This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/323830343a376462383a3a2f33322d3334203d3e20323731353738.roa
File:                     323830343a376462383a3a2f33322d3334203d3e20323731353738.roa (raw, json)
Hash identifier:          7o57dmoYmGY35X/XI6otFksIoQP0rheP0yCd/SBL6/k=
Subject key identifier:   75:36:F7:4E:22:37:E1:9D:85:55:A5:B5:7F:67:69:17:ED:61:16:2D
Certificate issuer:       /CN=32224D471FCAE0C6C577A58410B9E132506F872A
Certificate serial:       2DFF694A8952946115797FA1176D1EB4EA7C6068
Authority key identifier: 32:22:4D:47:1F:CA:E0:C6:C5:77:A5:84:10:B9:E1:32:50:6F:87:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32224D471FCAE0C6C577A58410B9E132506F872A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/323830343a376462383a3a2f33322d3334203d3e20323731353738.roa
Signing time:             Mon 17 Nov 2025 11:13:59 +0000
ROA not before:           Mon 17 Nov 2025 11:08:59 +0000
ROA not after:            Mon 16 Nov 2026 11:13:59 +0000
asID:                     271578
IP address blocks:        2804:7db8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/32224D471FCAE0C6C577A58410B9E132506F872A.crl
                          rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/32224D471FCAE0C6C577A58410B9E132506F872A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32224D471FCAE0C6C577A58410B9E132506F872A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ff:69:4a:89:52:94:61:15:79:7f:a1:17:6d:1e:b4:ea:7c:60:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32224D471FCAE0C6C577A58410B9E132506F872A
        Validity
            Not Before: Nov 17 11:08:59 2025 GMT
            Not After : Nov 16 11:13:59 2026 GMT
        Subject: CN=7536F74E2237E19D8555A5B57F676917ED61162D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:6d:63:dd:5a:8b:36:d9:2d:85:ab:a8:9d:
                    34:b5:4f:8a:a6:7f:1e:2b:23:d5:36:95:98:b5:03:
                    d2:26:37:46:23:ab:8d:d9:0c:99:5f:50:77:da:bd:
                    4f:3f:32:67:ac:ed:e5:9d:f5:be:90:0d:79:4b:c5:
                    da:3a:eb:56:bf:39:77:6f:ef:5f:33:b2:34:8c:d0:
                    23:96:89:1a:b4:2a:56:2c:f0:30:8a:56:4e:37:1d:
                    1f:63:b0:8a:ae:fe:6e:9b:49:ae:1b:37:4f:bd:fa:
                    bb:6e:a6:a6:6c:fc:85:68:9a:92:4e:fe:20:81:a8:
                    93:ca:04:b2:01:04:31:ac:a5:98:48:1c:61:8b:30:
                    0e:f6:11:cd:7c:13:5d:f7:dd:b0:98:d7:3d:66:7a:
                    d8:49:da:51:3c:c1:61:11:66:52:9d:be:89:39:48:
                    44:dc:2d:9b:bc:3f:13:be:f1:11:ac:c8:41:1c:88:
                    27:62:ce:ac:e8:5f:83:d7:97:89:af:90:b8:26:b0:
                    55:d3:8f:67:a5:1c:43:46:24:92:c9:56:30:b4:d6:
                    ed:0e:c6:98:4d:67:e0:84:76:cf:cd:62:ea:a5:d3:
                    42:31:4a:19:86:df:ba:21:f1:cb:0e:dc:77:df:46:
                    ea:6b:3b:69:bb:bb:d2:84:c3:e9:89:cd:0a:6b:30:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:36:F7:4E:22:37:E1:9D:85:55:A5:B5:7F:67:69:17:ED:61:16:2D
            X509v3 Authority Key Identifier:
                keyid:32:22:4D:47:1F:CA:E0:C6:C5:77:A5:84:10:B9:E1:32:50:6F:87:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/32224D471FCAE0C6C577A58410B9E132506F872A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32224D471FCAE0C6C577A58410B9E132506F872A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/323830343a376462383a3a2f33322d3334203d3e20323731353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7db8::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:f1:54:db:cb:6e:3c:d3:46:b4:8b:c2:f1:59:15:8b:8e:5c:
         30:be:30:66:f3:62:df:75:e1:22:c0:98:eb:2a:0a:7e:e0:eb:
         68:0e:2d:a6:72:e2:66:57:35:c8:42:57:9f:68:e8:92:5f:7a:
         c6:5f:7f:0d:2a:ca:af:d8:be:a8:df:d0:04:24:e3:d9:ca:32:
         eb:c9:96:60:fd:51:c0:b9:1d:43:ae:98:e1:63:b1:a6:b4:f0:
         36:08:d0:35:a9:7d:7b:61:4f:88:d5:ac:0a:f9:17:78:90:bb:
         3f:5e:b5:70:0e:fe:1f:3a:5c:b0:f7:7a:cb:e7:a8:b0:26:e1:
         c0:bb:3b:cd:90:9c:5f:60:23:e9:d2:55:d8:07:d1:61:69:a9:
         7e:e2:e3:e5:2a:73:53:e4:b2:50:30:cf:9b:0d:64:05:b3:61:
         c5:12:90:49:c1:10:0c:4f:ae:71:21:86:a6:20:b5:e3:30:65:
         4a:b7:cf:c1:4b:04:7d:c3:cb:48:be:c3:c4:92:bb:43:f6:25:
         7e:dc:18:b7:ff:1d:f5:13:67:34:3e:7e:55:1f:cd:16:5e:17:
         61:74:a3:19:1f:64:0b:f0:00:e3:b7:68:66:2e:03:79:91:7d:
         22:25:01:47:5d:69:e2:a5:f6:8f:74:ab:c8:d2:52:46:f8:4c:
         7e:fa:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:52 2025 by rpki-client