This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383036303a3a2f34342d3434203d3e20323634353039.roa
File:                     323830343a323062343a383036303a3a2f34342d3434203d3e20323634353039.roa (raw, json)
Hash identifier:          pvGyyoK+z+s7K9UTWiSWPkwWCRd6H24iIj08LvYWCgE=
Subject key identifier:   42:9D:39:7B:8F:95:FC:CC:13:9E:04:C5:7E:20:3E:41:BC:12:8A:A1
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       2EFBE4C50B6EAF523816FF1091C6AAB1CD2D4A1A
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383036303a3a2f34342d3434203d3e20323634353039.roa
Signing time:             Sun 23 Nov 2025 16:00:00 +0000
ROA not before:           Sun 23 Nov 2025 15:55:00 +0000
ROA not after:            Sun 22 Nov 2026 16:00:00 +0000
asID:                     264509
IP address blocks:        2804:20b4:8060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fb:e4:c5:0b:6e:af:52:38:16:ff:10:91:c6:aa:b1:cd:2d:4a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Nov 23 15:55:00 2025 GMT
            Not After : Nov 22 16:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:10:47:17:d0:06:26:57:24:13:84:5c:dc:
                    d7:de:fe:a4:ec:60:f0:c6:37:61:f5:bc:1a:68:af:
                    03:42:04:7e:76:90:33:19:c9:c6:4a:50:5e:22:61:
                    3b:2b:ca:8c:a1:3f:eb:09:2f:5a:30:e4:b2:89:a5:
                    7e:7e:a4:e5:9d:bf:ab:83:99:bf:54:d1:62:b1:88:
                    bd:d1:89:f1:5d:2d:a2:69:21:6f:c3:b1:4e:4a:c7:
                    7e:5b:9d:ef:9c:e4:6b:c6:3b:82:5e:7a:0a:55:d6:
                    73:dc:d0:13:c9:b7:fa:d4:a7:df:e2:c7:8b:59:30:
                    b2:d2:9d:86:9a:6b:46:e7:88:63:8f:21:90:f3:8b:
                    cb:50:bf:08:87:cd:23:df:82:1c:5a:d0:d6:a5:47:
                    8c:2d:f7:d1:26:1b:ce:14:09:b9:47:ba:38:83:c2:
                    63:95:57:a5:38:de:63:96:99:d3:d6:19:8b:4a:10:
                    48:d6:94:f1:20:ba:57:86:f6:35:21:f9:1c:d5:f5:
                    9e:08:85:06:90:b1:11:08:02:12:10:10:be:8b:9b:
                    3e:5f:df:73:f5:19:f5:24:76:41:90:53:33:35:2e:
                    bc:e0:8c:aa:41:56:36:5a:25:e6:7e:4d:95:18:b5:
                    99:ab:3a:5c:ce:a3:16:a1:29:35:f4:b5:c3:f4:49:
                    ec:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9D:39:7B:8F:95:FC:CC:13:9E:04:C5:7E:20:3E:41:BC:12:8A:A1
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383036303a3a2f34342d3434203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8060::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:da:6e:5d:fd:f2:6e:74:0d:35:77:74:42:21:09:16:61:83:
         99:b1:7e:58:41:27:fa:83:ad:b9:ae:b9:63:21:61:e3:ce:80:
         a6:d9:98:66:17:56:67:ba:8f:87:7d:07:86:27:ed:2a:08:84:
         fa:db:a4:c4:e4:8c:f8:33:b8:76:c0:67:5a:89:4e:a9:9f:d4:
         8e:bb:54:e1:22:26:65:bf:df:b0:97:ef:05:cb:23:1c:a8:52:
         35:cb:4e:0a:01:0e:6d:42:e5:eb:64:68:5a:e1:ed:d8:85:35:
         94:70:6c:55:c3:c4:e1:51:11:38:ff:d5:ba:bc:e0:35:a6:21:
         e6:9c:c2:88:e6:7b:11:cb:12:e1:03:e6:d8:ac:d8:28:1b:b2:
         f0:fb:6d:8e:78:eb:20:88:d7:b5:99:7e:31:c5:fc:99:21:42:
         10:8b:48:85:c8:43:d8:d3:d0:92:75:a2:63:98:63:b4:c5:89:
         03:0d:13:75:b9:59:f7:d4:87:39:dd:15:c6:16:44:5d:bb:19:
         c4:aa:a6:fd:11:4f:91:80:96:57:74:e9:35:56:50:b9:f0:6f:
         08:27:67:03:dd:5f:eb:56:08:13:ce:59:03:08:bc:16:53:1e:
         a6:e3:32:e6:a8:09:e3:b5:00:ac:e4:e9:bf:8e:c0:1c:ca:ed:
         ea:75:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----