This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383035303a3a2f34342d3434203d3e20323634353039.roa
File:                     323830343a323062343a383035303a3a2f34342d3434203d3e20323634353039.roa (raw, json)
Hash identifier:          VNrrYcveaoy/hrdqnp0SUXYP5y+MxskutIBaBy7SWdw=
Subject key identifier:   6D:40:B5:E9:ED:F7:2A:97:7E:16:9E:A0:32:5A:EC:1E:9A:C4:C9:89
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       258B06B43A4B1FAE94F56510CB7A11A511FCC6D3
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383035303a3a2f34342d3434203d3e20323634353039.roa
Signing time:             Sun 23 Nov 2025 16:00:00 +0000
ROA not before:           Sun 23 Nov 2025 15:55:00 +0000
ROA not after:            Sun 22 Nov 2026 16:00:00 +0000
asID:                     264509
IP address blocks:        2804:20b4:8050::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8b:06:b4:3a:4b:1f:ae:94:f5:65:10:cb:7a:11:a5:11:fc:c6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Nov 23 15:55:00 2025 GMT
            Not After : Nov 22 16:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:a5:e5:5c:ce:aa:d4:fd:23:39:48:f6:8f:
                    06:d1:0f:e8:20:91:97:c8:7a:f3:82:e4:5b:6c:65:
                    80:c0:16:a4:83:eb:50:02:7b:0d:79:41:65:1f:7c:
                    96:8a:f8:bf:d8:8b:2c:41:69:7e:98:dc:f2:c2:27:
                    97:6d:db:b2:0d:dd:1d:55:c6:3e:06:0b:7e:9b:7f:
                    ac:40:6f:17:0e:2c:81:d9:7e:5c:26:d5:83:ba:26:
                    22:cc:4c:ee:89:5b:cd:80:65:3c:12:40:81:43:d0:
                    a1:b7:70:ef:a4:f8:9f:5f:d7:e2:6c:29:44:56:35:
                    5c:c3:62:fa:39:b7:1a:61:ea:d3:08:77:e1:4d:4e:
                    e6:c9:8d:12:6d:08:54:e6:2c:82:8c:1b:4d:58:f1:
                    ad:ed:44:98:8e:56:95:14:ea:c1:47:74:c0:aa:72:
                    1d:09:9c:a0:18:26:dd:e9:22:93:7d:ad:e8:90:d4:
                    78:87:ad:91:a9:cc:6c:7a:9b:47:3e:76:e1:62:d4:
                    f1:e6:a4:f8:34:bd:10:2a:be:05:bc:65:ac:cd:a3:
                    46:e8:04:b6:4f:12:d3:a8:c5:f9:3b:c0:ef:c4:d5:
                    c6:3c:d0:4e:38:bf:d0:6f:66:7b:0f:4b:c4:7f:83:
                    78:b8:ca:3e:e5:d8:b3:63:aa:a8:18:7c:5f:d3:b3:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:40:B5:E9:ED:F7:2A:97:7E:16:9E:A0:32:5A:EC:1E:9A:C4:C9:89
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383035303a3a2f34342d3434203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:81:ec:7b:20:a4:51:a8:92:d0:6f:47:df:0a:5d:44:52:57:
         a7:71:25:61:3a:2a:67:ba:82:a7:b4:fc:5d:77:13:42:b7:47:
         37:01:ff:8c:b0:51:e0:e7:5f:f5:54:86:b3:e0:34:96:fb:95:
         61:8a:2a:a3:f4:31:76:b7:7c:0a:cb:fc:8d:93:e7:f7:96:11:
         d1:45:4d:00:74:30:0f:7a:ce:28:46:78:14:74:b8:d7:97:9c:
         48:a0:11:db:da:5b:93:37:8b:77:4c:38:f0:5e:ac:6f:14:81:
         59:15:ab:23:53:1e:d8:27:90:f3:46:4b:73:8b:07:4f:37:87:
