This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/323830343a363966303a3a2f33322d3438203d3e20323730333031.roa
File:                     323830343a363966303a3a2f33322d3438203d3e20323730333031.roa (raw, json)
Hash identifier:          vceFRLcssuyZkrkMU5zJUm8ZoW/HgWMIgq+8EIbES+0=
Subject key identifier:   57:BF:66:B3:91:B3:45:4B:F9:76:5E:B6:DD:B7:D0:EB:1C:E9:6F:B5
Certificate issuer:       /CN=3EB8F32F868764375318F9AF4199127B28A8178E
Certificate serial:       79DCE4AD96177829F9E84D54D325993F23309FE6
Authority key identifier: 3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/323830343a363966303a3a2f33322d3438203d3e20323730333031.roa
Signing time:             Mon 24 Nov 2025 12:34:16 +0000
ROA not before:           Mon 24 Nov 2025 12:29:16 +0000
ROA not after:            Mon 23 Nov 2026 12:34:16 +0000
asID:                     270301
IP address blocks:        2804:69f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.crl
                          rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dc:e4:ad:96:17:78:29:f9:e8:4d:54:d3:25:99:3f:23:30:9f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EB8F32F868764375318F9AF4199127B28A8178E
        Validity
            Not Before: Nov 24 12:29:16 2025 GMT
            Not After : Nov 23 12:34:16 2026 GMT
        Subject: CN=57BF66B391B3454BF9765EB6DDB7D0EB1CE96FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:9a:8a:7b:23:60:24:9e:3a:70:5a:93:f1:
                    22:9d:92:42:07:f3:53:d0:d0:22:e4:68:c9:62:df:
                    8a:16:f9:3c:46:a6:f5:81:35:64:12:d3:ff:1f:22:
                    c6:0b:1f:4b:5a:b9:fc:2a:af:7c:b6:ac:10:39:ee:
                    76:da:21:4a:09:4b:dd:41:b0:71:9f:57:ba:58:9e:
                    07:74:e4:c3:c5:27:61:91:02:00:3d:29:82:d9:fa:
                    3d:46:3f:c5:48:06:38:d7:08:4d:36:d1:aa:4d:9d:
                    51:68:91:96:62:55:f2:7f:c6:8a:b6:4f:dc:65:dc:
                    4f:a1:0a:1d:cb:b8:7e:ef:19:02:db:49:11:ab:c8:
                    16:dc:56:1c:dc:dc:2c:1f:df:36:ff:62:2a:58:57:
                    4b:a1:ef:30:58:54:f3:a5:94:01:8c:e5:2b:4f:7a:
                    82:aa:6d:62:51:b6:b7:30:f6:7d:3b:b4:fd:85:35:
                    eb:62:6a:ea:7e:5e:f6:95:ec:c3:7e:29:4b:57:cc:
                    9a:1d:60:7f:4a:b3:a9:df:43:fa:2a:5c:e6:e0:a7:
                    d3:16:1b:dc:38:ed:1b:19:58:32:35:19:fd:0b:7a:
                    c4:a6:34:80:1d:d1:e8:9c:6c:69:d4:cd:13:1f:d6:
                    f6:8d:63:27:97:17:44:28:f4:86:f3:dd:c1:dd:5a:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BF:66:B3:91:B3:45:4B:F9:76:5E:B6:DD:B7:D0:EB:1C:E9:6F:B5
            X509v3 Authority Key Identifier:
                keyid:3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/323830343a363966303a3a2f33322d3438203d3e20323730333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:af:cb:51:bc:9d:c1:32:c2:49:af:ec:b8:ce:67:f5:94:
         40:87:ee:98:02:61:7a:da:90:db:f8:66:e4:91:41:ef:ec:c3:
         b4:8b:2c:be:bf:f7:d7:f0:23:95:96:0c:5d:a5:cf:62:e2:ba:
         b1:95:5f:f5:e1:bc:a5:cb:27:c7:21:bb:f4:25:43:57:ef:81:
         50:a7:13:d1:4b:47:63:93:c0:35:e8:c4:d9:c0:4b:b4:8c:44:
         bb:3f:6a:5d:c6:e3:91:78:0f:fe:08:9d:d8:91:d0:66:74:93:
         20:80:bd:0c:69:95:0f:4b:90:cc:ad:90:d3:b7:1f:7d:bc:de:
         3c:a9:67:61:25:39:7a:88:14:75:61:83:92:c3:ab:7c:08:34:
         bc:0f:3a:c7:4c:46:e1:18:f3:19:41:24:1d:21:44:45:94:cb:
         be:6b:d3:8b:6f:69:84:31:dd:04:19:56:ae:32:87:d6:2a:cb:
         3c:5f:e5:7d:87:59:f7:56:6c:83:29:c1:7d:e1:e9:85:a8:91:
         e8:41:2d:c6:65:7c:7c:f3:ea:75:59:8d:8d:d3:91:ac:8b:7b:
         82:cc:a5:cb:d9:81:15:12:33:5d:b5:1d:29:99:a3:fb:cd:f8:
         81:ce:45:bc:8e:6a:59:dc:c1:ea:38:90:8c:5c:19:ba:69:c8:
         1f:ce:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:52 2025 by rpki-client