This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/323830343a353466303a3a2f33322d3334203d3e20323638363739.roa
File:                     323830343a353466303a3a2f33322d3334203d3e20323638363739.roa (raw, json)
Hash identifier:          H1aMOeU4sdg/2DSsUWXWmn/IoUsu227F4IO5X0k/y1c=
Subject key identifier:   6C:E6:DE:59:5B:E5:38:E9:DC:F6:79:0E:E6:DA:CF:65:F3:A0:BC:8E
Certificate issuer:       /CN=F0C4C67F3FA885820D6AA92F1B5ED3F79798FAFB
Certificate serial:       6A5CC08287EE2E605C89269DB43454E103C9FBAB
Authority key identifier: F0:C4:C6:7F:3F:A8:85:82:0D:6A:A9:2F:1B:5E:D3:F7:97:98:FA:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C4C67F3FA885820D6AA92F1B5ED3F79798FAFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/323830343a353466303a3a2f33322d3334203d3e20323638363739.roa
Signing time:             Sat 22 Nov 2025 14:35:57 +0000
ROA not before:           Sat 22 Nov 2025 14:30:57 +0000
ROA not after:            Sat 21 Nov 2026 14:35:57 +0000
asID:                     268679
IP address blocks:        2804:54f0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/F0C4C67F3FA885820D6AA92F1B5ED3F79798FAFB.crl
                          rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/F0C4C67F3FA885820D6AA92F1B5ED3F79798FAFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C4C67F3FA885820D6AA92F1B5ED3F79798FAFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 17:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5c:c0:82:87:ee:2e:60:5c:89:26:9d:b4:34:54:e1:03:c9:fb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C4C67F3FA885820D6AA92F1B5ED3F79798FAFB
        Validity
            Not Before: Nov 22 14:30:57 2025 GMT
            Not After : Nov 21 14:35:57 2026 GMT
        Subject: CN=6CE6DE595BE538E9DCF6790EE6DACF65F3A0BC8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:50:c1:8d:ae:6e:84:ac:99:a9:43:41:21:
                    8e:36:37:5d:2f:85:d7:26:e8:27:02:09:1c:01:02:
                    f6:72:d2:23:1f:48:40:cd:d7:79:95:c5:00:ba:7f:
                    27:0e:56:6b:9c:28:78:b9:14:19:77:b4:63:1c:59:
                    f1:2b:f5:89:c2:92:5f:a0:ef:36:fe:ab:de:03:8b:
                    70:8a:9b:b6:fc:db:10:2a:0c:cb:a0:a8:ae:1e:0d:
                    9b:2c:8f:8e:2b:d8:28:f8:cd:41:b7:66:9c:7e:b3:
                    78:f0:8f:60:37:91:d8:2d:01:52:81:7e:18:9c:af:
                    d4:c4:dd:f1:a1:08:4f:b5:ce:9c:a9:0f:bf:e1:bf:
                    6b:c6:a4:58:f5:cc:7b:fe:58:22:3a:be:d9:75:b5:
                    b9:af:71:ee:ee:d4:7a:07:38:27:01:4f:a7:2b:a3:
                    f3:a3:dc:29:86:e9:1f:64:8c:12:bb:46:0f:f6:03:
                    eb:57:47:10:74:4d:09:05:02:01:67:8e:db:2b:0a:
                    e9:ba:3d:d6:f6:ef:18:a9:44:e0:90:cb:33:bd:e1:
                    6b:c9:49:9b:d7:8f:f2:b5:12:10:4c:58:20:f5:1c:
                    aa:b4:fb:10:05:60:68:76:bf:3e:50:31:21:bd:88:
                    bf:32:27:ce:d0:e5:1f:77:3a:57:4e:4f:58:11:29:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E6:DE:59:5B:E5:38:E9:DC:F6:79:0E:E6:DA:CF:65:F3:A0:BC:8E
            X509v3 Authority Key Identifier:
                keyid:F0:C4:C6:7F:3F:A8:85:82:0D:6A:A9:2F:1B:5E:D3:F7:97:98:FA:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/F0C4C67F3FA885820D6AA92F1B5ED3F79798FAFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C4C67F3FA885820D6AA92F1B5ED3F79798FAFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/323830343a353466303a3a2f33322d3334203d3e20323638363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:53:b6:d0:bc:90:a9:95:9f:03:7d:63:e7:27:72:f1:62:
         24:eb:11:b8:f3:cd:50:12:58:5b:29:6c:42:64:c8:f0:cf:4d:
         67:97:33:c7:50:69:52:b2:82:55:bc:f0:0a:b3:29:9f:17:8c:
         78:d0:b6:05:53:0d:29:48:e2:10:5a:80:85:f6:7a:3c:5a:3c:
         85:77:fd:90:3e:9a:a7:33:6f:b0:86:09:bb:68:0c:99:cb:d7:
         4e:80:83:d5:7a:15:95:6c:f9:03:ba:a3:66:2a:b9:5a:3b:09:
         bc:a9:42:45:8d:89:78:20:a0:cc:65:4b:c7:e5:8f:1c:09:21:
         b0:a1:c3:65:24:a8:5c:56:dd:8f:41:e8:23:30:76:d9:bb:1f:
         e5:46:46:2b:a5:eb:5e:bc:71:f1:d9:11:e7:58:d3:3d:0b:09:
         bf:47:d7:1a:22:a5:bd:12:24:9b:6a:5d:3b:23:50:d6:ff:e8:
         6d:df:d3:9a:dd:98:6f:d7:66:27:75:fb:69:f7:0c:37:26:da:
         4c:0e:99:9b:f2:34:56:fb:d2:47:2a:a8:0b:fe:c6:65:81:d4:
         4f:c2:d2:c5:7b:cc:43:e3:46:d6:0b:dc:b2:55:bb:68:30:88:
         4b:a8:6f:91:79:4f:06:68:5a:30:c5:62:e6:cd:e4:2a:bd:01:
         04:a8:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:22 2025 by rpki-client