This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a343030303a3a2f33342d3334203d3e20323731303530.roa
File:                     323830343a373537633a343030303a3a2f33342d3334203d3e20323731303530.roa (raw, json)
Hash identifier:          O4g8mWMbovAwu6djFMLSbgS6mc4YBYG899KIEAvSN/c=
Subject key identifier:   6E:EF:1D:13:60:D6:5A:45:6D:DE:4C:AB:FF:06:3F:A0:5E:19:84:11
Certificate issuer:       /CN=FFF57976772C4B0926A2E13B856C6905D920F1B0
Certificate serial:       40C4442EC5BBF550F83DB3226EAFEA58153294CF
Authority key identifier: FF:F5:79:76:77:2C:4B:09:26:A2:E1:3B:85:6C:69:05:D9:20:F1:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a343030303a3a2f33342d3334203d3e20323731303530.roa
Signing time:             Mon 17 Nov 2025 17:55:17 +0000
ROA not before:           Mon 17 Nov 2025 17:50:17 +0000
ROA not after:            Mon 16 Nov 2026 17:55:17 +0000
asID:                     271050
IP address blocks:        2804:757c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c4:44:2e:c5:bb:f5:50:f8:3d:b3:22:6e:af:ea:58:15:32:94:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF57976772C4B0926A2E13B856C6905D920F1B0
        Validity
            Not Before: Nov 17 17:50:17 2025 GMT
            Not After : Nov 16 17:55:17 2026 GMT
        Subject: CN=6EEF1D1360D65A456DDE4CABFF063FA05E198411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:73:c5:b9:d3:33:54:13:c2:6e:06:a4:36:
                    13:02:c7:e6:21:31:65:3a:93:94:fd:5a:4e:3f:ca:
                    e4:06:20:b0:ec:3e:92:87:4c:e0:95:a3:50:66:88:
                    5d:f5:c2:d1:4f:20:81:91:ec:5e:36:6e:c9:78:b3:
                    30:2e:8d:d4:20:29:8d:23:f6:fc:9f:64:7c:76:48:
                    f1:d1:31:17:10:c5:0e:3a:aa:ef:8c:4c:8b:ec:1d:
                    34:56:ae:d0:35:0d:5c:96:a3:5a:36:05:77:a2:55:
                    8f:ad:42:88:67:f1:97:ff:a2:bf:4f:14:b7:d2:31:
                    60:23:7a:76:21:27:f9:54:59:d3:a0:91:69:eb:e6:
                    6a:c1:8e:e8:12:4e:d7:e4:7d:6b:ce:51:1f:70:37:
                    c4:47:17:2a:4e:17:68:4f:63:2e:bd:51:de:bd:4c:
                    9c:57:0f:64:5a:28:69:44:c2:f7:5d:12:f1:07:84:
                    de:ce:fc:b7:85:4d:40:d6:36:41:65:3d:4e:43:d8:
                    6d:e8:b8:45:f2:f6:a3:02:dc:c9:f2:1b:9d:9f:ce:
                    ef:34:11:0f:a6:26:21:93:8b:c5:39:0f:bb:5a:b1:
                    e7:11:80:e3:8c:c8:d7:7d:77:71:af:2a:94:ed:99:
                    64:63:76:99:fd:83:d9:42:eb:50:77:a6:ed:42:90:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:1D:13:60:D6:5A:45:6D:DE:4C:AB:FF:06:3F:A0:5E:19:84:11
            X509v3 Authority Key Identifier:
                keyid:FF:F5:79:76:77:2C:4B:09:26:A2:E1:3B:85:6C:69:05:D9:20:F1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/FFF57976772C4B0926A2E13B856C6905D920F1B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF57976772C4B0926A2E13B856C6905D920F1B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a343030303a3a2f33342d3334203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:757c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:6a:26:c9:f4:fc:25:c9:1f:94:81:e6:02:48:f4:27:1a:
