This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa
File:                     323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa (raw, json)
Hash identifier:          jpxlAKuIOSp4S174IlyeguM78r3xLuCw8AQHQ/aQB9A=
Subject key identifier:   FB:B8:DE:25:1D:75:D7:88:E7:41:AD:4F:7E:F9:04:BB:A7:6E:3B:12
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       17265689E88506712B85FB0A7D427A681D72D945
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa
Signing time:             Fri 14 Nov 2025 15:53:57 +0000
ROA not before:           Fri 14 Nov 2025 15:48:57 +0000
ROA not after:            Fri 13 Nov 2026 15:53:57 +0000
asID:                     271478
IP address blocks:        2804:7c24:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 15:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:26:56:89:e8:85:06:71:2b:85:fb:0a:7d:42:7a:68:1d:72:d9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: Nov 14 15:48:57 2025 GMT
            Not After : Nov 13 15:53:57 2026 GMT
        Subject: CN=FBB8DE251D75D788E741AD4F7EF904BBA76E3B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:5a:5a:fc:ff:5b:2d:3b:d7:5d:10:a6:4f:
                    f0:eb:d7:7e:6e:59:5c:93:ac:bf:65:7c:14:8e:0b:
                    fa:e0:b1:3f:a3:05:25:bd:fe:4e:63:ea:e5:50:74:
                    14:29:62:93:71:2f:e0:73:46:4f:ec:b7:de:74:a6:
                    f4:e8:a6:e7:54:99:62:c3:8e:f3:0a:b9:8d:49:71:
                    94:1a:c2:ba:7c:58:65:d1:6f:b5:41:4d:77:a0:d2:
                    ea:6c:7e:2b:b0:14:13:ab:44:ba:27:3f:73:41:50:
                    54:bd:e4:24:92:76:19:72:a4:23:01:52:c8:fe:fb:
                    ce:b9:6b:39:2a:c0:b3:5d:f5:28:26:6e:79:cb:60:
                    48:07:6c:82:f8:33:55:62:5a:a6:dd:47:b2:89:36:
                    a0:b1:38:6e:8a:51:6e:e6:0f:fb:b2:88:58:91:43:
                    de:e6:1c:ae:c6:8e:76:d5:f3:b5:af:a9:4e:33:09:
                    89:81:e2:63:12:51:48:4d:53:71:84:45:4a:a2:c7:
                    d0:ad:1e:eb:73:64:ae:2b:19:62:24:74:59:bd:de:
                    da:6c:e7:b4:a7:77:37:30:a7:19:49:c0:1c:ac:f8:
                    b3:d0:01:66:54:42:07:87:a2:75:96:ec:61:e2:9e:
                    00:83:b1:74:4e:63:d6:f3:2f:0b:26:3c:bf:08:8b:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B8:DE:25:1D:75:D7:88:E7:41:AD:4F:7E:F9:04:BB:A7:6E:3B:12
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:d2:ac:94:2d:76:66:b1:06:da:0f:bc:92:c9:48:8f:d8:
         b3:f1:59:32:b4:50:10:0b:5c:97:39:5e:5b:c9:50:b9:5b:e5:
         31:49:15:11:0d:7a:3d:02:05:e3:5f:a5:27:0b:33:a9:4f:5d:
         04:81:aa:88:34:22:4f:c5:be:4e:a7:0c:c4:e4:a3:cd:4d:60:
         8b:b7:37:fd:9e:85:5f:11:47:ab:70:6e:ce:0d:b3:03:92:b4:
         f7:af:d0:f2:6e:92:bf:6b:30:1b:54:de:f8:d6:74:70:15:73:
         1e:98:a8:27:ba:a5:d1:5a:74:dc:71:46:40:a1:6d:c3:21:d4:
         92:59:9d:f4:d3:f7:5b:ff:ee:b2:8e:32:c8:56:14:cc:f4:0a:
         24:3e:f8:5c:90:5d:5c:5e:60:9d:28:01:ba:20:c9:f0:35:3b:
         8f:21:1f:81:46:6d:8c:47:07:aa:e7:00:1e:35:25:ff:21:62:
         11:ac:f6:98:b2:05:71:ab:9d:d4:22:88:0c:59:9b:53:4d:99:
         49:4e:c1:63:e2:2c:89:0a:40:a7:4b:36:73:75:14:72:fe:a7:
         70:b3:8e:c8:ee:9f:46:76:b4:ea:be:88:9f:8d:ca:90:a6:1e:
         92:8c:4d:44:4f:87:43:27:4b:c8:22:74:50:bd:b7:30:83:e7:
         3b:0b:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:40:51 2025 by rpki-client