This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a323030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a323030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          KLx5/qYNyz7AxwrA7N6dS1yVjaWZRH/zsWm0fUsqj2E=
Subject key identifier:   11:69:D4:80:B3:9E:15:EB:B2:CA:81:72:4A:46:81:AA:C0:C7:8E:77
Certificate issuer:       /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
Certificate serial:       1FC82541A3EA224648B18C8529D458196EDBCE53
Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a323030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Mon 10 Nov 2025 18:38:38 +0000
ROA not before:           Mon 10 Nov 2025 18:33:38 +0000
ROA not after:            Mon 09 Nov 2026 18:38:38 +0000
asID:                     263059
IP address blocks:        2804:934:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c8:25:41:a3:ea:22:46:48:b1:8c:85:29:d4:58:19:6e:db:ce:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
        Validity
            Not Before: Nov 10 18:33:38 2025 GMT
            Not After : Nov  9 18:38:38 2026 GMT
        Subject: CN=1169D480B39E15EBB2CA81724A4681AAC0C78E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:04:0f:6d:ae:c6:a7:ce:39:1b:16:da:e8:
                    f7:17:8c:92:e1:ed:ad:99:67:03:00:7d:6f:00:0d:
                    f0:31:b0:88:db:2f:58:ed:a2:52:c3:2e:eb:16:21:
                    de:9f:37:52:8f:e4:f4:8b:c0:54:a4:5e:06:62:02:
                    12:90:80:d7:7c:a9:3f:e2:96:90:7e:f1:3e:4c:53:
                    eb:9d:e7:7a:22:83:5c:56:ef:40:1d:d2:22:d0:00:
                    5e:08:94:77:0f:c2:3e:bc:af:b2:ef:78:bc:a9:44:
                    65:0a:fa:b4:58:0f:a4:6d:ca:66:9f:84:43:ad:a2:
                    9d:f5:14:fc:74:e9:97:e5:6f:3a:f6:64:5f:02:68:
                    ca:93:5c:9f:54:fb:d1:12:78:32:7b:29:a0:e2:58:
                    a8:9a:8f:d2:84:b4:20:47:a6:2b:3e:b6:ed:96:9a:
                    bc:90:29:0d:1d:7b:1b:03:ec:87:f8:27:99:54:11:
                    60:e2:98:d4:66:bb:f1:37:7b:10:c6:c6:23:d1:d8:
                    42:cc:f2:f7:fb:99:7d:3c:ad:de:ac:5f:6b:c1:0b:
                    c0:69:11:4a:20:01:8c:a8:4c:98:6c:27:26:fb:e3:
                    7b:2f:5d:c0:97:cb:82:d9:2d:93:8e:cb:68:68:0e:
                    46:ce:47:fd:6c:e3:8e:c0:4f:57:09:cb:5e:a7:b2:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:D4:80:B3:9E:15:EB:B2:CA:81:72:4A:46:81:AA:C0:C7:8E:77
            X509v3 Authority Key Identifier:
                keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a323030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:79:74:83:0e:52:07:32:7e:91:bf:5a:e2:2a:6b:e0:ed:d6:
         16:d1:b9:ee:81:50:95:12:fa:15:e6:f3:63:bc:c9:21:00:c8:
         24:74:f3:2f:83:22:6e:6a:fb:3b:9c:de:ff:50:87:91:8e:e9:
         72:c1:1c:98:9f:9c:45:50:48:e0:84:e5:fa:f9:37:97:96:24:
         07:ab:cb:cd:7d:92:b4:e4:b6:29:cb:5f:77:e8:52:f9:be:7c:
         c7:50:8e:52:63:8e:60:df:8b:cd:df:fd:d9:9c:57:17:42:a4:
         66:66:d2:aa:f1:01:b9:5f:90:80:71:df:89:60:aa:19:73:c0:
         dd:71:96:a8:a2:cd:53:9e:5a:20:27:c1:bb:b0:be:b7:dd:7a:
         45:7a:4c:6e:70:5d:5f:42:fb:c4:df:70:64:79:0e:aa:ce:bc:
         b8:b9:cb:a9:86:0c:6e:f3:f6:b1:9b:3d:09:b0:a7:85:24:ee:
         bf:44:8d:08:f6:b0:db:a7:34:c1:c5:b0:f5:5c:6e:57:c8:04:
         d3:42:d6:d5:37:31:76:ba:02:86:bb:f4:fb:62:ad:bb:fe:cd:
         54:40:61:8b:ae:57:02:c1:6d:b3:d2:16:95:c2:28:ac:33:a1:
         66:59:b5:36:4f:48:d1:a9:be:66:53:ab:79:e9:2e:3b:89:a9:
         5d:79:55:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:31:11 2025 by rpki-client