This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/323830343a353439633a383030303a3a2f33372d3337203d3e20323638363631.roa
File:                     323830343a353439633a383030303a3a2f33372d3337203d3e20323638363631.roa (raw, json)
Hash identifier:          hQPnIhtw5fqxjgmHL9zM0myGkfchVXzqxlLgsJ0GgEo=
Subject key identifier:   51:53:E3:97:2C:F9:80:A6:16:A4:55:9C:62:16:63:55:2D:46:6A:41
Certificate issuer:       /CN=359658CDF98BC8AFB017A6C135FE856E6FC51DD3
Certificate serial:       11728530EEC215D863BCA86B5468DEDE37FB600A
Authority key identifier: 35:96:58:CD:F9:8B:C8:AF:B0:17:A6:C1:35:FE:85:6E:6F:C5:1D:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/359658CDF98BC8AFB017A6C135FE856E6FC51DD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/323830343a353439633a383030303a3a2f33372d3337203d3e20323638363631.roa
Signing time:             Mon 24 Nov 2025 16:29:16 +0000
ROA not before:           Mon 24 Nov 2025 16:24:16 +0000
ROA not after:            Mon 23 Nov 2026 16:29:16 +0000
asID:                     268661
IP address blocks:        2804:549c:8000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/359658CDF98BC8AFB017A6C135FE856E6FC51DD3.crl
                          rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/359658CDF98BC8AFB017A6C135FE856E6FC51DD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/359658CDF98BC8AFB017A6C135FE856E6FC51DD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:72:85:30:ee:c2:15:d8:63:bc:a8:6b:54:68:de:de:37:fb:60:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359658CDF98BC8AFB017A6C135FE856E6FC51DD3
        Validity
            Not Before: Nov 24 16:24:16 2025 GMT
            Not After : Nov 23 16:29:16 2026 GMT
        Subject: CN=5153E3972CF980A616A4559C621663552D466A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e1:79:09:34:de:38:cf:25:d0:86:7e:64:90:
                    0f:31:56:b0:fd:3c:e8:a2:4c:72:f2:df:ef:61:bb:
                    7c:43:ad:03:2b:1f:52:7a:8f:4b:b7:19:bc:81:b0:
                    15:e7:9e:88:79:d0:68:d5:5b:35:7b:05:14:d0:1e:
                    1b:5f:91:ae:b6:aa:02:36:a3:a8:db:85:a8:42:02:
                    f0:8a:e4:09:95:06:e1:54:5a:30:52:a5:0a:e7:39:
                    6e:e9:cf:d9:65:2b:f7:2b:68:04:5b:ba:1e:0c:3e:
                    73:8a:2f:2e:c1:fd:8d:15:97:58:b1:b0:bc:eb:92:
                    e9:62:d7:d5:73:e8:96:48:11:1a:9d:b6:50:f2:0b:
                    13:93:ee:70:d6:bb:67:b7:0e:e0:f6:6e:81:b0:9f:
                    11:de:61:44:65:fd:d0:3b:38:7e:79:d0:b0:4c:a3:
                    44:7d:1d:bb:24:ed:ee:4c:1b:be:d2:6c:8c:8d:04:
                    18:c8:25:8c:f9:f1:e1:fd:49:15:6c:cf:7b:5e:84:
                    32:6c:bf:5f:85:37:b7:c4:8c:18:72:c6:5a:c0:61:
                    67:ee:ec:0b:e3:73:f3:fb:a1:cb:86:b2:8a:59:46:
                    47:6f:54:ef:66:2c:4a:b8:bc:00:59:fe:69:37:15:
                    7e:d6:6e:cd:f4:1b:a2:dc:44:d8:5c:7c:b6:7f:7d:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:53:E3:97:2C:F9:80:A6:16:A4:55:9C:62:16:63:55:2D:46:6A:41
            X509v3 Authority Key Identifier:
                keyid:35:96:58:CD:F9:8B:C8:AF:B0:17:A6:C1:35:FE:85:6E:6F:C5:1D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/359658CDF98BC8AFB017A6C135FE856E6FC51DD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/359658CDF98BC8AFB017A6C135FE856E6FC51DD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/323830343a353439633a383030303a3a2f33372d3337203d3e20323638363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:549c:8000::/37

    Signature Algorithm: sha256WithRSAEncryption
         b9:fe:be:b2:12:97:5b:26:d9:bf:72:fa:7b:b6:b4:2b:06:46:
         82:c3:f0:82:df:98:80:6a:98:b5:01:53:62:ca:8d:47:17:9a:
         0f:d2:82:f9:8f:e1:07:84:6c:da:1d:44:85:47:23:84:cc:d2:
         e5:cf:ca:83:41:6f:b5:e7:84:c4:a8:09:55:a2:25:17:e6:dd:
         49:15:55:78:3b:3e:d3:7f:28:57:78:b0:91:e2:85:c2:1b:59:
         0a:84:ab:f0:88:16:cd:d0:e2:c6:da:29:bc:7e:76:15:7b:05:
         db:d9:93:30:2a:f9:45:58:63:a7:ae:82:f2:c8:11:e2:81:f6:
         b1:fa:27:06:b4:6e:13:d4:10:1c:92:bf:a8:d8:1c:68:4a:f3:
         60:4f:98:c1:cb:d5:50:5f:95:56:4f:63:24:d8:ad:a6:12:ac:
         22:83:a7:05:f9:8c:8f:ce:d0:f3:7e:72:78:68:d5:72:65:19:
         d3:83:62:05:d8:67:61:f8:4b:8a:2c:57:33:92:72:e2:c6:39:
         83:52:fd:5a:25:bf:05:b6:16:d8:6c:cc:b2:38:83:1b:8f:03:
         4d:c0:b2:9f:ab:20:93:c4:a0:aa:5e:79:37:3b:ce:2c:8c:3b:
         8e:c8:0b:55:cf:7c:b5:65:2f:f2:2e:ea:c9:c7:c1:bf:37:cc:
         39:e1:ec:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:48 2025 by rpki-client