This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a383030303a3a2f33342d3334203d3e20323638333732.roa
File:                     323830343a353032383a383030303a3a2f33342d3334203d3e20323638333732.roa (raw, json)
Hash identifier:          jo/TeD0bzIuwRgpKlA1ksO/JCrB6Ybd5P72oo+vLfjo=
Subject key identifier:   86:07:A3:7A:C5:41:E1:20:50:1A:99:F3:4B:68:3A:24:37:0E:D6:3D
Certificate issuer:       /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial:       26880571E461BF55E1299C4A10003C519AE1B0F6
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a383030303a3a2f33342d3334203d3e20323638333732.roa
Signing time:             Tue 11 Nov 2025 12:59:51 +0000
ROA not before:           Tue 11 Nov 2025 12:54:51 +0000
ROA not after:            Tue 10 Nov 2026 12:59:51 +0000
asID:                     268372
IP address blocks:        2804:5028:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
                          rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:88:05:71:e4:61:bf:55:e1:29:9c:4a:10:00:3c:51:9a:e1:b0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
        Validity
            Not Before: Nov 11 12:54:51 2025 GMT
            Not After : Nov 10 12:59:51 2026 GMT
        Subject: CN=8607A37AC541E120501A99F34B683A24370ED63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:e7:c0:1b:0e:30:ab:62:c8:fd:b5:cf:39:
                    2a:d7:db:c9:fc:c6:dc:67:48:0c:45:37:ed:07:31:
                    04:f1:e0:c8:89:7c:c8:5d:33:38:19:ab:7a:c8:c0:
                    ee:c7:22:b5:39:9c:b5:97:53:ac:b0:03:90:38:c3:
                    63:2a:b5:d8:b2:57:8a:5f:9c:58:e6:1a:e9:5b:ff:
                    66:15:43:2a:e7:57:66:8c:89:21:34:cb:9e:12:6f:
                    a3:ce:92:20:1c:15:15:2b:54:71:cb:be:c2:4a:46:
                    50:30:24:9e:39:5d:39:eb:e5:e2:5e:2b:b2:31:3f:
                    ca:90:d8:da:92:f9:e1:6b:9c:ca:d5:d8:e2:9c:8d:
                    19:78:46:fe:07:b5:52:dd:70:78:77:43:1c:c5:26:
                    ae:c5:f2:ab:d0:c7:fb:17:30:71:2b:d0:65:b4:6f:
                    c3:da:dc:42:08:57:bd:39:31:29:2f:bd:e5:b2:2a:
                    37:6e:a3:da:0c:40:17:72:0d:5b:96:98:ea:42:9a:
                    c2:dd:bd:6a:0d:2f:b2:4b:45:77:da:98:c9:1b:a4:
                    8c:48:1d:31:a0:bc:ab:7b:76:7b:55:75:bf:a2:b8:
                    f6:47:c9:45:fc:90:de:ff:db:8f:4a:65:78:3c:46:
                    0d:07:c5:2e:68:d1:ab:f0:66:5b:1c:26:2d:80:c3:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:07:A3:7A:C5:41:E1:20:50:1A:99:F3:4B:68:3A:24:37:0E:D6:3D
            X509v3 Authority Key Identifier:
                keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a383030303a3a2f33342d3334203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5028:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:99:96:05:c4:2a:66:b8:8a:e4:3d:fe:83:0f:2d:1f:6d:
         75:fd:b2:8f:eb:92:bf:b9:71:64:ee:65:77:1c:4c:aa:4d:62:
         dc:fd:2c:ca:cd:4b:88:58:75:8f:29:8c:8e:2a:5c:80:71:92:
         04:22:d3:45:04:38:3e:81:6d:1f:e3:62:f6:c2:5a:ed:27:e8:
         94:5a:5e:44:ac:8e:67:8f:6d:ba:df:89:a7:76:8c:e5:a2:04:
         24:f9:12:f0:9f:d2:53:f6:b8:20:52:77:4b:cd:80:d1:4a:05:
         7f:d2:8a:f8:58:d8:24:a0:01:0f:47:e1:e4:fc:40:bb:15:9e:
         2a:34:67:f5:62:c5:01:91:89:a4:09:36:4c:5c:f5:a3:3c:ac:
         91:03:18:58:94:3a:29:05:0f:b4:15:fa:d9:fa:85:16:c6:5b:
         61:b2:0d:9d:0f:a1:f0:91:45:d1:78:62:cc:b2:03:46:8b:7f:
         18:a9:b0:69:8a:c8:b3:d9:e8:87:24:d3:fc:0e:c5:e7:2e:20:
         5b:45:ca:20:8f:65:0d:2d:71:c9:09:3c:70:48:4f:9f:42:eb:
         45:61:b4:74:20:ab:b3:ad:23:fa:a8:44:e5:66:d6:4f:64:97:
         a6:91:9a:0f:ea:ed:a1:97:9f:ea:cd:58:3d:f0:3c:bf:7c:45:
         c1:93:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:05:57 2025 by rpki-client