This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d313238203d3e20323635393834.roa
File:                     323830343a343064343a3a2f33322d313238203d3e20323635393834.roa (raw, json)
Hash identifier:          iViQllJOfBrdCFSdtSeBPm+gdpWSyGmuimxrjtIMkhU=
Subject key identifier:   0E:04:4C:4C:72:D1:00:76:00:75:D1:92:B8:55:98:D5:91:25:DA:73
Certificate issuer:       /CN=2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA
Certificate serial:       3E06109AE7095C6B956E78EAB7325C3FAB41F343
Authority key identifier: 2F:C0:2A:75:46:CC:2F:E0:8E:3C:D4:5F:02:F0:E8:FF:3C:00:A8:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d313238203d3e20323635393834.roa
Signing time:             Mon 24 Nov 2025 16:33:22 +0000
ROA not before:           Mon 24 Nov 2025 16:28:22 +0000
ROA not after:            Mon 23 Nov 2026 16:33:22 +0000
asID:                     265984
IP address blocks:        2804:40d4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.crl
                          rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:06:10:9a:e7:09:5c:6b:95:6e:78:ea:b7:32:5c:3f:ab:41:f3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA
        Validity
            Not Before: Nov 24 16:28:22 2025 GMT
            Not After : Nov 23 16:33:22 2026 GMT
        Subject: CN=0E044C4C72D100760075D192B85598D59125DA73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:0c:49:b2:1a:ce:15:bd:fe:5e:b4:07:d7:
                    1c:b6:dd:06:87:75:a8:16:31:c6:a0:0e:97:3d:51:
                    53:1d:3a:4e:31:8f:4c:ec:6e:4b:fd:44:eb:20:65:
                    25:fe:30:9d:b6:4c:bf:b0:f8:81:3f:0a:76:05:67:
                    00:7f:c2:c0:30:97:79:19:5f:10:b7:c4:43:0a:6b:
                    e0:41:23:7d:10:a9:02:1e:f5:ed:19:2f:64:bc:75:
                    d6:97:b1:43:b0:73:b5:2b:aa:70:ed:9b:ac:0b:27:
                    0a:62:7c:b7:46:45:db:2b:9c:cd:54:8f:23:4a:6e:
                    38:99:a1:e5:cb:23:e5:f7:f5:6a:02:82:71:26:52:
                    a0:3c:42:3b:af:77:b7:f9:75:64:9c:d3:9f:f7:6d:
                    2f:4d:b3:98:75:76:9f:c1:f8:70:19:59:8c:e8:a0:
                    ca:05:ea:d3:db:ee:f3:49:9c:98:e7:20:c3:5b:25:
                    1c:c5:e9:06:08:de:90:96:42:4d:27:d1:cd:7f:47:
                    64:00:0f:b6:b7:b6:73:05:ce:d7:b7:5b:45:82:ff:
                    57:2c:5f:1b:fe:1e:cb:e8:fb:f0:c5:bc:5a:39:77:
                    fc:55:eb:dd:b4:d7:c0:b7:18:34:0e:85:d2:3b:78:
                    ba:a7:1e:2d:c6:b9:1d:fa:51:5c:91:d2:2f:4b:f7:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:04:4C:4C:72:D1:00:76:00:75:D1:92:B8:55:98:D5:91:25:DA:73
            X509v3 Authority Key Identifier:
                keyid:2F:C0:2A:75:46:CC:2F:E0:8E:3C:D4:5F:02:F0:E8:FF:3C:00:A8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d313238203d3e20323635393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:2b:cf:b3:87:9d:86:eb:d7:ff:4c:13:78:ea:31:7f:78:7f:
         05:7b:36:d9:77:e2:ad:a4:20:bf:ef:85:2b:20:67:7c:ea:73:
         a6:c7:d1:35:72:dd:04:03:60:94:da:51:60:1b:98:f6:6c:d2:
         5d:6f:18:ea:cd:2e:14:6e:d2:6f:f8:7e:e7:1d:0b:76:02:90:
         e6:b7:6b:d6:38:a6:3b:9f:1e:13:74:2d:42:c3:d2:77:7d:7b:
         ca:44:3e:08:cc:d3:4b:a0:34:78:6c:47:2d:c4:9f:eb:84:40:
         55:89:08:56:fe:bf:52:80:61:74:49:77:29:f9:33:3e:f4:c5:
         c4:85:94:9b:3a:89:e1:e3:fb:88:21:48:d2:52:4f:9e:85:f7:
         20:1c:1a:da:40:f1:e4:d8:ee:d4:e2:aa:2b:93:f4:6b:25:19:
         12:b4:3d:66:ff:09:40:74:b7:30:e5:39:ed:7d:86:62:94:72:
         2c:81:5d:2c:3f:cb:fd:71:bd:c3:2b:a3:42:c5:3d:4e:80:ed:
         91:7f:b5:90:a5:1b:07:4e:34:79:e0:2e:95:bf:12:81:73:5a:
         2b:13:23:27:95:c4:db:fe:ae:d8:f0:6a:f3:6e:0b:f7:4c:16:
         d4:da:e8:30:12:e5:57:3b:fe:81:7d:92:2c:1c:8d:d7:c4:68:
         97:f8:a1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:53:19 2025 by rpki-client