This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/323830343a316261343a3a2f33322d313238203d3e203631373431.roa
File:                     323830343a316261343a3a2f33322d313238203d3e203631373431.roa (raw, json)
Hash identifier:          nvds+yZdSehnRewWMA5Fh2B1r7mZJNzXwhsYMS0I2FU=
Subject key identifier:   00:53:D0:2A:6C:7F:10:54:41:CE:8F:56:D3:3C:FE:0F:E7:48:92:44
Certificate issuer:       /CN=6344AF440766B9E900B42D4B50C20DDBA639DA4E
Certificate serial:       03E4D5CBF23A6B9ECAAC6284C34BE0CE93E9AA50
Authority key identifier: 63:44:AF:44:07:66:B9:E9:00:B4:2D:4B:50:C2:0D:DB:A6:39:DA:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/323830343a316261343a3a2f33322d313238203d3e203631373431.roa
Signing time:             Fri 21 Nov 2025 20:40:06 +0000
ROA not before:           Fri 21 Nov 2025 20:35:06 +0000
ROA not after:            Fri 20 Nov 2026 20:40:06 +0000
asID:                     61741
IP address blocks:        2804:1ba4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.crl
                          rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e4:d5:cb:f2:3a:6b:9e:ca:ac:62:84:c3:4b:e0:ce:93:e9:aa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6344AF440766B9E900B42D4B50C20DDBA639DA4E
        Validity
            Not Before: Nov 21 20:35:06 2025 GMT
            Not After : Nov 20 20:40:06 2026 GMT
        Subject: CN=0053D02A6C7F105441CE8F56D33CFE0FE7489244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:98:a9:56:e3:d9:f5:15:bf:5a:aa:64:49:
                    5a:16:a2:a8:00:34:fb:e2:67:5f:f7:95:c4:ca:e9:
                    28:cc:f8:ba:f6:93:19:c2:77:65:02:d8:8f:f9:76:
                    f3:67:ec:16:b2:02:96:ed:92:5e:40:c4:4c:9c:27:
                    a3:a6:70:94:62:f8:c8:28:ff:8c:37:f4:10:a1:fd:
                    95:5f:ff:87:e7:b2:a2:e5:96:34:ec:c0:58:29:5f:
                    8a:e7:46:57:d5:c7:75:80:63:74:2f:fc:7d:33:23:
                    fd:ff:3e:6a:73:93:0f:d1:0c:ca:fc:2f:3c:52:a3:
                    b3:d6:45:ae:d9:f1:7d:6f:fe:1b:87:11:df:47:d2:
                    f6:2a:70:ba:f3:49:f7:88:a2:33:bb:ba:5a:71:bb:
                    8c:96:c3:77:15:44:65:ed:b5:f9:53:c6:44:68:79:
                    06:58:d8:fc:f9:a6:58:87:15:77:5c:b0:1e:9b:90:
                    c5:7b:20:29:fc:7f:dd:f4:13:de:60:bf:b1:06:f3:
                    4e:92:72:ce:c7:11:23:f3:72:71:de:8c:fc:d5:a5:
                    15:46:44:7f:19:87:65:df:9d:39:96:45:c4:fb:43:
                    51:52:19:55:a5:c8:c1:72:86:20:19:fc:f6:e8:f1:
                    60:ba:97:48:90:c8:96:65:fe:90:ae:2e:d2:cb:86:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:53:D0:2A:6C:7F:10:54:41:CE:8F:56:D3:3C:FE:0F:E7:48:92:44
            X509v3 Authority Key Identifier:
                keyid:63:44:AF:44:07:66:B9:E9:00:B4:2D:4B:50:C2:0D:DB:A6:39:DA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/323830343a316261343a3a2f33322d313238203d3e203631373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ba4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:0c:3c:0d:a1:ae:f0:e8:8f:dd:cd:d6:16:5d:97:43:2c:
         d0:26:27:9c:d8:10:26:85:93:fe:12:9f:5a:05:66:6d:5a:1b:
         f6:4e:77:69:8d:97:85:58:6c:76:d2:11:e0:b1:ea:99:47:71:
         30:67:85:7b:a8:1f:95:4a:24:40:81:ca:28:49:57:9f:1b:ab:
         b4:5d:53:eb:08:6f:9f:a6:27:7d:80:c0:19:36:a5:b6:29:d9:
         db:cc:0b:43:6d:85:cc:44:56:18:be:85:59:bd:d8:7b:6f:bc:
         32:eb:0b:25:56:49:06:dd:c1:4e:53:f4:94:94:66:c7:08:e8:
         22:70:52:49:86:da:d4:39:9d:c2:22:8b:7f:c4:0d:60:f8:dc:
         32:32:bc:2a:61:92:51:c7:17:03:76:a6:c5:d6:a6:d1:f6:ff:
         66:c0:8f:86:17:cd:f2:fe:4e:c1:a2:b8:86:67:4a:d2:5c:cd:
         cc:70:84:4b:fa:80:c8:89:1f:69:24:70:7f:2f:fc:37:e5:68:
         0a:67:38:67:a4:00:4f:ec:21:12:6e:56:d3:77:88:22:3a:d4:
         1b:d0:b4:ae:51:db:2f:80:1b:d7:d5:96:21:6c:19:82:78:cd:
         09:f5:f9:21:01:38:59:05:e4:72:d7:66:33:dd:e3:cf:ef:17:
         cb:9a:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:08:37 2025 by rpki-client