This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a3a2f33322d3332203d3e20323633363038.roa
File:                     323830343a6664633a3a2f33322d3332203d3e20323633363038.roa (raw, json)
Hash identifier:          pzw+3ZN4vFsn7RJ/78MZYoevWm1a5DgnCpxg5PQ0AJY=
Subject key identifier:   F8:90:32:38:65:A3:E4:DB:A5:9B:7E:AB:ED:43:C5:04:24:93:A7:1F
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       1C237319E21E7E1A283737542B0BE78B0ABFFDB7
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a3a2f33322d3332203d3e20323633363038.roa
Signing time:             Mon 24 Nov 2025 13:40:15 +0000
ROA not before:           Mon 24 Nov 2025 13:35:15 +0000
ROA not after:            Mon 23 Nov 2026 13:40:15 +0000
asID:                     263608
IP address blocks:        2804:fdc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 07:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:23:73:19:e2:1e:7e:1a:28:37:37:54:2b:0b:e7:8b:0a:bf:fd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Nov 24 13:35:15 2025 GMT
            Not After : Nov 23 13:40:15 2026 GMT
        Subject: CN=F890323865A3E4DBA59B7EABED43C5042493A71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:15:ae:65:68:fa:13:3f:e7:09:80:fa:7f:
                    a6:4d:92:97:eb:72:3f:73:e4:dc:96:f0:cd:68:4a:
                    35:a7:e5:4e:43:43:a0:1e:13:ff:a6:d3:b0:d8:37:
                    61:83:11:a3:63:b5:fd:07:f9:7d:ec:ba:eb:2e:01:
                    a3:2e:57:ca:f4:db:77:9f:67:cf:c0:4f:a3:99:de:
                    6e:d3:69:22:2c:f3:d0:1c:36:53:77:f4:29:47:0a:
                    96:73:cd:f5:13:0c:46:87:85:ef:8a:80:20:ee:1a:
                    84:c4:83:c8:02:ca:f5:e2:b8:30:c8:5a:54:48:7d:
                    a7:5e:59:af:52:3f:2e:b1:ae:1c:fd:b9:5e:75:97:
                    6d:48:1a:d6:ef:87:90:2c:37:8f:4a:64:5b:56:26:
                    0f:ef:6f:2d:63:df:9c:77:25:93:d7:f4:5a:72:81:
                    bd:46:05:bf:a3:5d:2f:24:9b:b9:09:9d:39:ea:60:
                    6d:d0:9c:55:7d:58:de:0f:6c:5a:a1:56:f7:47:57:
                    12:c3:f1:7e:8b:cb:a4:5e:a7:4f:77:43:e1:22:3a:
                    02:1e:b2:b4:e1:01:d8:72:64:b5:10:38:5a:be:c1:
                    5b:6f:0f:10:b5:ba:52:c4:2e:91:e9:ee:84:3f:7a:
                    2b:63:ff:0c:a0:60:d1:b3:1a:01:8b:63:1e:e7:55:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:32:38:65:A3:E4:DB:A5:9B:7E:AB:ED:43:C5:04:24:93:A7:1F
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a3a2f33322d3332203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:34:d8:96:79:0b:6e:31:8e:a3:52:16:10:f9:87:d9:a3:4c:
         c8:b4:3e:bb:61:12:7d:cd:4d:f8:35:c8:69:89:ea:f9:c8:3b:
         18:47:a9:81:c1:e1:34:12:c8:05:66:87:2f:6b:88:df:97:8d:
         b4:58:5b:f6:bd:df:41:12:74:e8:54:e1:8c:39:4f:77:d3:b2:
         af:d4:64:9e:a7:d8:47:f7:da:72:19:78:f3:72:65:39:16:f6:
         7c:df:d3:32:8c:e3:f7:01:e8:8c:68:23:b3:19:24:2d:b1:d6:
         ec:1f:fd:d3:4d:cd:8a:03:01:8b:7b:0e:21:4b:39:1a:d0:14:
         41:15:ab:af:7b:bc:08:58:e3:43:95:bd:0d:7b:ea:08:30:cb:
         46:69:87:b5:46:00:35:2f:b2:17:15:b0:9a:6e:1a:85:ad:2f:
         e2:13:27:d7:c5:30:1e:2f:d2:65:41:21:86:99:24:4a:8b:7c:
         87:c6:18:95:95:00:70:44:59:17:2c:0f:c8:4c:28:30:b2:cf:
         84:20:e4:98:97:cc:4e:70:b9:eb:55:a9:83:11:37:b5:7a:56:
         28:9e:1d:76:36:86:66:a2:74:f0:1b:a7:fa:a9:87:c5:70:fa:
         6c:76:b6:bb:14:e6:29:5a:58:75:ce:a9:0f:73:e9:61:da:88:
         f3:28:b9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:09:26 2025 by rpki-client