This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/323830343a346664383a3a2f33322d3334203d3e20323638333533.roa
File:                     323830343a346664383a3a2f33322d3334203d3e20323638333533.roa (raw, json)
Hash identifier:          F5Y6yGSNI6fbxZT2tRBjTI61SRGvY7XUq0yhE8aHkh8=
Subject key identifier:   DB:C7:10:9F:F6:1E:64:82:AB:2D:16:E4:23:44:F5:C6:AC:F4:76:10
Certificate issuer:       /CN=DBB8F652599017C13A5576AE91B2AD338A9DF1EA
Certificate serial:       1041F931D7A7FCAD5BA030BED20B687FA9A90AE8
Authority key identifier: DB:B8:F6:52:59:90:17:C1:3A:55:76:AE:91:B2:AD:33:8A:9D:F1:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/323830343a346664383a3a2f33322d3334203d3e20323638333533.roa
Signing time:             Wed 19 Nov 2025 20:54:16 +0000
ROA not before:           Wed 19 Nov 2025 20:49:16 +0000
ROA not after:            Wed 18 Nov 2026 20:54:16 +0000
asID:                     268353
IP address blocks:        2804:4fd8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.crl
                          rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:41:f9:31:d7:a7:fc:ad:5b:a0:30:be:d2:0b:68:7f:a9:a9:0a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB8F652599017C13A5576AE91B2AD338A9DF1EA
        Validity
            Not Before: Nov 19 20:49:16 2025 GMT
            Not After : Nov 18 20:54:16 2026 GMT
        Subject: CN=DBC7109FF61E6482AB2D16E42344F5C6ACF47610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:12:9e:e9:dd:7d:e8:dc:af:df:05:c3:bc:
                    30:d9:3f:49:9c:0e:8f:ae:51:64:6d:bd:f1:5c:67:
                    a5:d3:c6:60:16:54:9f:a1:93:7e:80:d9:23:20:88:
                    eb:cd:23:cd:e3:ac:3e:c5:28:7a:9d:71:e0:d3:cb:
                    2e:77:27:25:b2:62:13:4d:78:09:68:9c:f5:4f:30:
                    44:ac:bc:f1:b1:d5:c0:8c:da:72:eb:49:91:16:52:
                    63:c9:34:3e:48:ef:e9:3f:83:2a:87:ab:ff:13:1c:
                    1a:3f:96:d3:95:a5:df:ca:0a:96:ad:f4:8e:e7:87:
                    e2:4a:8e:8b:42:48:d1:df:e4:a2:a5:4c:07:c9:45:
                    9c:0a:71:4b:06:c4:6a:ed:d7:6d:a6:6b:98:1b:52:
                    0a:66:58:76:ab:a7:72:f2:cd:ac:45:38:4e:99:e6:
                    42:6c:f4:03:d0:07:e4:68:34:df:5e:70:f7:b2:ec:
                    bf:34:28:5d:b3:e3:0e:db:2f:44:c2:e9:1d:64:92:
                    d3:2f:d0:16:dc:a0:eb:9f:3a:0f:ab:cd:0d:ba:83:
                    01:72:65:3c:2c:3f:24:0c:20:be:74:2a:5a:4a:24:
                    50:89:36:e9:02:ea:86:46:f4:09:27:8a:45:a3:04:
                    27:c0:73:e6:73:f9:75:9c:6e:7e:61:e5:b9:1f:c4:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C7:10:9F:F6:1E:64:82:AB:2D:16:E4:23:44:F5:C6:AC:F4:76:10
            X509v3 Authority Key Identifier:
                keyid:DB:B8:F6:52:59:90:17:C1:3A:55:76:AE:91:B2:AD:33:8A:9D:F1:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/323830343a346664383a3a2f33322d3334203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:96:39:bb:01:fb:73:99:16:88:12:4a:37:b5:07:11:3a:68:
         56:d5:c5:10:bf:62:0e:d8:3b:16:55:3a:42:28:c4:ff:8b:4c:
         df:d4:b3:f6:d1:c9:7f:69:17:8b:d7:0d:78:34:2e:07:f7:8b:
         91:ca:dc:61:66:92:90:d2:75:23:31:04:ce:81:a3:54:9c:37:
         65:73:70:e9:7b:b9:c5:e2:7a:43:23:ec:88:de:1b:a3:35:30:
         23:fc:08:04:83:89:a6:b7:77:a6:19:2b:d7:50:10:9f:74:ce:
         15:0e:cc:40:d4:a6:ed:7b:5c:0f:6e:a8:4e:d3:f6:c9:8f:23:
         7b:9f:ee:38:0d:ca:11:45:b9:c7:a6:f0:b3:8e:a1:61:cb:0b:
         95:5e:30:00:fb:66:61:64:31:9e:36:48:10:03:54:93:0a:62:
         f8:05:6c:65:1e:05:3a:53:34:73:de:ef:2c:50:66:eb:86:69:
         c0:2e:2d:04:55:e7:df:d4:ea:80:15:9b:cc:cc:6f:4f:3c:88:
         17:22:34:a3:1b:c4:67:94:d0:e8:96:61:12:32:27:8a:43:bc:
         e5:19:76:4a:65:0e:04:6a:39:40:9c:8b:68:53:d5:80:31:4d:
         0a:d2:c7:56:d2:ff:df:83:14:bc:56:19:84:91:3b:72:d3:69:
         f5:4d:d8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:32:10 2025 by rpki-client