This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/323830343a363037303a3a2f33322d313238203d3e20323639313637.roa
File:                     323830343a363037303a3a2f33322d313238203d3e20323639313637.roa (raw, json)
Hash identifier:          KOFA/+flNTtq410cKgupksTsi77mLVSyVot/nn5HOI8=
Subject key identifier:   68:C0:E1:B1:65:67:79:C5:A7:9C:20:CA:BD:5C:D5:6B:92:82:32:D8
Certificate issuer:       /CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
Certificate serial:       50178CE89AFF60EB48056CAF694A56F32B76859A
Authority key identifier: DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/323830343a363037303a3a2f33322d313238203d3e20323639313637.roa
Signing time:             Sat 08 Nov 2025 15:26:11 +0000
ROA not before:           Sat 08 Nov 2025 15:21:11 +0000
ROA not after:            Sat 07 Nov 2026 15:26:11 +0000
asID:                     269167
IP address blocks:        2804:6070::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl
                          rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 18:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:17:8c:e8:9a:ff:60:eb:48:05:6c:af:69:4a:56:f3:2b:76:85:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
        Validity
            Not Before: Nov  8 15:21:11 2025 GMT
            Not After : Nov  7 15:26:11 2026 GMT
        Subject: CN=68C0E1B1656779C5A79C20CABD5CD56B928232D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:0a:97:40:2d:e4:e1:12:63:14:d4:da:29:
                    31:ad:b0:f8:7e:60:87:c1:78:be:63:3a:55:93:88:
                    d8:f0:86:1a:c6:16:9a:53:f7:e8:ba:62:fa:f3:4d:
                    56:55:9f:43:3a:f5:d3:e9:f9:bb:ba:e2:8d:10:16:
                    d3:b0:a5:6b:e0:8b:c0:bf:c0:4e:f2:de:59:52:bc:
                    b8:70:d9:8b:b2:cd:3a:4a:52:50:ec:2f:3e:93:05:
                    b7:5b:87:fd:e4:af:60:02:0a:e9:b0:b4:97:8d:9f:
                    71:88:28:e9:e3:41:fa:43:ac:ca:56:f6:d9:92:cd:
                    7e:88:29:44:6c:2b:47:a6:a7:48:4d:90:c6:04:dc:
                    bf:bc:ea:82:0c:f4:92:70:95:58:3d:5a:9e:ee:98:
                    97:74:95:65:5b:10:2d:fb:98:d9:a4:d2:2b:e4:d9:
                    02:2c:95:ea:04:18:df:10:e7:f7:64:b8:df:28:b7:
                    49:cc:a1:75:52:75:da:22:9e:b9:71:18:e8:8b:b4:
                    00:ab:52:60:6a:a0:92:79:26:7b:12:62:ac:c5:9d:
                    11:b1:75:3f:1f:31:80:fe:9f:b2:cf:b5:d6:63:4d:
                    02:70:70:a4:9e:a6:3d:71:7b:dd:02:4e:fd:9a:86:
                    f0:7d:5f:09:67:f8:02:15:d3:0d:93:e1:42:4d:cb:
                    06:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C0:E1:B1:65:67:79:C5:A7:9C:20:CA:BD:5C:D5:6B:92:82:32:D8
            X509v3 Authority Key Identifier:
                keyid:DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/323830343a363037303a3a2f33322d313238203d3e20323639313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6070::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:52:e4:57:d6:cd:a2:61:08:bd:b0:56:6d:8e:8d:55:70:a9:
         e8:9f:45:ec:16:92:fb:36:ac:49:1e:16:11:c0:3f:fa:63:70:
         1b:bd:d2:12:28:16:de:71:ae:c6:08:87:f2:9f:d1:3b:3f:a0:
         22:c6:2c:22:e3:fa:02:78:01:5c:de:9a:94:23:ff:a2:01:08:
         c0:44:34:5f:cf:b4:83:67:94:9c:ae:76:bf:bf:df:97:f6:a1:
         f0:79:0b:83:69:40:d8:6b:49:d9:6f:50:0a:27:07:b2:ff:1a:
         d4:3f:6c:5a:a3:da:d3:28:ae:81:80:8e:71:38:38:52:85:81:
         d6:78:d2:d3:1f:85:a1:f1:23:cc:9d:34:23:45:a6:5d:2f:d5:
         64:78:4d:ea:f0:c2:ed:c0:6f:9f:02:f2:3d:7a:f7:84:8f:b8:
         75:6e:3e:5a:12:17:b9:2b:2f:08:ec:a8:30:e8:28:f4:fb:90:
         ee:10:fd:33:5e:64:bf:b0:91:88:61:39:dd:cb:46:6d:2e:bb:
         a0:99:ba:da:28:80:02:75:9f:31:7b:3c:28:06:c6:7b:d6:95:
         67:b5:b4:eb:8a:16:48:18:7c:a5:75:b5:2d:0a:b5:a3:87:fa:
         3c:29:19:45:36:10:28:e3:b3:f2:0c:49:c8:b4:63:53:5c:78:
         8d:12:8a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:49:37 2025 by rpki-client