         03:79:f5:68:97:7c:8d:50:13:c4:73:f8:9e:a3:ea:6a:b4:a2:
         57:96:32:d2:a8:81:3b:62:6d:d0:04:c5:c6:77:6b:8f:72:a5:
         f9:4a:d8:04:64:74:7a:01:af:96:94:ca:5c:ba:e9:1d:aa:d2:
         c1:cb:14:c6:18:d9:22:0a:76:59:af:04:98:1d:c6:10:69:4e:
         be:18:00:a4:d4:7e:1b:ed:35:45:9a:c7:52:db:62:9b:a1:9f:
         54:c4:44:c4:8a:ab:cf:8a:0f:9d:bc:92:0e:80:c1:48:0e:1b:
         d7:9b:e8:18:b4:64:a1:74:8f:03:ad:df:ae:01:44:91:e2:d2:
         4b:08:67:57
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUJYsGtDpLH66U9WUQy3oRpRH8xtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3RkMyNzY3OUM1QzU4RDFBMTkwNDg3NEUzNTAwMEI3
NEM3MUU3ODAeFw0yNTExMjMxNTU1MDBaFw0yNjExMjIxNjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjRGMEE1RTU1Q0NFQUFENEZE
MjMzOTQ4RjY4RjA2RDEwRkU4MjA5MTk3Qzg3QUYzODJFNDVCNkM2NTgwQzAxNkE0
ODNFQjUwMDI3QjBENzk0MTY1MUY3Qzk2OEFGOEJGRDg4QjJDNDE2OTdFOThEQ0Yy
QzIyNzk3NkREQkIyMERERDFENTVDNjNFMDYwQjdFOUI3RkFDNDA2RjE3MEUyQzgx
RDk3RTVDMjZENTgzQkEyNjIyQ0M0Q0VFODk1QkNEODA2NTNDMTI0MDgxNDNEMEEx
Qjc3MEVGQTRGODlGNUZEN0UyNkMyOTQ0NTYzNTVDQzM2MkZBMzlCNzFBNjFFQUQz
MDg3N0UxNEQ0RUU2Qzk4RDEyNkQwODU0RTYyQzgyOEMxQjRENThGMUFERUQ0NDk4
OEU1Njk1MTRFQUMxNDc3NEMwQUE3MjFEMDk5Q0EwMTgyNkRERTkyMjkzN0RBREU4
OTBENDc4ODdBRDkxQTlDQzZDN0E5QjQ3M0U3NkUxNjJENEYxRTZBNEY4MzRCRDEw
MkFCRTA1QkM2NUFDQ0RBMzQ2RTgwNEI2NEYxMkQzQThDNUY5M0JDMEVGQzRENUM2
M0NEMDRFMzhCRkQwNkY2NjdCMEY0QkM0N0Y4Mzc4QjhDQTNFRTVEOEIzNjNBQUE4
MTg3QzVGRDNCMzQwMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtPCl5VzOqtT9IzlI9o8G0Q/oIJGXyHrzguRbbGWAwBakg+tQAnsN
eUFlH3yWivi/2IssQWl+mNzywieXbduyDd0dVcY+Bgt+m3+sQG8XDiyB2X5cJtWD
uiYizEzuiVvNgGU8EkCBQ9Cht3DvpPifX9fibClEVjVcw2L6ObcaYerTCHfhTU7m
yY0SbQhU5iyCjBtNWPGt7USYjlaVFOrBR3TAqnIdCZygGCbd6SKTfa3okNR4h62R
qcxseptHPnbhYtTx5qT4NL0QKr4FvGWszaNG6AS2TxLTqMX5O8DvxNXGPNBOOL/Q
b2Z7D0vEf4N4uMo+5dizY6qoGHxf07NAGwIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FG1Atent9yqXfhaeoDJa7B6axMmJMB8GA1UdIwQYMBaAFMZ/wnZ5xcWNGhkEh041
AAt0xx54MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNHNGU1c1VzQnIyQUhT
dzd3Z05TaW5WeHdXeHFuUW9aQmo2Nnh4NGtCWW1DLzEvQzY3RkMyNzY3OUM1QzU4
RDFBMTkwNDg3NEUzNTAwMEI3NEM3MUU3OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DNjdGQzI3Njc5QzVDNThEMUExOTA0ODc0RTM1MDAwQjc0Qzcx
RTc4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRzRlNXNVc0JyMkFIU3c3d2dO
U2luVnh3V3hxblFvWkJqNjZ4eDRrQlltQy8xLzMyMzgzMDM0M2EzMjMwNjIzNDNh
MzgzMDM1MzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMjM2MzQzNTMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQoBCC0gFAwDQYJKoZIhvcNAQELBQADggEBAA6B7HsgpFGoktBvR98K
XURSV6dxJWE6Kme6gqe0/F13E0K3RzcB/4ywUeDnX/VUhrPgNJb7lWGKKqP0MXa3
fArL/I2T5/eWEdFFTQB0MA96zihGeBR0uNeXnEigEdvaW5M3i3dMOPBerG8UgVkV
qyNTHtgnkPNGS3OLB083hwN59WiXfI1QE8Rz+J6j6mq0oleWMtKogTtibdAExcZ3
a49ypflK2ARkdHoBr5aUyly66R2q0sHLFMYY2SIKdlmvBJgdxhBpTr4YAKTUfhvt
NUWax1LbYpuhn1TERMSKq8+KD528kg6AwUgOG9eb6Bi0ZKF0jwOt364BRJHi0ksI
Z1c=
-----END CERTIFICATE-----