This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a333030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a333030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          NmLUWXydHPKxkzgQ46WdV6+IhDFpPBFblXs8J78xb3Y=
Subject key identifier:   1D:A5:F6:1F:CC:28:C4:9C:70:85:04:19:11:7A:D4:F0:77:D3:7E:13
Certificate issuer:       /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
Certificate serial:       2E042418D212C646889704F6890DFAE66B760DBF
Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a333030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Mon 10 Nov 2025 18:38:35 +0000
ROA not before:           Mon 10 Nov 2025 18:33:35 +0000
ROA not after:            Mon 09 Nov 2026 18:38:35 +0000
asID:                     263059
IP address blocks:        2804:934:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:04:24:18:d2:12:c6:46:88:97:04:f6:89:0d:fa:e6:6b:76:0d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
        Validity
            Not Before: Nov 10 18:33:35 2025 GMT
            Not After : Nov  9 18:38:35 2026 GMT
        Subject: CN=1DA5F61FCC28C49C70850419117AD4F077D37E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:2a:08:e0:a7:1f:96:de:7f:05:f5:93:66:
                    6e:97:3f:94:f0:4b:9c:dd:65:8d:2e:58:31:39:4c:
                    5b:85:0d:0c:ae:47:79:5a:6e:60:20:2d:8e:a6:a5:
                    a1:c9:6c:2a:84:1a:aa:47:06:b8:06:fd:e8:90:34:
                    61:25:21:ae:20:bf:ac:22:37:d7:df:58:a5:40:83:
                    6d:6b:a9:4d:1c:6e:5b:e0:b8:80:a6:58:b4:99:c7:
                    9a:6f:8a:bc:23:2f:a6:67:b7:bd:be:3c:dc:ee:94:
                    4b:2a:43:a6:74:af:79:70:56:e5:1d:66:d9:31:50:
                    af:7d:61:e8:16:29:44:e2:0a:ea:ae:7d:59:cb:0a:
                    ff:92:51:d7:2c:1f:e8:7d:77:e3:9d:1c:a1:04:82:
                    80:51:bb:cc:4d:31:fc:94:9d:3b:8d:03:e3:51:6d:
                    25:59:2d:3d:08:7e:21:64:77:67:17:97:b2:54:86:
                    2c:df:82:8b:0a:18:04:a7:3a:2d:ba:1a:77:04:fa:
                    35:b7:cb:50:f6:d5:1a:20:2d:ba:a1:92:a8:d9:f8:
                    52:8b:04:14:bc:35:ea:4a:cf:4f:53:fc:21:15:bb:
                    9e:04:34:14:d7:45:f6:27:37:cb:44:75:8e:2d:c9:
                    d7:ad:c8:0a:a6:26:7f:e5:0a:a9:92:0c:b2:ea:78:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A5:F6:1F:CC:28:C4:9C:70:85:04:19:11:7A:D4:F0:77:D3:7E:13
            X509v3 Authority Key Identifier:
                keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a333030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d6:7f:75:7b:23:6a:3c:90:f3:aa:ae:7d:1d:9c:91:a3:22:4d:
         16:0b:24:ea:b5:55:e4:4f:53:26:1b:70:d9:23:26:1b:f8:a5:
         3c:4b:ce:38:55:b3:cb:0d:4e:06:62:83:73:1c:6e:43:35:58:
         a0:7c:32:65:8a:74:ad:fe:be:d7:32:34:b0:c9:7f:07:0e:8a:
         a5:a4:27:36:f7:7c:14:47:61:b0:c3:d2:c1:85:54:9a:2f:d3:
         2c:f5:11:c4:06:41:62:a2:5b:82:7a:31:80:85:9c:a3:72:20:
         70:3c:23:65:10:68:6c:1f:8f:d5:7f:e1:e4:40:bd:fc:0f:27:
         6d:7f:9a:12:30:79:13:73:e5:5e:eb:5e:aa:14:12:76:2f:eb:
         12:37:49:0a:8f:aa:d4:c9:e2:92:fb:8a:76:0f:51:34:01:17:
         2e:21:68:cd:68:41:d7:ea:8f:37:72:19:98:ca:c0:0b:6c:4f:
         ad:e8:6a:4c:ac:7e:78:36:d8:b2:b3:c1:29:9b:e1:8f:9e:e0:
         6e:eb:37:2c:60:b2:ea:20:d9:10:dd:22:ef:84:04:35:35:39:
         0e:6c:8d:aa:87:43:4c:7f:6c:f9:2a:07:97:9f:72:f1:e1:d1:
         58:2f:60:b2:59:b0:3e:72:dc:b8:0d:5d:79:b9:ba:ca:eb:c1:
         dd:ab:17:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULgQkGNISxkaIlwT2iQ365mt2Db8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG
QjdEMzlGMDAeFw0yNTExMTAxODMzMzVaFw0yNjExMDkxODM4MzVaMDMxMTAvBgNV
BAMTKDFEQTVGNjFGQ0MyOEM0OUM3MDg1MDQxOTExN0FENEYwNzdEMzdFMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gioI4Kcflt5/BfWTZm6XP5Tw
S5zdZY0uWDE5TFuFDQyuR3labmAgLY6mpaHJbCqEGqpHBrgG/eiQNGElIa4gv6wi
N9ffWKVAg21rqU0cblvguICmWLSZx5pvirwjL6Znt72+PNzulEsqQ6Z0r3lwVuUd
ZtkxUK99YegWKUTiCuqufVnLCv+SUdcsH+h9d+OdHKEEgoBRu8xNMfyUnTuNA+NR
bSVZLT0IfiFkd2cXl7JUhizfgosKGASnOi26GncE+jW3y1D21RogLbqhkqjZ+FKL
BBS8NepKz09T/CEVu54ENBTXRfYnN8tEdY4tydetyAqmJn/lCqmSDLLqeOY7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHaX2H8woxJxwhQQZEXrU8HfTfhMwHwYDVR0j
BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE
MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzIzODMwMzQzYTM5MzMzNDNhMzMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAk0MDANBgkqhkiG9w0BAQsFAAOC
AQEA1n91eyNqPJDzqq59HZyRoyJNFgsk6rVV5E9TJhtw2SMmG/ilPEvOOFWzyw1O
BmKDcxxuQzVYoHwyZYp0rf6+1zI0sMl/Bw6KpaQnNvd8FEdhsMPSwYVUmi/TLPUR
xAZBYqJbgnoxgIWco3IgcDwjZRBobB+P1X/h5EC9/A8nbX+aEjB5E3PlXuteqhQS
di/rEjdJCo+q1MnikvuKdg9RNAEXLiFozWhB1+qPN3IZmMrAC2xPrehqTKx+eDbY
srPBKZvhj57gbus3LGCy6iDZEN0i74QENTU5DmyNqodDTH9s+SoHl59y8eHRWC9g
slmwPnLcuA1debm6yuvB3asXqg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:39:15 2025 by rpki-client