This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa
File:                     323830343a353963633a3a2f33322d3332203d3e20323638373236.roa (raw, json)
Hash identifier:          DYBqFpwEXu5oohxEJY0b1eFdk2rhufsBsSrCX9nRl4c=
Subject key identifier:   F6:EA:1F:E8:86:EB:60:C9:EC:AA:5B:C5:10:F6:58:5E:BC:8F:BD:3B
Certificate issuer:       /CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
Certificate serial:       2543DDEE16B63F0006715813BC84E930E26D8DE3
Authority key identifier: 08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa
Signing time:             Thu 04 Dec 2025 17:13:07 +0000
ROA not before:           Thu 04 Dec 2025 17:08:07 +0000
ROA not after:            Thu 03 Dec 2026 17:13:07 +0000
asID:                     268726
IP address blocks:        2804:59cc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:43:dd:ee:16:b6:3f:00:06:71:58:13:bc:84:e9:30:e2:6d:8d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
        Validity
            Not Before: Dec  4 17:08:07 2025 GMT
            Not After : Dec  3 17:13:07 2026 GMT
        Subject: CN=F6EA1FE886EB60C9ECAA5BC510F6585EBC8FBD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:c8:e0:6d:bc:d0:43:bc:5a:fc:30:a9:3e:
                    37:a7:47:4f:ef:e0:cf:51:d0:9f:11:cf:0f:12:15:
                    6f:b8:d3:30:b2:15:19:e5:bf:78:58:20:9b:de:b1:
                    52:a5:dc:a8:67:8f:f8:cd:b3:ba:68:c5:db:a0:13:
                    5a:74:4f:39:86:24:bf:6e:89:20:ef:39:26:bc:c5:
                    c7:b2:34:ae:a0:66:4b:64:d2:0b:3d:da:6b:0f:ff:
                    90:80:2c:d7:d5:d3:cf:7b:1a:c7:ea:0b:a8:06:6a:
                    51:4a:a3:bd:52:67:62:f3:41:b1:40:f5:ea:6b:1d:
                    42:bc:82:2a:d4:de:67:f6:b9:a4:a0:80:04:92:9b:
                    e4:6f:51:ea:2a:0c:6e:bb:e1:27:e7:d6:4f:f0:39:
                    33:02:f1:ab:e4:3b:c6:2e:b0:1e:b7:40:e0:96:db:
                    55:6c:e7:de:08:4c:fc:75:9c:94:ca:1a:2c:b0:12:
                    f1:54:f9:e9:6d:a9:17:36:ed:fc:f8:9f:7b:49:76:
                    4e:4f:c0:0d:10:dd:34:7b:5f:10:2a:20:7a:a7:31:
                    4f:fc:cf:7b:86:b4:c9:f6:97:cf:fa:3f:03:74:e7:
                    3e:79:8d:e2:b4:2e:40:15:89:11:1e:3e:4e:6e:25:
                    de:1d:f3:15:90:3d:cd:b0:60:8c:74:97:4f:b0:54:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EA:1F:E8:86:EB:60:C9:EC:AA:5B:C5:10:F6:58:5E:BC:8F:BD:3B
            X509v3 Authority Key Identifier:
                keyid:08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:2f:ab:ff:7e:09:50:23:62:19:d0:31:3c:58:13:a6:15:
         03:83:e2:45:04:12:9c:be:74:fb:c8:60:bc:0a:93:bd:4a:91:
         a4:0b:5b:6b:76:39:fb:c2:bd:18:6d:fe:07:b1:f5:93:f4:e1:
         ec:ac:58:e8:15:0b:f6:2e:99:3a:df:1d:81:63:6c:9c:d5:c9:
         1f:d2:1d:a9:62:bb:d4:3a:85:04:77:6f:6d:8f:e6:c0:6d:93:
         8b:d4:47:9a:90:78:b9:7e:45:b4:fb:0c:bb:18:61:8b:17:a8:
         0e:bb:ac:f8:f4:c0:f3:84:e7:c8:7d:22:5e:80:67:41:f1:a0:
         07:6b:33:5b:29:33:66:b6:f7:2f:89:fc:8f:27:53:e1:c7:31:
         f7:95:2c:b4:77:38:5a:93:17:0e:3e:24:b9:cd:5e:99:f4:c9:
         69:88:ab:a0:46:6a:cb:0d:7a:e6:aa:2d:9a:f6:02:c0:9c:4f:
         4c:1f:f4:aa:1c:98:1b:3f:d4:3f:ab:b3:19:e8:52:f0:59:a7:
         2a:35:0b:94:68:80:ee:c7:06:b8:f5:5b:16:b2:77:9b:09:01:
         4a:89:a1:3e:f6:95:14:1f:ef:98:f2:27:5e:d9:a3:c5:2c:a1:
         a8:fa:cf:8a:c0:60:15:07:5b:a3:b7:d1:47:3b:cb:37:5a:11:
         b1:ab:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:03:51 2025 by rpki-client