This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/323830343a333539633a393030303a3a2f33382d3338203d3e20323636323936.roa
File:                     323830343a333539633a393030303a3a2f33382d3338203d3e20323636323936.roa (raw, json)
Hash identifier:          YUXyv5pG3eYy/PTUO51bQ5idp8Fo50tp64NwLad/tNg=
Subject key identifier:   91:0B:11:01:02:FC:A0:17:30:F4:F5:26:86:28:24:AB:DE:55:68:55
Certificate issuer:       /CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
Certificate serial:       30F698A015A0A5BA49872E03A0B0F730C71ED5D4
Authority key identifier: 57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/323830343a333539633a393030303a3a2f33382d3338203d3e20323636323936.roa
Signing time:             Thu 13 Nov 2025 15:45:54 +0000
ROA not before:           Thu 13 Nov 2025 15:40:54 +0000
ROA not after:            Thu 12 Nov 2026 15:45:54 +0000
asID:                     266296
IP address blocks:        2804:359c:9000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.crl
                          rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f6:98:a0:15:a0:a5:ba:49:87:2e:03:a0:b0:f7:30:c7:1e:d5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
        Validity
            Not Before: Nov 13 15:40:54 2025 GMT
            Not After : Nov 12 15:45:54 2026 GMT
        Subject: CN=910B110102FCA01730F4F526862824ABDE556855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:78:39:56:77:d7:95:ba:fb:50:a5:fd:13:
                    85:2b:07:df:74:46:3e:b1:52:95:bd:71:39:24:c1:
                    b7:ba:79:67:59:a0:7f:40:d2:cd:eb:4e:01:9c:c5:
                    85:b0:81:b4:36:40:bb:10:7c:d1:24:0d:e9:38:18:
                    46:42:93:41:c1:ef:5e:8c:e3:a7:0c:a3:09:e1:02:
                    a8:0b:0f:8b:32:59:74:c6:f4:6a:49:bb:bd:c7:a7:
                    66:1d:d5:98:f9:67:ce:c8:d6:57:0c:0e:4f:91:c5:
                    4b:83:54:ee:69:a4:7b:74:52:c5:02:aa:3f:79:0f:
                    fd:cd:ef:48:57:4e:89:c6:89:d1:ca:09:b0:23:d7:
                    a3:d2:1c:1f:80:96:3f:e7:a5:29:89:56:6c:c6:84:
                    c1:11:37:89:3c:5d:6b:ca:42:09:80:d7:4e:8b:cd:
                    fb:46:8e:21:e1:45:a2:ef:6f:b3:ca:04:7f:57:97:
                    9a:81:2a:59:d0:89:24:da:e9:11:3e:4f:a9:23:1a:
                    92:32:c8:b5:d1:b4:b9:d3:63:92:61:f9:5d:19:2c:
                    a2:62:85:01:20:36:ba:52:5b:09:cd:b6:b0:7e:ef:
                    1d:17:96:2c:30:7d:c9:72:cc:49:93:01:47:94:d4:
                    ab:3d:5b:df:d5:d6:21:31:3b:3a:36:54:f8:9b:6d:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0B:11:01:02:FC:A0:17:30:F4:F5:26:86:28:24:AB:DE:55:68:55
            X509v3 Authority Key Identifier:
                keyid:57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/323830343a333539633a393030303a3a2f33382d3338203d3e20323636323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:359c:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:01:b6:58:42:e1:4e:1a:33:09:98:1f:c2:73:31:7b:81:
         54:51:9d:48:0a:cb:eb:ad:2f:b8:3b:03:cf:b6:47:4d:60:78:
         66:70:5b:64:54:81:ae:6f:39:0f:70:c6:c5:90:8c:5a:33:50:
         7d:cc:79:0d:81:4d:c9:4a:65:4f:e7:43:02:14:23:4c:5c:e6:
         4f:55:f0:df:2b:a0:25:63:54:4e:f8:d5:07:4b:1e:f8:b4:2e:
         40:9c:d6:91:aa:b2:c1:a7:48:73:a0:15:26:72:de:58:5b:4f:
         ac:45:29:7e:3d:d7:90:05:2c:78:25:b2:bf:01:7d:41:48:17:
         f5:f7:0b:60:78:75:1e:63:ed:2f:47:18:9b:5d:6b:03:29:ff:
         11:62:0c:8a:c0:0d:8d:6d:02:48:87:91:47:da:33:9d:4f:1a:
         9e:66:0a:c5:02:31:ff:0f:55:4e:ec:9f:50:49:9b:87:21:a2:
         f6:61:39:ac:53:5d:8a:ae:39:97:ff:ca:1f:7a:21:3d:d3:e1:
         57:03:32:62:85:09:18:40:6e:46:4f:f0:29:60:6d:35:fa:7d:
         50:7b:49:41:8b:af:fc:c2:75:36:9e:71:ea:4e:db:12:8b:cf:
         6a:32:9e:1c:ba:7a:34:55:c4:a8:ca:14:e9:18:cc:71:5e:0f:
         98:90:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:17:21 2025 by rpki-client