This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663730303a3a2f34302d3430203d3e20323734363732.roa
File:                     323830343a393165303a663730303a3a2f34302d3430203d3e20323734363732.roa (raw, json)
Hash identifier:          IVQumeL9HhU/AIGs8GR8HpN5tdQljAnPScA612+2y0I=
Subject key identifier:   04:00:70:B8:77:A1:39:41:4B:5A:DF:8A:40:CF:E4:9A:69:04:5D:F5
Certificate issuer:       /CN=E35C46B07BDFD3BE5620121FF3CF80B746251C04
Certificate serial:       27BD7F6F358B7F97ED7BC7AFF38CFF2C8DA747C1
Authority key identifier: E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663730303a3a2f34302d3430203d3e20323734363732.roa
Signing time:             Tue 02 Dec 2025 10:33:48 +0000
ROA not before:           Tue 02 Dec 2025 10:28:48 +0000
ROA not after:            Tue 01 Dec 2026 10:33:48 +0000
asID:                     274672
IP address blocks:        2804:91e0:f700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bd:7f:6f:35:8b:7f:97:ed:7b:c7:af:f3:8c:ff:2c:8d:a7:47:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35C46B07BDFD3BE5620121FF3CF80B746251C04
        Validity
            Not Before: Dec  2 10:28:48 2025 GMT
            Not After : Dec  1 10:33:48 2026 GMT
        Subject: CN=040070B877A139414B5ADF8A40CFE49A69045DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:db:8b:75:fd:43:53:8e:a7:9f:27:b3:c6:
                    0a:85:79:9f:0b:ef:05:12:23:40:09:bc:e3:40:e1:
                    17:62:c5:f1:f8:af:63:df:23:c6:2e:53:0b:a8:bc:
                    16:76:26:f3:28:da:13:cf:40:16:04:7d:76:60:d8:
                    9b:9a:c0:8c:9e:57:12:70:aa:0c:37:0c:e4:29:a7:
                    75:a8:c0:62:2c:fb:2f:cc:56:5a:c0:69:eb:f5:29:
                    4b:fd:ac:38:25:5b:9d:81:16:b1:91:14:e1:73:9b:
                    c1:4a:85:9e:46:ae:51:fd:b5:96:60:4f:32:34:df:
                    f7:56:34:62:35:66:bb:79:82:ba:d3:87:07:f6:ca:
                    b8:30:49:0f:fd:53:0f:db:61:a6:eb:be:01:e7:9b:
                    1a:98:57:b3:dd:d1:a5:99:20:11:c8:23:d3:e3:5c:
                    97:3a:72:e2:14:9f:dd:89:d5:39:0e:83:3e:89:b6:
                    1f:c2:01:ec:0d:c0:f6:c1:4b:79:66:0f:e0:7c:68:
                    88:0f:11:ab:9b:49:47:a7:66:e7:ba:b5:47:8c:50:
                    05:73:8e:cb:ae:5f:dc:5b:cb:d1:17:e6:54:9d:31:
                    de:26:f1:00:09:31:4b:e5:34:40:8b:41:78:57:28:
                    3a:6a:d2:52:7b:bb:ab:6c:13:c5:45:1e:9d:e1:41:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:00:70:B8:77:A1:39:41:4B:5A:DF:8A:40:CF:E4:9A:69:04:5D:F5
            X509v3 Authority Key Identifier:
                keyid:E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663730303a3a2f34302d3430203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:69:3f:8c:ea:60:d5:26:e1:a3:a4:f0:32:1e:48:77:77:16:
