This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/323830343a313438633a3a2f33322d3438203d3e20323633333336.roa
File:                     323830343a313438633a3a2f33322d3438203d3e20323633333336.roa (raw, json)
Hash identifier:          rOX/TE3H+i/MIHCnt1N3fiiPl8ST4W1hZnpyZViTeCI=
Subject key identifier:   04:81:E3:4C:6F:04:CA:CB:C0:52:07:AD:A1:12:05:60:B2:DB:9F:D2
Certificate issuer:       /CN=44C4E7EA427432C8AF052B0213629A818E595AF0
Certificate serial:       4FDA8674A84B96E774555F7A15ABB73AB1896712
Authority key identifier: 44:C4:E7:EA:42:74:32:C8:AF:05:2B:02:13:62:9A:81:8E:59:5A:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/323830343a313438633a3a2f33322d3438203d3e20323633333336.roa
Signing time:             Mon 24 Nov 2025 17:21:10 +0000
ROA not before:           Mon 24 Nov 2025 17:16:10 +0000
ROA not after:            Mon 23 Nov 2026 17:21:10 +0000
asID:                     263336
IP address blocks:        2804:148c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.crl
                          rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:da:86:74:a8:4b:96:e7:74:55:5f:7a:15:ab:b7:3a:b1:89:67:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4E7EA427432C8AF052B0213629A818E595AF0
        Validity
            Not Before: Nov 24 17:16:10 2025 GMT
            Not After : Nov 23 17:21:10 2026 GMT
        Subject: CN=0481E34C6F04CACBC05207ADA1120560B2DB9FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:58:09:bd:18:57:e1:0c:20:51:b7:53:59:
                    1b:60:3f:1f:ed:3d:b1:ac:67:c7:af:6a:0c:b5:93:
                    c5:f9:c6:32:27:6f:0e:7c:90:5f:92:e8:cc:8c:d5:
                    c0:d5:ee:f8:85:ce:aa:b4:7b:23:a7:01:8b:17:5a:
                    f0:6e:2d:0b:8a:71:b0:9e:8b:c6:83:48:12:19:12:
                    64:66:36:ab:34:00:fc:1a:e3:81:78:33:c6:7e:d1:
                    04:45:0c:29:b7:c9:f9:73:a4:11:a7:b2:ad:3e:f0:
                    d4:4f:c1:54:42:54:99:52:ed:4b:50:fc:29:4a:7f:
                    35:3a:da:86:f2:6e:a7:8a:50:86:10:de:e6:ea:e8:
                    72:09:bd:94:94:b5:1b:eb:9b:c4:ec:9c:75:55:ac:
                    b5:92:7e:41:b0:65:73:64:73:bf:bb:aa:77:02:14:
                    3e:cb:bc:f7:f3:91:75:2b:20:2c:64:91:04:de:8c:
                    a7:e1:80:7d:5e:b2:ff:bc:64:95:71:f7:ae:52:7e:
                    23:4d:c7:3b:16:30:c8:0d:c8:2b:9c:fe:04:fe:a8:
                    ca:cf:af:f2:86:da:f8:2d:ac:09:69:ba:39:f7:f0:
                    1d:17:b0:d5:53:cd:3d:fc:e4:fc:8c:a5:27:54:98:
                    89:e7:de:94:a9:90:ef:dc:86:2b:83:20:95:14:8f:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:81:E3:4C:6F:04:CA:CB:C0:52:07:AD:A1:12:05:60:B2:DB:9F:D2
            X509v3 Authority Key Identifier:
