72:c5:de:98:78:00:3c:82:4c:8d:13:fc:0d:
                    63:27:72:cc:b6:4a:a4:00:cc:21:39:80:f1:30:4d:
                    99:02:d3:d9:29:d7:82:e7:8d:8c:2e:02:f9:43:f4:
                    8a:28:58:b7:89:f0:d8:27:39:09:c7:cb:be:ff:71:
                    72:dd:26:bd:30:9b:21:b1:0e:19:da:6c:9c:a2:09:
                    00:43:a9:a4:c8:fe:dd:0d:ac:f3:35:ec:2b:bc:70:
                    9e:fe:55:95:59:e2:35:af:2a:cd:cb:fe:7b:ff:eb:
                    4b:ec:2f:16:9c:b7:3f:3a:00:a2:bd:97:04:e3:22:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A2:F1:FD:89:55:A5:57:6C:87:5A:55:9B:5B:53:2D:C0:44:6A:23
            X509v3 Authority Key Identifier:
                keyid:56:FA:12:62:F2:60:97:2F:12:9A:8C:63:4E:9B:10:17:D0:11:C2:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/323830343a336666303a3a2f33322d3332203d3e20323635393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ff0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:a7:65:79:0e:39:67:0b:72:3c:71:cd:7d:d8:dc:19:3a:2e:
         c3:dd:fc:5c:67:51:b8:de:6e:11:e3:52:5f:99:e0:b1:b3:a7:
         f5:4d:dc:22:f2:3a:51:74:67:30:ef:ff:f3:1f:4d:4d:71:1b:
         b7:d5:d5:25:10:4a:0f:92:61:7f:c3:76:f4:09:4a:e7:f0:0e:
         2e:97:51:0f:14:ca:92:a5:67:4f:24:28:47:a6:70:ec:85:98:
         4d:20:2c:a6:66:1a:ba:b7:1f:ee:4e:c2:14:b1:fa:1d:55:8f:
         65:5b:0d:78:37:80:05:bc:9b:b0:36:d9:e0:a9:81:f5:8c:c2:
         43:44:94:6d:6c:34:89:e4:ba:61:48:c2:ab:53:7d:83:f9:0d:
         6d:b5:f1:29:0d:53:68:36:0e:fd:5a:fb:b2:e9:72:98:e7:d8:
         94:1b:ce:6e:c2:d5:a4:72:12:32:20:f3:d6:39:48:02:94:e4:
         f4:b0:d7:0a:49:f3:04:0d:4e:2c:5e:36:b1:a6:13:ff:d7:c2:
         e7:17:6d:04:2a:02:48:f6:88:fe:2f:19:9b:0b:88:30:7a:07:
         1f:ad:0f:e3:51:f3:22:50:68:21:cb:52:ff:1d:9f:ec:a0:9f:
         ec:25:69:5b:91:bb:75:d8:92:79:3f:52:3f:1f:40:44:81:79:
         ea:eb:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:06:55 2025 by rpki-client