This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa
File:                     323830343a333036383a3a2f33322d3336203d3e20323634393439.roa (raw, json)
Hash identifier:          fisFpMA5MMWc1btQAKZqzTMd+nQdo2OisIdj4XAWTe0=
Subject key identifier:   DB:BF:51:F6:3A:B6:63:F9:D5:94:E4:43:E6:68:AE:E7:A9:2B:94:0A
Certificate issuer:       /CN=5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB
Certificate serial:       475E6FCB041D49C1C398D9C9C51A526030E1E5E5
Authority key identifier: 5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa
Signing time:             Wed 12 Nov 2025 00:37:13 +0000
ROA not before:           Wed 12 Nov 2025 00:32:13 +0000
ROA not after:            Wed 11 Nov 2026 00:37:13 +0000
asID:                     264949
IP address blocks:        2804:3068::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.crl
                          rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5e:6f:cb:04:1d:49:c1:c3:98:d9:c9:c5:1a:52:60:30:e1:e5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB
        Validity
            Not Before: Nov 12 00:32:13 2025 GMT
            Not After : Nov 11 00:37:13 2026 GMT
        Subject: CN=DBBF51F63AB663F9D594E443E668AEE7A92B940A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:0e:ef:24:bf:9d:5f:64:1d:91:ae:e8:6b:
                    b0:76:37:e4:f9:72:8d:6f:be:53:cd:6e:ce:81:ad:
                    11:97:77:26:ae:63:f6:b1:16:1f:67:ef:32:4d:a2:
                    40:d2:e5:f8:42:bd:b2:7a:1b:e3:a9:4c:13:4d:b5:
                    d5:f7:69:d6:d7:ff:1f:29:a4:7e:60:49:8a:d1:43:
                    a4:c5:4a:2f:0d:19:cd:6c:c5:72:30:37:16:5a:cd:
                    09:58:f0:2b:92:43:28:40:d5:0b:50:e1:23:78:74:
                    d5:74:7f:c4:df:24:8e:e9:ed:d3:36:21:4e:2c:5a:
                    a2:d5:8c:cd:75:8b:3c:ac:b2:48:b1:5c:fa:b9:4f:
                    5b:b4:f9:8c:aa:64:8e:93:92:e5:a9:5a:8d:da:c9:
                    61:aa:81:7f:60:54:71:8d:45:9f:5f:8f:1f:35:0b:
                    25:8d:4f:0b:5a:aa:64:49:7d:8e:14:39:47:5f:2b:
                    c8:e4:62:de:61:82:36:71:e7:d7:0c:32:70:50:0b:
                    80:05:c4:0f:5e:9c:9e:4d:a3:c6:e3:4a:ce:45:aa:
                    c1:c0:eb:3c:48:f7:59:db:2c:8d:d6:c4:4e:c5:11:
                    ee:8d:a9:de:30:96:61:a7:41:0d:8b:bd:d7:7c:da:
                    ce:d5:1c:62:cb:87:27:90:e2:08:9d:65:f5:5e:1f:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BF:51:F6:3A:B6:63:F9:D5:94:E4:43:E6:68:AE:E7:A9:2B:94:0A
            X509v3 Authority Key Identifier:
                keyid:5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3068::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:c5:a6:f0:51:12:3d:e8:e9:83:08:3c:6b:c8:14:f7:5a:
         dc:44:c9:53:23:98:b0:ae:54:9f:0c:2f:3b:30:f5:40:54:a2:
         4b:c4:1f:ca:1a:d1:f2:36:86:53:bc:58:11:a0:3e:b1:a8:d5:
         91:b4:5f:ee:f8:33:be:6c:78:ee:d8:35:98:8e:db:5c:91:66:
         f8:c8:96:57:b1:29:64:ff:98:ff:06:34:d9:5b:6c:b3:26:58:
         b3:f5:14:22:cf:09:60:99:91:3b:c7:e4:a1:89:eb:7f:34:68:
         88:d8:b9:50:8a:59:63:09:57:74:50:2b:3c:47:1d:0f:a7:33:
         cf:60:29:0e:73:7a:fb:a0:72:0b:8b:eb:56:35:54:c3:f8:94:
         ef:6a:a4:03:59:da:7d:6f:93:92:02:b0:0c:41:c8:25:19:5a:
         53:84:16:1e:f5:bd:f2:46:b1:9b:fb:70:58:bf:8d:bd:ec:d4:
         8b:69:56:e1:29:c8:03:a4:84:f9:08:d3:0f:b1:b1:5f:b9:58:
         4f:93:25:4b:d6:98:21:3a:e4:e8:96:05:45:77:b4:6a:5e:72:
         e1:d0:9e:fa:be:9b:f1:5d:b2:18:bc:c1:3e:22:32:8e:02:f5:
         0a:e4:74:03:4d:54:f6:ca:44:65:80:02:f1:ae:19:9b:76:6a:
         4b:71:b3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:32 2025 by rpki-client