This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          LdeyPQbGSJkL1rf2n5nGK/rJ3km7fjo7mdlyHmVjEp8=
Subject key identifier:   38:1B:33:46:C0:AA:F7:75:BA:6E:38:24:C9:B0:56:66:A1:61:E9:B2
Certificate issuer:       /CN=55EAC8B2C2BD61F877B5733091AD10F3F4403D6B
Certificate serial:       78A7260F77B9A73FA3DAD1E548712D16C3C5E7AB
Authority key identifier: 55:EA:C8:B2:C2:BD:61:F8:77:B5:73:30:91:AD:10:F3:F4:40:3D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Fri 21 Nov 2025 14:57:55 +0000
ROA not before:           Fri 21 Nov 2025 14:52:55 +0000
ROA not after:            Fri 20 Nov 2026 14:57:55 +0000
asID:                     265919
IP address blocks:        2804:3fd8:7000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 17:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a7:26:0f:77:b9:a7:3f:a3:da:d1:e5:48:71:2d:16:c3:c5:e7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55EAC8B2C2BD61F877B5733091AD10F3F4403D6B
        Validity
            Not Before: Nov 21 14:52:55 2025 GMT
            Not After : Nov 20 14:57:55 2026 GMT
        Subject: CN=381B3346C0AAF775BA6E3824C9B05666A161E9B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:b6:f0:81:6f:2e:07:61:ee:90:09:72:11:
                    3e:d0:62:f5:65:01:0d:63:0d:d5:eb:d4:39:06:03:
                    03:92:6c:8d:d9:d9:32:57:14:d3:f1:70:c4:07:c6:
                    4f:4a:37:3e:94:01:d7:d7:83:b0:ba:47:d3:c6:4f:
                    ce:cb:b3:5e:00:24:d9:2f:e7:b0:79:02:ab:61:d6:
                    48:5f:89:3d:3a:9a:e1:46:39:04:80:63:50:f1:71:
                    30:b1:ac:63:e7:2f:54:46:69:51:dd:0d:3b:25:bd:
                    ef:22:dd:14:6f:dc:33:39:13:f9:34:df:ef:cc:6d:
                    f6:17:1c:d5:e9:6b:a1:e2:63:1a:f2:95:e6:de:0e:
                    5e:ec:e4:0b:82:3c:b7:d4:f1:16:90:4b:1a:3b:07:
                    68:63:82:75:ed:80:d9:ad:aa:e3:f2:e9:9c:16:29:
                    1c:99:f6:b7:8f:d5:56:46:39:62:ac:4e:44:cd:60:
                    50:e9:27:86:71:cb:33:b9:bd:3f:bd:a1:0d:8f:3e:
                    56:87:98:06:23:62:41:a9:65:8f:01:fc:c1:6e:3d:
                    94:49:f8:a8:bf:34:6a:48:f9:a9:1b:e2:4c:b4:d8:
                    19:25:43:65:0a:09:39:bc:dc:14:4d:48:fd:75:bf:
                    df:72:f7:57:66:65:25:18:41:d5:a5:70:35:f2:09:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1B:33:46:C0:AA:F7:75:BA:6E:38:24:C9:B0:56:66:A1:61:E9:B2
            X509v3 Authority Key Identifier:
                keyid:55:EA:C8:B2:C2:BD:61:F8:77:B5:73:30:91:AD:10:F3:F4:40:3D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:ce:ac:bc:c9:99:32:7e:5f:a8:bb:cd:de:e3:a2:67:cc:13:
         82:8d:17:88:27:e2:06:74:fb:30:c9:13:b0:89:4e:ee:1e:0a:
         1c:f3:49:07:be:86:f7:e8:c4:40:23:68:b2:b6:81:23:ff:7e:
         d9:00:c0:c1:01:ad:1e:02:95:f5:d1:c2:31:77:68:81:62:ce:
         60:a3:22:60:9e:b6:1d:0f:f7:15:f4:e8:aa:0b:12:6a:6d:ac:
         fe:74:44:45:d3:be:37:46:56:b8:40:e2:47:26:15:f7:82:1a:
         93:a6:f1:1f:ea:c9:61:89:f4:50:4f:ba:46:c8:83:a1:fd:d6:
         5e:f9:61:32:49:10:26:5d:fd:8d:d2:a1:0f:1a:e0:6f:53:e4:
         7a:7e:84:31:44:2b:87:10:b0:fc:bf:97:7b:86:87:fa:23:51:
         53:5a:34:2d:97:dc:72:67:e0:4b:37:d7:be:c1:63:fb:24:12:
         eb:59:07:4e:a8:5f:b6:83:2d:a8:71:59:c4:79:fe:d9:3a:46:
         1d:b4:0f:1e:34:11:dc:48:92:56:03:32:96:57:a2:3f:c9:c9:
         0e:4c:6b:c5:bc:e0:d8:7f:06:b9:ba:91:13:d7:52:b5:82:9b:
         6d:cc:f7:f0:6d:1c:b2:3f:12:6b:0d:bc:73:46:79:b4:71:7d:
         2d:aa:63:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:04:30 2025 by rpki-client