This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a3a2f33362d3336203d3e20323633333537.roa
File:                     323830343a313465343a3a2f33362d3336203d3e20323633333537.roa (raw, json)
Hash identifier:          oGRrVL/V3F2cykUCVEp+hluj8E7mauUTHAWhBU4iww4=
Subject key identifier:   21:4A:AE:41:D0:37:93:28:90:21:F1:4F:9A:D0:87:16:ED:A4:80:14
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       17E18136F28AD66DEFE2FEF65375DFF9D15B454E
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a3a2f33362d3336203d3e20323633333537.roa
Signing time:             Thu 13 Nov 2025 19:19:44 +0000
ROA not before:           Thu 13 Nov 2025 19:14:44 +0000
ROA not after:            Thu 12 Nov 2026 19:19:44 +0000
asID:                     263357
IP address blocks:        2804:14e4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 15:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e1:81:36:f2:8a:d6:6d:ef:e2:fe:f6:53:75:df:f9:d1:5b:45:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Nov 13 19:14:44 2025 GMT
            Not After : Nov 12 19:19:44 2026 GMT
        Subject: CN=214AAE41D03793289021F14F9AD08716EDA48014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e1:6f:8b:7d:db:55:a9:4f:7a:c9:f3:de:64:
                    f6:f4:f2:dc:a3:ce:2b:ba:8d:fa:93:9d:01:bf:ff:
                    23:eb:e7:cb:8c:34:a8:e0:84:86:01:8c:22:22:50:
                    e9:97:d8:3b:73:04:77:33:78:46:c0:84:dc:89:1e:
                    74:7d:e0:00:1c:60:2c:de:c2:c1:69:82:9b:d7:8d:
                    ce:69:87:bf:41:86:0d:be:75:4e:f2:7c:78:07:1f:
                    0e:60:a3:3c:b6:b4:16:b2:c8:cf:4a:3f:70:bb:a0:
                    7b:de:e2:f2:95:95:1e:5b:b6:cc:f9:d8:e1:00:34:
                    e1:ae:1c:6b:02:d5:d2:e6:9a:3c:06:b7:6a:cb:29:
                    e7:be:9b:56:36:ce:8d:07:5d:5f:eb:56:b7:6e:e3:
                    b0:4f:2c:3d:fc:3a:95:38:3a:5c:1a:b1:f7:d2:10:
                    11:5a:a6:5d:91:64:23:28:a3:02:f1:a3:57:fe:16:
                    22:9e:4c:be:48:d1:03:f2:e5:16:25:c9:57:76:e0:
                    60:d3:90:3d:1e:a2:23:d3:e3:05:0e:6e:10:b9:b6:
                    0a:79:22:b3:b4:ec:82:76:0d:8a:08:21:c9:56:54:
                    08:8c:88:f8:21:9e:69:8c:7c:fd:b1:f2:ae:48:80:
                    39:86:13:99:87:f5:39:58:69:bf:3d:bc:47:55:a6:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4A:AE:41:D0:37:93:28:90:21:F1:4F:9A:D0:87:16:ED:A4:80:14
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a3a2f33362d3336203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14e4::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:ec:43:a8:5e:f4:b3:0f:86:c3:97:de:01:22:15:6b:27:
         7d:80:3b:cb:40:01:6c:32:a5:28:19:5e:99:e9:ec:3e:12:5d:
         36:fa:c1:7e:b2:48:52:f7:1e:47:1f:d9:59:ea:29:0f:6c:fa:
         45:f7:c2:66:95:14:ea:2d:d7:f5:ff:26:db:5e:9b:fe:20:b1:
         e0:34:1c:14:59:55:14:b0:0b:23:5a:06:61:e1:4f:9f:7b:88:
         e4:32:32:c1:53:d9:21:07:bd:5b:f4:29:a1:39:dd:c6:cf:ff:
         45:ca:87:b9:78:40:c0:3b:a5:2d:e0:21:86:25:89:1a:81:fa:
         c9:b0:d1:fe:0f:71:f1:d5:f0:eb:e3:e8:1e:a6:e3:0e:f4:6f:
         d5:32:b8:bd:15:4d:d1:ee:d6:92:e2:d0:72:a8:ff:09:0a:e8:
         8e:9a:42:5b:ea:ff:dd:8f:39:0f:2e:13:a2:45:5a:40:9f:bc:
         26:eb:6d:ca:c4:9f:57:99:d2:9e:7e:c9:80:1d:cf:e3:77:89:
         fe:e4:02:c4:35:a9:b8:92:22:7d:f9:49:b1:36:5d:94:c1:da:
         c0:7c:57:2c:80:e8:a1:24:e6:2a:6b:24:1d:e3:a6:04:35:59:
         3c:70:cc:5b:9e:52:fc:2f:3a:23:52:a7:35:c7:66:6f:24:d3:
         03:31:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:18 2025 by rpki-client