This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/323830343a333634383a633030303a3a2f33342d3334203d3e20323636333339.roa
File:                     323830343a333634383a633030303a3a2f33342d3334203d3e20323636333339.roa (raw, json)
Hash identifier:          xal9GAQV8xqeaNxAofnjGH1DELy1OjncHUtSWqu3On4=
Subject key identifier:   C0:D6:CD:95:FC:53:3B:AF:5E:93:6C:4A:3E:5D:ED:87:5B:95:2D:E9
Certificate issuer:       /CN=366B2E4D22BBEA317B2B9537B36ECBD144AAD51B
Certificate serial:       20BD187F274F75B1C925FA471B86CA7CBFC25C2E
Authority key identifier: 36:6B:2E:4D:22:BB:EA:31:7B:2B:95:37:B3:6E:CB:D1:44:AA:D5:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/366B2E4D22BBEA317B2B9537B36ECBD144AAD51B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/323830343a333634383a633030303a3a2f33342d3334203d3e20323636333339.roa
Signing time:             Fri 28 Nov 2025 12:50:58 +0000
ROA not before:           Fri 28 Nov 2025 12:45:58 +0000
ROA not after:            Fri 27 Nov 2026 12:50:58 +0000
asID:                     266339
IP address blocks:        2804:3648:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/366B2E4D22BBEA317B2B9537B36ECBD144AAD51B.crl
                          rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/366B2E4D22BBEA317B2B9537B36ECBD144AAD51B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/366B2E4D22BBEA317B2B9537B36ECBD144AAD51B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bd:18:7f:27:4f:75:b1:c9:25:fa:47:1b:86:ca:7c:bf:c2:5c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366B2E4D22BBEA317B2B9537B36ECBD144AAD51B
        Validity
            Not Before: Nov 28 12:45:58 2025 GMT
            Not After : Nov 27 12:50:58 2026 GMT
        Subject: CN=C0D6CD95FC533BAF5E936C4A3E5DED875B952DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:f6:b4:3a:67:56:f4:65:30:e1:f2:58:11:
                    bc:fc:27:e6:62:0b:db:64:e6:1a:03:16:4b:54:df:
                    e7:92:3b:8e:57:b3:9e:0e:b3:61:d1:22:75:75:47:
                    63:9f:64:bb:77:22:b2:fd:85:2b:2f:f6:d2:34:6c:
                    ed:06:bc:b2:9b:13:97:8d:96:a1:6f:e7:bd:76:68:
                    62:90:78:63:f1:8e:29:45:ae:39:7e:5c:5c:d3:04:
                    31:28:0d:80:69:8a:34:5f:54:6e:ff:78:9a:1c:f1:
                    82:92:c6:dc:b8:3a:0b:76:a7:c9:5f:f3:71:e1:93:
                    d7:8d:a8:22:6c:6d:3a:49:67:e4:c0:52:57:21:59:
                    63:7b:6e:fb:b3:51:70:bf:76:14:f7:da:fe:eb:de:
                    ca:d9:0a:6a:9a:b1:dc:7e:5e:74:25:3d:5f:a7:ca:
                    42:09:98:0f:3e:ec:22:17:36:e6:a3:d4:ba:4c:28:
                    95:b7:87:de:7c:30:70:40:32:49:b7:f2:b5:0c:11:
                    1b:65:55:b9:a3:82:bc:77:0f:4d:06:ca:b5:49:64:
                    2c:27:ab:8c:79:03:0f:31:a9:82:1f:ae:e8:27:56:
                    55:30:ec:45:1f:2a:9e:c1:b3:c4:80:b0:5c:3d:45:
                    bc:b7:9b:b4:cb:9d:21:af:4d:c8:37:f3:f4:6b:3c:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D6:CD:95:FC:53:3B:AF:5E:93:6C:4A:3E:5D:ED:87:5B:95:2D:E9
            X509v3 Authority Key Identifier:
                keyid:36:6B:2E:4D:22:BB:EA:31:7B:2B:95:37:B3:6E:CB:D1:44:AA:D5:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/366B2E4D22BBEA317B2B9537B36ECBD144AAD51B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/366B2E4D22BBEA317B2B9537B36ECBD144AAD51B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/323830343a333634383a633030303a3a2f33342d3334203d3e20323636333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3648:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:2e:aa:5a:b9:f7:0e:0e:f9:fd:0e:8f:90:6f:a5:b7:6e:
         df:75:d4:e7:86:e9:c4:c4:d3:ae:97:20:f7:d0:35:cf:69:d8:
         53:4d:64:dd:8d:49:94:a2:09:a1:87:ce:01:12:c0:c2:8e:e2:
         e1:67:c1:81:89:af:90:03:dc:8c:e2:2f:b2:79:80:2c:a8:06:
         3a:d2:8f:dc:bf:8a:f2:41:ea:7f:b2:94:52:0f:5e:89:93:5a:
         fb:a2:df:43:42:ff:bd:58:e0:88:35:76:ed:bc:41:6f:5a:11:
         dd:62:f0:72:b0:87:3e:d4:91:33:da:27:d7:53:83:21:42:2c:
         2e:1d:e6:b5:59:71:68:ca:82:b9:8a:e7:29:67:c6:32:9b:7f:
         75:d7:84:c6:56:c9:f5:cb:f2:68:62:f9:4a:67:b4:21:33:f1:
         1f:f8:07:99:2a:4b:d1:06:c0:77:f6:34:c1:af:93:f1:3d:6c:
         fd:29:cb:d2:77:74:21:99:38:54:e7:d6:2b:23:52:44:53:9e:
         8d:56:0e:73:e0:b2:b6:d4:5b:41:d0:7b:d5:69:e8:33:92:6d:
         4c:e1:a1:64:40:8f:4f:a6:62:9f:c4:5a:18:75:6b:07:5c:de:
         b5:4f:54:4a:3d:80:48:cc:26:40:be:0e:9e:ea:4a:53:5f:7c:
         b3:f2:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:20 2025 by rpki-client