This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/323830343a366663383a323030303a3a2f33362d3438203d3e20323730363834.roa
File:                     323830343a366663383a323030303a3a2f33362d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          MkTfkvomg2tunwsm3xiEPJPTD2oUYqn81xq09cbpW0E=
Subject key identifier:   94:B7:9A:BE:FA:6A:E9:D4:07:B0:2C:15:78:18:B0:EF:A4:6F:84:2F
Certificate issuer:       /CN=93C422374E52B82F4E7F34F719B5E98FD042A291
Certificate serial:       37F8874FF820503FD5997DCD8E7F81E7A98AAB60
Authority key identifier: 93:C4:22:37:4E:52:B8:2F:4E:7F:34:F7:19:B5:E9:8F:D0:42:A2:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93C422374E52B82F4E7F34F719B5E98FD042A291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/323830343a366663383a323030303a3a2f33362d3438203d3e20323730363834.roa
Signing time:             Wed 19 Nov 2025 10:46:41 +0000
ROA not before:           Wed 19 Nov 2025 10:41:41 +0000
ROA not after:            Wed 18 Nov 2026 10:46:41 +0000
asID:                     270684
IP address blocks:        2804:6fc8:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/93C422374E52B82F4E7F34F719B5E98FD042A291.crl
                          rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/93C422374E52B82F4E7F34F719B5E98FD042A291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93C422374E52B82F4E7F34F719B5E98FD042A291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f8:87:4f:f8:20:50:3f:d5:99:7d:cd:8e:7f:81:e7:a9:8a:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93C422374E52B82F4E7F34F719B5E98FD042A291
        Validity
            Not Before: Nov 19 10:41:41 2025 GMT
            Not After : Nov 18 10:46:41 2026 GMT
        Subject: CN=94B79ABEFA6AE9D407B02C157818B0EFA46F842F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:94:9c:54:59:62:47:84:12:a4:7e:88:b3:
                    c9:5f:2e:25:93:ae:f5:15:9c:ef:3a:89:63:49:c9:
                    a1:b1:74:b9:c2:14:57:b6:66:20:f4:ef:78:9b:eb:
                    ff:26:e8:1b:4d:2d:b8:99:c8:0c:bf:30:32:65:3e:
                    19:01:7f:2f:8e:bf:69:dc:9d:6c:5d:44:29:da:95:
                    0f:11:ae:55:e8:a8:d7:63:ae:5c:99:3b:d7:fb:7c:
                    b5:92:95:1f:ed:25:f2:cb:57:1f:b1:e1:5e:b5:3f:
                    2d:09:b3:d7:bc:4d:85:c5:f9:a8:8d:19:bf:b6:4d:
                    92:83:51:54:ec:b0:ad:ad:47:35:e5:7e:35:c7:95:
                    87:a4:d6:ab:26:10:2c:b9:e3:9b:05:bf:d9:55:b4:
                    1c:9b:38:ce:db:fb:9f:1a:c2:33:2e:d2:c8:9d:54:
                    3b:df:4d:04:93:46:fe:ed:59:f5:6a:14:29:ad:01:
                    42:3b:0b:50:d0:b9:2e:50:6d:53:b4:62:df:f8:65:
                    b4:1b:25:5c:ac:29:0d:30:6e:00:b6:63:f6:0e:f1:
                    30:f9:3a:96:7b:13:57:cb:ae:76:df:10:e2:ad:64:
                    43:54:c5:e3:fb:2c:96:b1:8c:9a:18:a4:ff:58:da:
                    63:bb:77:76:8d:5e:74:79:5b:47:35:89:5c:2b:5f:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B7:9A:BE:FA:6A:E9:D4:07:B0:2C:15:78:18:B0:EF:A4:6F:84:2F
            X509v3 Authority Key Identifier:
                keyid:93:C4:22:37:4E:52:B8:2F:4E:7F:34:F7:19:B5:E9:8F:D0:42:A2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/93C422374E52B82F4E7F34F719B5E98FD042A291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93C422374E52B82F4E7F34F719B5E98FD042A291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/323830343a366663383a323030303a3a2f33362d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:37:f1:e9:69:97:3d:fa:be:b0:33:7e:01:c5:08:43:1b:
         7b:5e:06:57:a0:ad:a2:80:36:43:92:62:23:95:c8:fe:9a:73:
         3e:33:b3:ee:bf:90:14:46:67:91:99:29:49:07:ae:85:5b:f8:
         18:5c:08:19:d5:69:7e:15:cb:ea:6b:8d:e6:51:52:94:d0:a3:
         9a:8e:12:aa:0e:01:55:56:4f:ba:e1:4a:50:1f:fd:00:e4:e5:
         5b:0b:1e:24:bf:2b:ce:6e:8e:90:f5:44:97:79:ed:14:54:e7:
         25:3e:fd:9d:bd:b1:db:ed:61:df:ed:92:90:56:21:16:c8:6e:
         66:69:f2:eb:ce:e6:e1:e6:03:d1:69:a2:ab:8a:c0:1e:1e:93:
         cc:44:34:68:eb:19:3d:8d:42:2f:6a:d7:8f:5e:20:85:2d:03:
         09:46:c6:bb:89:e8:51:bc:42:74:98:1f:a2:8b:86:c9:6d:59:
         ce:2a:82:9f:c3:f1:d6:03:ee:e1:02:f3:09:d5:0d:21:f4:15:
         44:26:16:37:69:93:95:ac:84:c3:a9:3e:8e:e2:da:ab:81:d3:
         53:66:89:26:2d:39:46:93:4e:03:38:18:8e:94:d9:78:19:8b:
         ca:f1:df:40:bd:5b:9f:91:37:13:48:d1:2d:47:3b:66:c0:39:
         19:09:68:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUN/iHT/ggUD/VmX3Njn+B56mKq2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNDNDIyMzc0RTUyQjgyRjRFN0YzNEY3MTlCNUU5OEZE
MDQyQTI5MTAeFw0yNTExMTkxMDQxNDFaFw0yNjExMTgxMDQ2NDFaMDMxMTAvBgNV
BAMTKDk0Qjc5QUJFRkE2QUU5RDQwN0IwMkMxNTc4MThCMEVGQTQ2Rjg0MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6JJScVFliR4QSpH6Is8lfLiWT
rvUVnO86iWNJyaGxdLnCFFe2ZiD073ib6/8m6BtNLbiZyAy/MDJlPhkBfy+Ov2nc
nWxdRCnalQ8RrlXoqNdjrlyZO9f7fLWSlR/tJfLLVx+x4V61Py0Js9e8TYXF+aiN
Gb+2TZKDUVTssK2tRzXlfjXHlYek1qsmECy545sFv9lVtBybOM7b+58awjMu0sid
VDvfTQSTRv7tWfVqFCmtAUI7C1DQuS5QbVO0Yt/4ZbQbJVysKQ0wbgC2Y/YO8TD5
OpZ7E1fLrnbfEOKtZENUxeP7LJaxjJoYpP9Y2mO7d3aNXnR5W0c1iVwrXwZ/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUlLeavvpq6dQHsCwVeBiw76RvhC8wHwYDVR0j
BBgwFoAUk8QiN05SuC9OfzT3GbXpj9BCopEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21jYTRkajVQMks4Zk54bkpvWjVVeFpnMVJKOG9RQXZFdUM4Y3A5eXBG
aVcvMC85M0M0MjIzNzRFNTJCODJGNEU3RjM0RjcxOUI1RTk4RkQwNDJBMjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQzQyMjM3NEU1MkI4MkY0
RTdGMzRGNzE5QjVFOThGRDA0MkEyOTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtY2E0ZGo1UDJLOGZOeG5Kb1o1VXhaZzFSSjhvUUF2RXVDOGNwOXlwRmlXLzAv
MzIzODMwMzQzYTM2NjY2MzM4M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNk
M2UyMDMyMzczMDM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEb8ggMA0GCSqGSIb3DQEBCwUA
A4IBAQBdwDfx6WmXPfq+sDN+AcUIQxt7XgZXoK2igDZDkmIjlcj+mnM+M7Puv5AU
RmeRmSlJB66FW/gYXAgZ1Wl+Fcvqa43mUVKU0KOajhKqDgFVVk+64UpQH/0A5OVb
Cx4kvyvObo6Q9USXee0UVOclPv2dvbHb7WHf7ZKQViEWyG5mafLrzubh5gPRaaKr
isAeHpPMRDRo6xk9jUIvatePXiCFLQMJRsa7iehRvEJ0mB+ii4bJbVnOKoKfw/HW
A+7hAvMJ1Q0h9BVEJhY3aZOVrITDqT6O4tqrgdNTZokmLTlGk04DOBiOlNl4GYvK
8d9AvVufkTcTSNEtRztmwDkZCWg/
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:41:39 2025 by rpki-client