         4f:fc:3a:57:d5:20:fe:5e:ef:56:10:5f:09:e0:8d:59:33:9a:
         3d:2e:19:1c:d2:76:39:75:76:ab:48:bb:fb:9d:01:b1:2f:a2:
         b0:dc:08:31:b7:14:18:71:7c:6c:cc:28:c2:13:82:a7:d6:fd:
         0b:81:e2:be:09:1f:f6:aa:ed:b1:b1:e5:87:6c:d3:a9:6a:97:
         fe:51:31:20:07:8f:bb:f4:85:08:83:bb:6b:60:07:95:de:04:
         68:c9:e8:e9:35:fa:bc:cf:55:cf:f7:38:57:b1:20:79:31:a3:
         fc:61:4c:03:e7:58:ed:b5:cd:65:12:f9:c7:95:9e:9d:06:a9:
         cb:39:82:62:82:7f:d3:1a:84:d8:43:cf:c5:0e:68:3f:61:64:
         d4:92:65:54:ef:01:78:66:73:60:26:97:19:c9:ec:96:02:b8:
         60:12:f5:4f:37:c1:46:c3:55:a8:fb:6d:31:44:93:cf:48:c7:
         68:44:68:36:9d:e6:7d:81:92:2b:97:62:52:2b:89:24:39:67:
         29:45:af:2d:65:78:2b:1a:6a:81:84:42:fb:a3:ab:3b:c4:18:
         a8:fa:e2:e3:b2:85:f7:3f:94:74:27:f0:49:54:ae:82:07:aa:
         69:ee:0d:b0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQMRELsW79VD4PbMibq/qWBUylM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGNTc5NzY3NzJDNEIwOTI2QTJFMTNCODU2QzY5MDVE
OTIwRjFCMDAeFw0yNTExMTcxNzUwMTdaFw0yNjExMTYxNzU1MTdaMDMxMTAvBgNV
BAMTKDZFRUYxRDEzNjBENjVBNDU2RERFNENBQkZGMDYzRkEwNUUxOTg0MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSXPFudMzVBPCbgakNhMCx+Yh
MWU6k5T9Wk4/yuQGILDsPpKHTOCVo1BmiF31wtFPIIGR7F42bsl4szAujdQgKY0j
9vyfZHx2SPHRMRcQxQ46qu+MTIvsHTRWrtA1DVyWo1o2BXeiVY+tQohn8Zf/or9P
FLfSMWAjenYhJ/lUWdOgkWnr5mrBjugSTtfkfWvOUR9wN8RHFypOF2hPYy69Ud69
TJxXD2RaKGlEwvddEvEHhN7O/LeFTUDWNkFlPU5D2G3ouEXy9qMC3MnyG52fzu80
EQ+mJiGTi8U5D7tasecRgOOMyNd9d3GvKpTtmWRjdpn9g9lC61B3pu1CkMbpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbu8dE2DWWkVt3kyr/wY/oF4ZhBEwHwYDVR0j
BBgwFoAU//V5dncsSwkmouE7hWxpBdkg8bAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVoUHdGYUZNd29yY3BpWnVLa1FVc3JuTTFHUnFBQnFKNERFeEFtQmJL
c0wvMC9GRkY1Nzk3Njc3MkM0QjA5MjZBMkUxM0I4NTZDNjkwNUQ5MjBGMUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRjU3OTc2NzcyQzRCMDky
NkEyRTEzQjg1NkM2OTA1RDkyMEYxQjAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFaFB3RmFGTXdvcmNwaVp1S2tRVXNybk0xR1JxQUJxSjRERXhBbUJiS3NMLzAv
MzIzODMwMzQzYTM3MzUzNzYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMwMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEdXxAMA0GCSqGSIb3DQEBCwUA
A4IBAQCTv2omyfT8JckflIHmAkj0JxpP/DpX1SD+Xu9WEF8J4I1ZM5o9Lhkc0nY5
dXarSLv7nQGxL6Kw3AgxtxQYcXxszCjCE4Kn1v0LgeK+CR/2qu2xseWHbNOpapf+
UTEgB4+79IUIg7trYAeV3gRoyejpNfq8z1XP9zhXsSB5MaP8YUwD51jttc1lEvnH
lZ6dBqnLOYJign/TGoTYQ8/FDmg/YWTUkmVU7wF4ZnNgJpcZyeyWArhgEvVPN8FG
w1Wo+20xRJPPSMdoRGg2neZ9gZIrl2JSK4kkOWcpRa8tZXgrGmqBhEL7o6s7xBio
+uLjsoX3P5R0J/BJVK6CB6pp7g2w
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:19 2025 by rpki-client