This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33332d3333203d3e20323638363738.roa
File:                     323830343a353465633a3a2f33332d3333203d3e20323638363738.roa (raw, json)
Hash identifier:          +Pd3z94wyQJWsVKzzBkpAO4/8g+8DoRHLyRqUQ1+jpo=
Subject key identifier:   73:E9:CA:42:02:E1:B8:43:E6:65:C4:92:96:FF:B5:57:11:C2:B7:42
Certificate issuer:       /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
Certificate serial:       2D5EA331D5F2F3844ED840D2FA99AB0F5AF03A47
Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33332d3333203d3e20323638363738.roa
Signing time:             Tue 16 Dec 2025 21:00:40 +0000
ROA not before:           Tue 16 Dec 2025 20:55:40 +0000
ROA not after:            Tue 15 Dec 2026 21:00:40 +0000
asID:                     268678
IP address blocks:        2804:54ec::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 21:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5e:a3:31:d5:f2:f3:84:4e:d8:40:d2:fa:99:ab:0f:5a:f0:3a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
        Validity
            Not Before: Dec 16 20:55:40 2025 GMT
            Not After : Dec 15 21:00:40 2026 GMT
        Subject: CN=73E9CA4202E1B843E665C49296FFB55711C2B742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:56:58:b7:d1:fc:f0:1b:4c:f7:2c:c2:be:
                    46:08:e0:da:c4:2e:07:aa:4b:a2:9b:ad:fb:cc:f8:
                    2b:c3:29:9f:7d:71:0a:61:5a:26:eb:83:5b:ba:2d:
                    6b:7a:62:d9:2d:d3:44:41:81:47:5f:5a:94:14:a9:
                    94:73:65:a6:62:71:2b:00:61:15:1d:48:13:e4:77:
                    64:95:c4:ae:d4:4a:76:a2:f9:ec:64:3c:2b:37:50:
                    62:55:eb:bd:c5:eb:f2:55:bc:c6:82:e7:26:3f:5b:
                    87:f3:cd:5d:fa:93:5b:fc:c3:2a:85:f6:91:4a:d8:
                    e4:6f:9e:f1:f2:b6:24:57:4f:3c:c2:e0:97:9d:60:
                    57:d5:56:92:33:bf:8b:46:49:28:fe:73:15:12:c1:
                    81:3c:bb:2f:d9:99:16:9a:92:d4:dc:99:1a:3c:92:
                    fa:e9:d9:7a:f8:65:bd:ea:d0:98:9d:89:86:e0:3e:
                    a5:af:88:04:b8:56:75:98:f9:5e:af:41:db:c6:01:
                    7c:21:ac:e2:a0:18:c5:fb:63:7c:ba:04:ce:9e:69:
                    46:d0:d3:bd:3e:f3:7f:ad:9c:28:f6:f7:c7:17:bd:
                    1f:97:7d:22:bf:9e:6a:9d:14:52:19:e4:0f:01:e4:
                    7b:34:92:7e:12:33:c9:5d:7f:3a:ed:1c:ca:86:f6:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E9:CA:42:02:E1:B8:43:E6:65:C4:92:96:FF:B5:57:11:C2:B7:42
            X509v3 Authority Key Identifier:
                keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33332d3333203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec::/33

    Signature Algorithm: sha256WithRSAEncryption
         10:07:16:3a:90:04:5b:e8:f1:4f:0b:4f:51:3c:1f:14:6b:89:
         c8:d7:3f:1c:23:dc:fc:f9:41:c0:c8:44:81:59:86:b0:00:b9:
         55:7e:5b:0f:09:b7:94:11:c7:7e:be:5d:25:f4:02:f1:97:09:
         a5:f8:8c:0d:39:78:d2:59:72:0a:c4:9a:a9:2a:3d:53:f8:18:
         e7:7e:01:eb:52:c3:01:9f:24:e4:92:40:66:15:ea:3b:f5:f2:
         cf:b2:51:3f:e7:66:03:20:85:8b:11:64:90:de:a3:e8:e9:2b:
         33:d5:50:c7:ae:9e:66:c8:76:0e:71:23:c9:62:04:38:16:52:
         54:9d:8d:f7:0b:0d:65:fb:89:25:3f:b3:78:91:b8:79:ec:2a:
         24:34:f3:10:65:f2:84:7c:9c:42:12:f5:4d:2e:91:87:3a:d7:
         4e:ac:88:07:d3:2f:c8:f9:cd:04:5f:b2:a2:62:bc:f1:b3:31:
         fb:8f:52:55:a8:c6:09:e3:87:c3:2e:46:28:f0:45:88:e8:ed:
         b5:21:23:d1:18:17:a7:84:3c:13:19:f4:70:ff:e1:59:e9:1d:
         30:9b:5a:b0:f0:70:87:f2:86:ec:6e:77:ab:98:dc:00:d5:a5:
         d5:90:40:52:af:87:52:f8:c3:8a:a9:50:55:d6:ea:36:82:c2:
         36:b8:8f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:39:35 2025 by rpki-client