This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          wGbNQGJ4IgHyfHLfUVqtxyBRHQnEVU/rc0Ar/0+PO5M=
Subject key identifier:   F8:4C:DA:FE:2C:5D:D0:5A:13:8E:AB:51:35:15:BF:69:92:5B:E2:8A
Certificate issuer:       /CN=55EAC8B2C2BD61F877B5733091AD10F3F4403D6B
Certificate serial:       28E64FA8886A7E4E2E79DA570467EDC13E932575
Authority key identifier: 55:EA:C8:B2:C2:BD:61:F8:77:B5:73:30:91:AD:10:F3:F4:40:3D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Fri 21 Nov 2025 14:57:56 +0000
ROA not before:           Fri 21 Nov 2025 14:52:56 +0000
ROA not after:            Fri 20 Nov 2026 14:57:56 +0000
asID:                     265919
IP address blocks:        2804:3fd8:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e6:4f:a8:88:6a:7e:4e:2e:79:da:57:04:67:ed:c1:3e:93:25:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55EAC8B2C2BD61F877B5733091AD10F3F4403D6B
        Validity
            Not Before: Nov 21 14:52:56 2025 GMT
            Not After : Nov 20 14:57:56 2026 GMT
        Subject: CN=F84CDAFE2C5DD05A138EAB513515BF69925BE28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:3b:d3:9c:e2:19:03:e4:1d:bc:fb:ec:d2:
                    e9:f7:e4:96:3b:d7:ed:8a:44:10:b2:a4:cb:0a:55:
                    bb:11:05:7c:2c:83:7b:6e:35:63:8c:4f:6e:14:6a:
                    29:22:ce:09:75:d2:bb:e4:5d:ca:e8:38:84:a5:21:
                    21:ec:a5:a9:c0:85:7a:82:9e:67:6e:71:04:ca:39:
                    32:79:9b:6f:18:74:d9:14:84:12:c9:b0:02:4b:a3:
                    8e:96:25:66:d4:30:87:bb:c5:78:c3:aa:96:e5:2a:
                    40:2f:5f:10:4e:5c:cf:bc:72:9a:08:0e:4d:99:17:
                    67:c2:28:ae:44:ca:a5:58:21:9c:7b:a8:52:08:05:
                    6f:48:da:0f:a4:a4:f1:36:b2:79:89:d6:5e:e1:21:
                    b7:04:22:2f:1a:b2:d9:fd:1e:af:c9:e3:92:62:53:
                    7c:b0:3f:c9:6b:09:19:68:67:52:b0:13:fe:e6:9e:
                    6a:5c:95:68:0b:cd:73:2e:f7:31:84:e4:d2:65:1a:
                    f9:ce:22:46:9b:3f:9a:ae:fa:f2:00:9d:be:d7:b5:
                    b2:dd:c6:ea:e6:34:86:d9:bc:b8:0f:ac:fe:61:3d:
                    47:16:ed:06:a7:ec:3f:45:f6:32:15:72:e3:a3:39:
                    3b:4e:43:92:db:f5:ff:58:3b:f5:1e:7d:41:1b:cb:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4C:DA:FE:2C:5D:D0:5A:13:8E:AB:51:35:15:BF:69:92:5B:E2:8A
            X509v3 Authority Key Identifier:
                keyid:55:EA:C8:B2:C2:BD:61:F8:77:B5:73:30:91:AD:10:F3:F4:40:3D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55EAC8B2C2BD61F877B5733091AD10F3F4403D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:92:57:e1:eb:26:da:39:5e:ae:a2:7e:7a:a5:40:01:4e:
         b8:a2:ea:1e:5e:93:18:6e:4f:f8:d6:db:f9:b9:40:97:27:61:
         5a:84:22:93:0f:c8:1e:ba:fa:31:9f:92:5d:7d:99:5e:33:0c:
         ca:a1:18:70:8d:b2:c3:fa:66:83:c7:0c:f7:89:06:2e:40:c3:
         f7:60:f5:46:58:13:29:56:27:b1:04:ff:41:53:e2:1f:32:30:
         23:e3:90:fe:13:c9:00:85:ef:b1:5c:67:e9:13:24:8d:de:60:
         08:21:69:cc:56:a0:9d:3e:1c:b2:a3:0d:73:95:c8:8e:2d:3f:
         71:96:14:a9:8b:82:4e:b6:0a:01:bb:e2:99:4d:9f:8b:e1:5a:
         06:f8:b3:fb:01:9c:44:e7:57:27:54:ce:cd:1c:11:bc:c7:7b:
         46:d1:1a:42:0c:50:65:60:c9:a9:6b:c8:4c:f4:65:63:9b:98:
         cb:0d:41:ba:d1:5e:9b:7f:66:c8:42:35:86:ab:71:c4:d6:7e:
         2d:d0:66:5f:c2:ee:91:5b:0b:8f:be:0e:99:67:e7:6a:7f:2d:
         66:63:1a:36:62:be:10:8c:2f:b4:42:6e:39:03:ec:68:7a:f5:
         20:6f:7c:6a:da:48:fa:df:07:a0:8d:63:1d:eb:13:c4:e9:07:
         2b:32:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:32 2025 by rpki-client