This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa
File:                     323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa (raw, json)
Hash identifier:          mbujdo6DlwAmJYjBhooo5Os0om9AiyEjErzRsPs5DBo=
Subject key identifier:   65:B5:F1:D5:1B:5D:42:CF:1B:EB:42:93:3F:57:38:4F:F1:53:B5:9C
Certificate issuer:       /CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
Certificate serial:       3C93427405DFAE9E698F393DF59946E59215F69B
Authority key identifier: 42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa
Signing time:             Thu 13 Nov 2025 20:01:18 +0000
ROA not before:           Thu 13 Nov 2025 19:56:18 +0000
ROA not after:            Thu 12 Nov 2026 20:01:18 +0000
asID:                     271640
IP address blocks:        2801:80:3e80::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl
                          rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:93:42:74:05:df:ae:9e:69:8f:39:3d:f5:99:46:e5:92:15:f6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
        Validity
            Not Before: Nov 13 19:56:18 2025 GMT
            Not After : Nov 12 20:01:18 2026 GMT
        Subject: CN=65B5F1D51B5D42CF1BEB42933F57384FF153B59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:bc:98:ac:31:a6:59:d9:e5:09:7b:58:3d:
                    5e:b5:9b:06:a4:95:71:e8:51:2d:ce:75:2d:45:00:
                    40:35:83:55:9c:1d:65:ec:5e:90:a6:cd:37:91:5c:
                    a9:57:b5:c3:0d:0f:73:fb:f7:40:c5:78:85:a9:58:
                    d6:0f:97:be:fd:ff:32:27:3f:4b:2c:e1:9f:09:bb:
                    c5:e8:7c:6b:b2:59:a7:67:20:90:41:4b:d8:de:f5:
                    7c:2b:10:12:e5:2a:c1:33:a1:3c:ca:df:ff:3a:0c:
                    49:b8:77:6c:a2:db:88:c5:4e:8f:3a:91:70:9a:7f:
                    88:f1:8d:cb:b7:41:96:bb:26:ef:05:58:3c:45:a5:
                    2e:e4:c1:cd:4a:fb:3f:2b:c4:fc:a5:ee:72:4f:48:
                    2d:4c:13:62:2b:72:ac:6f:fc:2f:1d:a3:59:26:38:
                    6f:86:c1:0c:4f:07:4e:66:57:54:e0:45:35:fc:a2:
                    fa:3e:1e:c8:54:31:b6:29:e1:d2:a1:35:9f:c3:1c:
                    97:87:6d:a1:52:f7:27:2e:70:a9:65:b5:53:b6:a5:
                    c4:a0:c2:4e:47:29:4f:5b:94:6f:d5:e7:7b:2e:fc:
                    e7:9a:5c:38:cc:2f:1e:3a:27:6c:82:d3:6e:78:84:
                    ab:44:a9:41:03:02:51:98:ed:60:b3:6f:9e:15:b0:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B5:F1:D5:1B:5D:42:CF:1B:EB:42:93:3F:57:38:4F:F1:53:B5:9C
            X509v3 Authority Key Identifier:
                keyid:42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:3e:db:83:93:32:d4:1b:2a:ec:59:4f:e3:fd:3d:80:70:
         43:d2:35:49:87:73:20:8c:67:94:37:67:c2:7e:12:02:ab:2d:
         8d:9b:51:da:c8:b2:6a:2d:08:b6:c1:15:a0:71:f5:f7:19:0e:
         89:f5:ea:bc:e0:6a:58:cc:5e:c3:78:a5:c6:20:82:5e:d7:79:
         62:c7:2b:36:cd:58:d9:05:c7:1f:2a:c7:1a:b8:7c:fa:18:43:
         3d:b7:a0:3c:bc:38:12:88:c0:56:6e:be:33:40:5a:18:06:e8:
         68:42:d7:bd:b8:ca:74:3f:f0:3f:5a:4d:15:10:26:fa:54:1b:
         78:db:cf:40:dc:3c:c0:af:93:c3:16:b4:a6:55:1e:36:ef:49:
         fd:df:3f:ae:b2:ed:ba:c0:11:6b:3d:c4:c2:54:6e:e0:22:e8:
         08:3b:5c:91:b2:e3:90:dd:bb:f1:a6:f5:f0:21:a3:2c:42:84:
         10:97:48:44:0b:fe:06:06:4f:0c:e9:ae:54:f0:be:cf:91:61:
         62:cd:ec:fe:5b:5d:a7:9b:d2:56:11:ef:bd:bc:dd:e5:a2:cb:
         81:fb:5d:b1:b2:9f:4f:cf:a9:a5:b7:bc:f7:d4:9b:c9:e0:73:
         69:f0:ef:b5:d9:75:b9:4f:af:00:3d:9f:b9:6d:5e:74:5d:ef:
         27:18:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:38:19 2025 by rpki-client