This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383132303a3a2f34332d3433203d3e20323634353039.roa
File:                     323830343a323062343a383132303a3a2f34332d3433203d3e20323634353039.roa (raw, json)
Hash identifier:          ER059z9Yx4AbpNKmMPJjjpUIEeiYLtLvIaUyjIDM4ZA=
Subject key identifier:   FC:8C:4D:E1:15:B0:8E:7C:0F:17:44:62:FC:82:23:42:B9:7C:6D:81
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       452DFAE079A156DE34C64ECDF6022F83A199939A
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383132303a3a2f34332d3433203d3e20323634353039.roa
Signing time:             Tue 25 Nov 2025 11:51:04 +0000
ROA not before:           Tue 25 Nov 2025 11:46:04 +0000
ROA not after:            Tue 24 Nov 2026 11:51:04 +0000
asID:                     264509
IP address blocks:        2804:20b4:8120::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2d:fa:e0:79:a1:56:de:34:c6:4e:cd:f6:02:2f:83:a1:99:93:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Nov 25 11:46:04 2025 GMT
            Not After : Nov 24 11:51:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:5f:01:0b:35:25:a3:9f:a8:42:49:7e:6c:
                    38:17:a0:8c:22:74:7e:de:81:50:33:71:68:0e:1b:
                    1f:16:ee:56:fc:43:98:ca:04:2a:21:ec:45:74:8b:
                    6d:67:f5:d3:29:c4:63:0e:69:09:06:4c:92:42:5a:
                    a4:2c:b1:81:59:00:38:a6:c2:4f:41:79:78:77:88:
                    f1:41:e0:06:6e:9b:ed:2b:00:e3:29:b2:6e:4c:7b:
                    96:b6:9c:5a:ac:08:a0:cd:e2:60:c7:81:a0:de:6a:
                    ad:19:8a:ba:65:12:66:f3:02:b3:7d:51:54:59:04:
                    b0:ea:c5:8a:b8:3a:9c:7c:cf:78:96:fe:2c:7f:6c:
                    65:87:60:4b:b6:50:c3:25:8c:85:79:78:ff:b6:a7:
                    01:90:e7:25:66:73:e8:60:f8:bb:d2:10:b3:92:80:
                    ec:4d:8a:de:08:fc:24:db:16:aa:64:39:90:42:16:
                    8e:f9:5a:4b:6f:78:3d:d6:01:38:1f:9e:53:a1:d8:
                    bf:59:3f:2b:34:c8:b9:9f:b3:df:cb:74:0a:13:ff:
                    06:2d:88:47:08:55:cb:60:76:76:7a:e4:2b:59:c6:
                    bb:25:46:96:f8:c4:9c:c9:70:fe:eb:da:61:89:a0:
                    9f:a0:be:6c:bb:83:77:18:d6:17:97:f0:ea:c5:f3:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8C:4D:E1:15:B0:8E:7C:0F:17:44:62:FC:82:23:42:B9:7C:6D:81
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383132303a3a2f34332d3433203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8120::/43

    Signature Algorithm: sha256WithRSAEncryption
         3a:91:23:01:9d:2f:60:ee:cd:dd:be:16:33:69:79:2e:8f:83:
         44:37:79:ae:1d:8d:c8:53:2f:f0:a2:0a:a1:e6:a8:7d:90:7f:
         66:29:3b:f3:31:3d:39:c1:26:b3:6a:b8:45:29:65:f8:43:97:
         07:4d:59:2d:d4:e5:b1:45:5a:f5:c7:85:b8:aa:5e:bd:b9:7f:
         41:0e:e4:11:e3:d1:fc:5c:9a:e8:71:86:04:e6:6c:2c:7e:d6:
         1e:d3:34:7e:6a:cd:ff:75:a7:5d:c8:52:eb:f6:23:a4:5e:52:
         10:78:29:c3:d1:0f:66:b8:37:26:af:94:5d:6d:ff:9b:a5:a8:
         7b:e0:70:62:55:a9:76:62:c2:f3:28:54:a3:31:2b:ad:19:f9:
         e8:9e:8e:2c:b6:4c:cb:7a:ba:e5:bf:71:d4:c8:f9:7a:85:20:
         7c:4f:24:12:fc:0c:96:d2:1d:40:4b:0b:8b:6c:89:9d:21:96:
         a1:65:d4:88:26:e0:a2:2f:72:b8:3b:fe:b0:47:5f:98:e4:06:
         8c:db:55:25:30:d3:57:f3:bf:25:ed:a6:88:3e:a5:2b:cd:1b:
         7f:2e:b7:f2:f9:d7:81:2e:04:bb:60:4c:e6:57:1c:0e:09:62:
         2f:ee:fc:38:33:38:22:0f:18:19:d3:62:92:33:bb:57:02:2b:
         8d:2f:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----