This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a666630303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          8VXf6NSTyjhynCvae1w/03dkI9H1aqdrrkQ+yNVTYfE=
Subject key identifier:   FC:62:C0:8C:2F:0A:24:40:8F:FE:7A:C9:D0:AF:61:A9:7C:F1:E5:72
Certificate issuer:       /CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
Certificate serial:       39E7ADA446B72B5BCC27E9B6246C28C817BA886E
Authority key identifier: 70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Thu 04 Dec 2025 14:47:43 +0000
ROA not before:           Thu 04 Dec 2025 14:42:43 +0000
ROA not after:            Thu 03 Dec 2026 14:47:43 +0000
asID:                     262687
IP address blocks:        2804:385c:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e7:ad:a4:46:b7:2b:5b:cc:27:e9:b6:24:6c:28:c8:17:ba:88:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
        Validity
            Not Before: Dec  4 14:42:43 2025 GMT
            Not After : Dec  3 14:47:43 2026 GMT
        Subject: CN=FC62C08C2F0A24408FFE7AC9D0AF61A97CF1E572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:bf:e2:92:8f:b7:f8:19:e9:89:97:ca:e1:
                    37:96:9e:04:76:2d:71:88:7c:cc:f5:b0:84:45:85:
                    7a:55:54:9c:64:c8:12:11:a6:71:3e:f4:33:4d:a7:
                    2f:d9:31:e0:8d:f7:18:67:28:95:f3:b2:29:34:50:
                    81:1c:ef:89:7f:5e:38:96:e6:4b:da:de:36:3a:f9:
                    2f:ab:ae:d6:37:a1:0e:11:69:3c:d8:c3:db:a9:1b:
                    21:02:25:72:b6:6e:e8:2f:2d:61:9b:d2:1b:3e:db:
                    24:d6:a5:79:a4:7c:80:a2:fe:69:03:4a:20:52:f9:
                    77:8c:7b:92:30:c0:b6:f9:e5:cb:40:f3:75:a1:44:
                    2d:ef:82:14:7c:c3:da:e7:44:30:c6:2b:88:5a:f3:
                    c5:4f:bc:dc:db:fb:d8:0b:f7:0a:8f:04:cf:62:5c:
                    a6:8a:0c:a2:98:74:e9:32:ff:be:af:6c:55:cc:2d:
                    3c:b2:51:50:73:49:40:0b:6a:68:0c:9b:dd:a1:52:
                    f3:ab:36:b5:54:f2:41:f1:60:ca:e5:d6:32:a6:c0:
                    b1:02:52:88:c7:b6:2a:8b:ac:25:75:32:73:16:90:
                    15:61:e7:62:fd:b3:56:4b:40:fc:7b:20:85:21:c5:
                    42:96:ce:8e:a1:ec:14:14:c3:22:8d:bd:e2:30:42:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:62:C0:8C:2F:0A:24:40:8F:FE:7A:C9:D0:AF:61:A9:7C:F1:E5:72
            X509v3 Authority Key Identifier:
                keyid:70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:18:10:77:a6:8b:6c:08:1e:30:e8:91:ab:e4:37:65:7a:
         dd:c5:24:10:27:8a:50:fe:9d:f9:7d:47:e3:ad:c4:93:09:26:
         27:51:f4:6e:91:a0:96:05:85:94:ad:8a:4d:a3:d8:04:60:d7:
         72:13:dd:59:30:c6:12:7b:b7:7a:2d:6a:4c:3c:21:0a:8b:08:
         0d:4f:e7:8c:46:90:52:39:6b:af:4f:b3:ae:04:50:46:b7:6c:
         9b:fd:46:97:71:fa:d3:c5:3f:7e:22:3a:97:0a:76:cc:cd:d7:
         cb:5c:fd:13:db:0d:9b:68:04:3f:06:ac:c4:28:4d:92:51:c9:
         ee:d5:d3:83:f5:0b:6a:23:7c:ca:d8:b1:62:46:30:44:cc:0c:
         0d:2f:2a:eb:36:28:f0:23:99:9d:a8:a5:49:2e:05:d7:8d:cb:
         b8:39:00:2e:2f:0e:7d:24:56:21:3f:20:48:c3:14:a3:9a:fc:
         7b:aa:08:3e:5a:26:d6:c2:97:14:f5:79:06:de:c5:60:3f:d7:
         78:b8:e7:a2:ec:db:85:c8:c2:0e:ff:ca:8f:4c:63:96:dd:04:
         b4:9f:81:32:05:da:13:c3:df:f3:79:06:59:bf:83:a1:93:32:
         ad:d8:0a:54:ab:cd:8a:5b:66:e3:ee:46:bd:45:3c:92:90:cb:
         de:0e:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:13 2025 by rpki-client