This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          JPPK19ykRv9Ol3MuAEb4U0z9d47oP6cfv9JaS3SQKlg=
Subject key identifier:   02:54:E0:62:E5:A6:B8:88:7C:E1:F5:D2:AC:B4:E5:01:01:C8:4A:73
Certificate issuer:       /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
Certificate serial:       3E6F4742E192FDFD3C28317957C8C5C6E88F0085
Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Mon 10 Nov 2025 18:38:35 +0000
ROA not before:           Mon 10 Nov 2025 18:33:35 +0000
ROA not after:            Mon 09 Nov 2026 18:38:35 +0000
asID:                     263059
IP address blocks:        2804:934:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6f:47:42:e1:92:fd:fd:3c:28:31:79:57:c8:c5:c6:e8:8f:00:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0
        Validity
            Not Before: Nov 10 18:33:35 2025 GMT
            Not After : Nov  9 18:38:35 2026 GMT
        Subject: CN=0254E062E5A6B8887CE1F5D2ACB4E50101C84A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:c6:a2:19:2f:55:ed:1d:eb:74:0d:c0:fd:
                    24:61:f8:11:83:24:04:47:2c:4f:22:de:32:da:9c:
                    b8:13:e2:cf:39:d0:d9:b2:b8:1f:9c:27:a1:38:50:
                    6c:f4:70:21:ae:04:16:d1:2f:1d:1c:fd:70:3a:32:
                    bb:04:d5:c7:17:41:a9:3c:69:a4:ee:22:d6:5e:0b:
                    a6:1d:e3:58:e1:29:05:7f:8d:c3:01:7f:13:b8:a2:
                    9c:cc:c8:24:b7:cf:60:12:0a:3b:b8:fe:02:86:81:
                    dd:07:7d:16:c5:cb:19:76:f8:6b:77:a8:04:2f:95:
                    3a:17:b2:92:4b:8a:cb:27:d6:29:a9:91:ae:38:c5:
                    e5:c1:0c:42:e7:72:3a:f7:ad:43:3d:e1:3b:c3:97:
                    7a:93:45:c0:86:7a:83:ab:60:66:4d:44:6c:43:07:
                    8d:e0:d4:04:43:31:a9:45:04:a5:23:3d:0e:4d:a0:
                    6e:11:26:88:5d:c3:77:76:ff:52:53:ed:93:ad:41:
                    03:a5:49:11:04:4c:88:61:2a:5d:a0:02:15:87:05:
                    10:65:26:0a:80:4b:67:9d:aa:9e:b5:04:48:90:37:
                    56:a5:50:a0:81:30:96:e1:82:74:55:53:8f:ad:84:
                    40:b4:86:96:02:3f:9f:c3:65:cb:c4:8b:f9:02:49:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:54:E0:62:E5:A6:B8:88:7C:E1:F5:D2:AC:B4:E5:01:01:C8:4A:73
            X509v3 Authority Key Identifier:
                keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bd:0d:e5:f8:77:35:ca:83:f7:b2:bc:bb:ca:c4:00:bb:be:ea:
         c2:19:87:70:15:d3:f4:6f:78:2b:e1:3f:af:26:5c:3c:d2:32:
         39:a4:57:d2:c5:2a:c6:6e:dd:01:18:18:12:5b:25:e7:f8:5b:
         d9:0a:cc:41:3e:d7:3f:51:f7:7b:9e:50:7c:17:19:f1:2e:46:
         ae:c9:9f:81:ea:a4:a8:35:86:b7:ac:74:85:93:e2:18:3d:46:
         fd:3f:ad:57:9e:ed:2c:f3:92:87:cc:4e:60:b5:e2:95:4f:53:
         28:43:0d:2b:47:ab:73:13:dc:ce:cf:ec:d0:0b:12:ef:cf:bc:
         ea:da:8c:75:96:ca:4d:49:0b:03:3f:2f:32:a0:ec:14:18:93:
         1d:b0:35:37:96:f8:9c:04:46:70:8c:fe:42:e9:43:03:b5:fe:
         eb:c9:3d:17:09:a7:69:42:ec:5b:32:d0:11:59:9f:02:1b:67:
         89:b1:31:f1:c7:fe:b3:41:79:81:25:cb:13:3c:3c:18:f6:7e:
         c2:da:b2:c8:80:ba:5d:2f:7c:9e:19:18:c1:88:a7:0b:18:05:
         06:c9:dd:12:03:cb:f4:c3:0c:b4:1e:96:78:b2:11:41:16:0e:
         61:1a:32:60:8e:3b:1f:55:fd:e8:eb:89:45:b8:10:f8:ee:9b:
         74:e0:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:19 2025 by rpki-client