This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/323830343a323237383a3a2f33322d313238203d3e20323634313033.roa
File:                     323830343a323237383a3a2f33322d313238203d3e20323634313033.roa (raw, json)
Hash identifier:          mse5/ebwV4Ch9nOZ3Ot47CcdAzdhJG8YwDfF9EXOMD4=
Subject key identifier:   4A:1C:4B:1D:A7:0B:E0:B1:03:4C:D0:B6:3E:63:80:51:0C:F0:08:52
Certificate issuer:       /CN=F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8
Certificate serial:       34B5AD29746511BD50AFC1533BF6104B04B48752
Authority key identifier: F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/323830343a323237383a3a2f33322d313238203d3e20323634313033.roa
Signing time:             Tue 11 Nov 2025 18:09:35 +0000
ROA not before:           Tue 11 Nov 2025 18:04:35 +0000
ROA not after:            Tue 10 Nov 2026 18:09:35 +0000
asID:                     264103
IP address blocks:        2804:2278::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.crl
                          rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b5:ad:29:74:65:11:bd:50:af:c1:53:3b:f6:10:4b:04:b4:87:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8
        Validity
            Not Before: Nov 11 18:04:35 2025 GMT
            Not After : Nov 10 18:09:35 2026 GMT
        Subject: CN=4A1C4B1DA70BE0B1034CD0B63E6380510CF00852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:60:78:44:26:a2:77:0a:35:f5:3a:e4:b1:
                    c5:22:c2:1f:90:0e:01:9a:7b:3e:1d:f3:a3:81:04:
                    d6:7d:0c:49:f9:9e:a6:85:c0:4d:8d:16:b2:a6:07:
                    6c:64:41:f8:56:90:a9:c9:26:2a:32:16:42:ba:9f:
                    21:48:e6:84:eb:a0:8b:de:01:32:0d:97:14:ba:f8:
                    37:fa:bb:1d:2f:ef:5e:91:3d:93:b2:f8:72:f1:0e:
                    a3:0f:c3:e0:71:ec:10:cb:62:3f:ad:6e:c6:d7:ae:
                    3d:d0:5b:5a:d3:c5:fd:68:fd:71:2d:a7:b0:f7:f9:
                    ae:1e:3b:a1:7a:df:61:07:98:06:9f:32:be:d1:94:
                    4e:23:f6:44:2e:1a:e7:cd:a6:d3:66:b9:10:29:ef:
                    2b:9d:62:a1:2a:47:81:de:37:31:4d:0f:bc:7d:6a:
                    fd:7f:32:8a:94:84:88:43:23:b1:fb:9a:a3:69:5a:
                    03:28:94:63:3f:3b:ab:2a:0f:67:63:b5:d8:68:ae:
                    16:8e:35:5a:b0:05:61:df:73:0d:6e:65:86:e7:80:
                    79:ba:66:af:2b:ec:53:e1:8c:cc:53:a6:7c:2c:76:
                    60:69:1a:5d:16:81:9d:6d:c0:0c:78:71:6c:e9:35:
                    3f:bd:df:90:81:b8:76:8a:53:12:1b:37:67:64:ba:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:4B:1D:A7:0B:E0:B1:03:4C:D0:B6:3E:63:80:51:0C:F0:08:52
            X509v3 Authority Key Identifier:
                keyid:F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/323830343a323237383a3a2f33322d313238203d3e20323634313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2278::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:56:1e:70:b5:37:52:c4:3d:33:41:7d:8b:49:74:db:a3:d5:
         69:68:db:3e:b4:ae:06:6d:c0:da:93:c1:ac:bb:67:ca:46:b6:
         e9:99:8d:94:47:81:db:7c:70:66:e0:53:cc:5a:b0:d8:74:3d:
         6a:cb:86:15:a1:18:1e:82:80:26:27:cf:81:40:58:60:72:4a:
         c1:fc:d2:cd:30:0f:03:ab:91:23:2e:be:f5:61:6c:1d:54:79:
         e9:85:88:ef:b4:ef:22:b9:8c:71:08:3d:01:2d:19:4e:ca:7a:
         6d:bf:8e:0c:25:db:ca:08:28:13:28:16:7f:ae:db:b8:df:9c:
         20:08:fb:1e:6d:a4:bb:72:27:e3:4c:33:8c:b9:01:68:11:c2:
         a1:3e:93:33:0c:e6:e8:3d:15:e1:74:02:cb:b9:29:5e:0a:7d:
         9a:7d:77:ec:9a:92:51:01:fb:a7:74:1a:4e:b5:18:7e:21:5d:
         92:b6:de:cb:5b:9a:a0:bc:59:19:1f:3d:34:16:e3:9d:e3:6e:
         8e:10:91:6b:2b:de:b3:c8:f3:97:cd:b3:59:39:17:ca:b3:6f:
         32:74:b8:7a:bc:5d:6a:85:71:20:64:0b:c3:96:7f:88:7b:ce:
         71:6a:c6:aa:09:b8:2a:38:9d:10:da:c2:d4:75:ff:7d:aa:7b:
         5e:5f:74:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:55 2025 by rpki-client