         e6:e7:f2:7b:17:14:51:ef:67:69:1f:5f:e8:6b:84:5c:0d:1c:
         c0:31:1f:9c:b8:31:a9:9f:e9:44:76:7e:01:0d:9a:08:af:33:
         73:30:a5:b8:3a:61:9a:5f:d8:88:8a:6d:ca:0c:90:55:64:d2:
         bb:82:9d:77:30:1f:84:d1:cb:ab:06:97:ca:13:4c:30:76:e3:
         c3:51:e9:41:12:04:af:b7:3a:ef:57:ed:f1:74:a3:de:2f:ac:
         06:22:a1:6a:bd:80:19:f6:cb:87:4b:00:37:5b:fe:f3:8d:00:
         51:52:ed:09:2a:ac:3d:fe:01:5a:45:4e:74:e5:dc:f9:32:81:
         d6:d5:0a:f0:d2:ed:1c:a1:92:fc:fa:6b:1e:b6:8a:1a:ce:d3:
         68:f8:54:ea:da:0c:28:5a:65:30:b7:af:c3:72:d7:1e:a9:89:
         ca:7e:3d:ea:c0:12:6a:85:e2:1f:b7:a8:43:e1:94:b2:ef:07:
         d4:65:36:35:a7:bb:4c:bb:48:10:3a:75:90:5a:4c:d8:67:68:
         ae:43:03:19:7b:2e:84:9a:7c:4e:dc:87:66:d0:7f:53:ee:23:
         19:35:88:18:55:f8:34:50:cb:09:7c:06:1b:18:98:e7:f6:43:
         ba:7d:89:31
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJ71/bzWLf5fte8ev84z/LI2nR8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1QzQ2QjA3QkRGRDNCRTU2MjAxMjFGRjNDRjgwQjc0
NjI1MUMwNDAeFw0yNTEyMDIxMDI4NDhaFw0yNjEyMDExMDMzNDhaMDMxMTAvBgNV
BAMTKDA0MDA3MEI4NzdBMTM5NDE0QjVBREY4QTQwQ0ZFNDlBNjkwNDVERjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh8tuLdf1DU46nnyezxgqFeZ8L
7wUSI0AJvONA4RdixfH4r2PfI8YuUwuovBZ2JvMo2hPPQBYEfXZg2JuawIyeVxJw
qgw3DOQpp3WowGIs+y/MVlrAaev1KUv9rDglW52BFrGRFOFzm8FKhZ5GrlH9tZZg
TzI03/dWNGI1Zrt5grrThwf2yrgwSQ/9Uw/bYabrvgHnmxqYV7Pd0aWZIBHII9Pj
XJc6cuIUn92J1TkOgz6Jth/CAewNwPbBS3lmD+B8aIgPEaubSUenZue6tUeMUAVz
jsuuX9xby9EX5lSdMd4m8QAJMUvlNECLQXhXKDpq0lJ7u6tsE8VFHp3hQf8tAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUBABwuHehOUFLWt+KQM/kmmkEXfUwHwYDVR0j
BBgwFoAU41xGsHvf075WIBIf88+At0YlHAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhpWGc5bWNmMnpCZ0hRdGpyaUViTGVld2FpdUhoMlV3NjVyNFNkVXBh
QjcvMC9FMzVDNDZCMDdCREZEM0JFNTYyMDEyMUZGM0NGODBCNzQ2MjUxQzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUM0NkIwN0JERkQzQkU1
NjIwMTIxRkYzQ0Y4MEI3NDYyNTFDMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4aVhnOW1jZjJ6QmdIUXRqcmlFYkxlZXdhaXVIaDJVdzY1cjRTZFVwYUI3LzAv
MzIzODMwMzQzYTM5MzE2NTMwM2E2NjM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczNDM2MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEkeD3MA0GCSqGSIb3DQEBCwUA
A4IBAQAiaT+M6mDVJuGjpPAyHkh3dxbm5/J7FxRR72dpH1/oa4RcDRzAMR+cuDGp
n+lEdn4BDZoIrzNzMKW4OmGaX9iIim3KDJBVZNK7gp13MB+E0curBpfKE0wwduPD
UelBEgSvtzrvV+3xdKPeL6wGIqFqvYAZ9suHSwA3W/7zjQBRUu0JKqw9/gFaRU50
5dz5MoHW1Qrw0u0coZL8+msetooaztNo+FTq2gwoWmUwt6/DctceqYnKfj3qwBJq
heIft6hD4ZSy7wfUZTY1p7tMu0gQOnWQWkzYZ2iuQwMZey6EmnxO3Idm0H9T7iMZ
NYgYVfg0UMsJfAYbGJjn9kO6fYkx
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:43:04 2025 by rpki-client