This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a3a2f33322d313238203d3e20323638313439.roa
File:                     323830343a353863383a3a2f33322d313238203d3e20323638313439.roa (raw, json)
Hash identifier:          FfX++mMThMyA5Phf+j3yBrq+Yb9+v6+7rFQbrQ23iVY=
Subject key identifier:   92:80:FA:66:03:A2:DD:A4:56:3F:C4:35:05:67:03:0D:B1:61:0A:D4
Certificate issuer:       /CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
Certificate serial:       79DB128088DDD4591BFDFFF0876CA85DD1F75809
Authority key identifier: 5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a3a2f33322d313238203d3e20323638313439.roa
Signing time:             Sat 08 Nov 2025 19:11:34 +0000
ROA not before:           Sat 08 Nov 2025 19:06:34 +0000
ROA not after:            Sat 07 Nov 2026 19:11:34 +0000
asID:                     268149
IP address blocks:        2804:58c8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:db:12:80:88:dd:d4:59:1b:fd:ff:f0:87:6c:a8:5d:d1:f7:58:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
        Validity
            Not Before: Nov  8 19:06:34 2025 GMT
            Not After : Nov  7 19:11:34 2026 GMT
        Subject: CN=9280FA6603A2DDA4563FC4350567030DB1610AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:ed:77:11:3c:e6:f8:5c:76:c1:2c:e6:81:
                    25:fb:40:6d:6d:94:2d:4a:9b:16:80:b5:05:bb:30:
                    8e:b3:f7:69:70:26:70:74:0e:9e:87:99:c9:5e:c5:
                    de:3a:a4:90:ee:e7:f5:92:ae:d5:e6:7a:f6:01:cc:
                    d4:14:e3:6e:ae:d2:73:af:fd:a1:67:3c:e3:c5:b4:
                    98:ad:b3:66:42:9c:ba:81:95:a6:fd:a0:4b:03:96:
                    4b:fc:5f:eb:89:39:88:1e:5d:54:c9:76:f1:c1:e1:
                    7d:9e:69:35:ec:dc:91:03:ed:b4:2f:8a:9a:41:73:
                    98:87:35:e2:77:e5:d3:49:45:e4:43:d9:d4:1f:39:
                    5b:2f:91:58:87:08:90:4b:a0:b6:cf:54:b9:ce:89:
                    fd:34:00:c3:dd:be:fd:0e:03:fb:f2:09:be:13:01:
                    8e:d8:8e:ff:8b:dd:af:bc:69:12:8d:6e:9e:2f:4e:
                    ce:23:a9:ec:1c:c3:f4:c0:c3:4f:66:be:58:bc:f1:
                    6c:5f:62:c3:fc:ca:1b:d6:56:8a:73:53:fd:43:05:
                    3e:2b:99:5f:9b:99:b7:57:60:fc:c1:64:2b:7f:31:
                    25:49:e8:5c:7b:b9:7c:be:9f:bf:f1:55:81:e3:61:
                    e3:e3:bd:50:6a:28:d0:ff:c3:20:d2:48:d7:99:29:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:FA:66:03:A2:DD:A4:56:3F:C4:35:05:67:03:0D:B1:61:0A:D4
            X509v3 Authority Key Identifier:
                keyid:5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/323830343a353863383a3a2f33322d313238203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:d9:58:bb:55:70:3f:47:c6:eb:af:5e:e9:29:07:33:78:
         f7:4c:75:58:13:9a:a8:40:e8:cd:ed:5a:13:52:58:6f:11:ce:
         df:e4:66:56:15:f5:49:fd:00:8c:0c:29:61:e0:31:90:34:f9:
         91:66:bd:5a:6a:b7:e1:ec:26:18:7b:74:42:8a:4c:6e:99:f5:
         b0:56:48:b7:77:bd:fa:5b:e9:c0:ae:1a:7a:b6:2b:cd:4a:60:
         16:aa:20:72:b5:cf:42:58:2d:6e:7c:35:bd:e4:f7:75:55:cf:
         9e:96:c9:53:f6:de:d9:0b:46:50:dc:96:91:fa:77:8a:62:4a:
         76:2f:06:0c:95:b9:be:0c:f9:35:af:d9:d5:72:a1:f5:57:a3:
         ad:67:8a:33:df:fe:7f:37:26:f5:22:27:01:52:28:43:b2:13:
         fe:d4:58:c0:d8:f9:c4:0c:b5:f9:7d:cb:f7:ab:36:24:93:16:
         1b:1f:e5:c8:f0:31:54:3a:df:c9:8d:6b:cf:53:c7:e0:cd:06:
         a5:ea:3c:bb:98:c2:36:88:1f:9e:d3:fc:e4:cf:43:2c:f3:50:
         48:de:c7:9c:1e:30:52:1f:35:1e:a0:51:12:aa:5c:b7:76:0c:
         2d:6e:bf:cb:ec:55:1c:95:e8:8d:f9:30:37:1e:27:e4:93:41:
         16:93:6a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:10:46 2025 by rpki-client