                keyid:44:C4:E7:EA:42:74:32:C8:AF:05:2B:02:13:62:9A:81:8E:59:5A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/323830343a313438633a3a2f33322d3438203d3e20323633333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:148c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:22:76:6f:01:6d:16:17:f2:6d:1c:8a:c8:f0:93:e8:41:d6:
         75:4e:62:7a:d5:85:19:c4:c2:a7:d3:77:b2:61:88:06:55:91:
         8b:45:f2:5c:4f:97:cf:cf:ee:23:43:2f:cb:25:56:11:19:c9:
         0c:c0:2e:6d:6a:e8:18:53:27:23:b4:c1:94:b7:b7:82:f8:cd:
         03:b4:f8:7e:0e:a2:18:82:fe:d2:48:e0:89:a4:43:3a:70:6d:
         4d:c8:94:b0:99:85:fc:c9:c4:d6:1b:5b:bc:b6:b0:43:30:fe:
         42:f0:f4:9e:3b:fd:39:71:33:43:45:c9:5e:ae:e3:1f:a0:fb:
         6b:f9:fc:9b:d8:c5:2c:9a:01:64:ba:8a:ca:ce:93:cf:76:d8:
         f8:85:57:49:33:ab:75:c5:d9:b3:aa:5e:bc:34:c4:fe:a3:62:
         2d:2e:ca:48:37:be:cb:14:b2:fd:ed:44:12:a3:9b:17:93:50:
         82:d5:26:f2:3d:ec:dc:40:cd:67:b9:ac:c0:a4:d4:cb:31:bf:
         37:00:c3:9c:fa:d8:42:08:2d:b0:e4:cd:d6:22:c7:95:18:45:
         b8:7e:21:c0:b2:87:ef:96:4b:79:71:42:c1:80:93:ac:77:43:
         68:69:3f:60:4a:98:fc:59:ca:1b:b6:2a:3d:77:5c:29:de:94:
         7e:fe:55:ea
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT9qGdKhLlud0VV96Fau3OrGJZxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRDNEU3RUE0Mjc0MzJDOEFGMDUyQjAyMTM2MjlBODE4
RTU5NUFGMDAeFw0yNTExMjQxNzE2MTBaFw0yNjExMjMxNzIxMTBaMDMxMTAvBgNV
BAMTKDA0ODFFMzRDNkYwNENBQ0JDMDUyMDdBREExMTIwNTYwQjJEQjlGRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgFgJvRhX4QwgUbdTWRtgPx/t
PbGsZ8evagy1k8X5xjInbw58kF+S6MyM1cDV7viFzqq0eyOnAYsXWvBuLQuKcbCe
i8aDSBIZEmRmNqs0APwa44F4M8Z+0QRFDCm3yflzpBGnsq0+8NRPwVRCVJlS7UtQ
/ClKfzU62obybqeKUIYQ3ubq6HIJvZSUtRvrm8TsnHVVrLWSfkGwZXNkc7+7qncC
FD7LvPfzkXUrICxkkQTejKfhgH1esv+8ZJVx965SfiNNxzsWMMgNyCuc/gT+qMrP
r/KG2vgtrAlpujn38B0XsNVTzT385PyMpSdUmInn3pSpkO/chiuDIJUUj0ypAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBIHjTG8EysvAUgetoRIFYLLbn9IwHwYDVR0j
BBgwFoAURMTn6kJ0MsivBSsCE2KagY5ZWvAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkIycTdhR1RMdkdCVnRQcllVTUp0ZEF0YlhSWFZDWFFMQVlHZkZwUVlI
MkovMC80NEM0RTdFQTQyNzQzMkM4QUYwNTJCMDIxMzYyOUE4MThFNTk1QUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0QzRFN0VBNDI3NDMyQzhB
RjA1MkIwMjEzNjI5QTgxOEU1OTVBRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCMnE3YUdUTHZHQlZ0UHJZVU1KdGRBdGJYUlhWQ1hRTEFZR2ZGcFFZSDJKLzAv
MzIzODMwMzQzYTMxMzQzODYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzMzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUjDANBgkqhkiG9w0BAQsFAAOCAQEAmyJ2bwFt
FhfybRyKyPCT6EHWdU5ietWFGcTCp9N3smGIBlWRi0XyXE+Xz8/uI0MvyyVWERnJ
DMAubWroGFMnI7TBlLe3gvjNA7T4fg6iGIL+0kjgiaRDOnBtTciUsJmF/MnE1htb
vLawQzD+QvD0njv9OXEzQ0XJXq7jH6D7a/n8m9jFLJoBZLqKys6Tz3bY+IVXSTOr
dcXZs6pevDTE/qNiLS7KSDe+yxSy/e1EEqObF5NQgtUm8j3s3EDNZ7mswKTUyzG/
NwDDnPrYQggtsOTN1iLHlRhFuH4hwLKH75ZLeXFCwYCTrHdDaGk/YEqY/FnKG7Yq
PXdcKd6Ufv5V6g==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:30:39 2025 by rpki-client