This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          C/O/y2jSc6GPmkGnzPff46D8NaNKFBct2Ezu7hWmL40=
Subject key identifier:   C5:92:0F:7C:3D:ED:A3:F7:64:E9:C7:C1:DE:3A:71:F2:26:0A:AB:CA
Certificate issuer:       /CN=E35C46B07BDFD3BE5620121FF3CF80B746251C04
Certificate serial:       6546F53B66A1A20AE8EBC294A3F6701E338267D2
Authority key identifier: E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Sat 29 Nov 2025 12:09:57 +0000
ROA not before:           Sat 29 Nov 2025 12:04:57 +0000
ROA not after:            Sat 28 Nov 2026 12:09:57 +0000
asID:                     274672
IP address blocks:        2804:91e0:fb00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:46:f5:3b:66:a1:a2:0a:e8:eb:c2:94:a3:f6:70:1e:33:82:67:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35C46B07BDFD3BE5620121FF3CF80B746251C04
        Validity
            Not Before: Nov 29 12:04:57 2025 GMT
            Not After : Nov 28 12:09:57 2026 GMT
        Subject: CN=C5920F7C3DEDA3F764E9C7C1DE3A71F2260AABCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:be:72:b5:d8:cb:2c:1f:61:bf:db:b3:49:
                    52:c8:05:7d:65:0f:b5:02:6b:c3:e2:20:bc:46:32:
                    c7:04:a4:13:b8:53:8d:f4:13:3b:c7:d3:26:f6:98:
                    33:7f:76:87:80:05:47:14:61:29:fe:13:05:a2:78:
                    40:da:19:83:a0:53:90:0c:08:b7:a6:f5:d3:8a:33:
                    f1:65:9e:84:db:7b:de:64:8f:22:d2:61:42:7e:fe:
                    85:89:f2:99:2e:d8:a2:97:8b:c6:8e:aa:ab:25:f7:
                    33:09:2c:6e:f1:25:cc:8b:a6:20:45:18:e5:62:ea:
                    ea:b4:7d:a1:6d:b2:06:34:cd:b4:6d:ab:ac:e7:37:
                    c0:ee:c8:d8:5c:00:13:6d:3f:a4:59:8d:a9:75:ef:
                    d1:de:5d:97:d8:89:be:7d:77:1d:5e:a4:f1:f8:76:
                    62:21:48:cd:2e:c0:74:b9:e2:bd:22:3c:bf:65:50:
                    10:cc:2f:5f:0e:b3:25:3b:c2:9f:8e:a1:3e:32:48:
                    7a:10:76:84:72:e9:a7:fe:18:67:ad:64:38:f2:9a:
                    70:01:0f:0d:76:58:29:90:3d:2e:9b:54:9f:aa:9b:
                    99:b7:14:6d:8c:16:bb:25:3d:22:2e:90:86:bd:97:
                    49:81:63:96:da:2d:f2:92:39:44:0d:bf:d0:a5:b2:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:92:0F:7C:3D:ED:A3:F7:64:E9:C7:C1:DE:3A:71:F2:26:0A:AB:CA
            X509v3 Authority Key Identifier:
                keyid:E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:c0:ad:3e:2a:23:5b:dd:5c:b1:f4:18:ef:dc:66:30:d1:
         f9:b1:1b:10:f8:9a:2d:a6:aa:be:97:c8:e6:78:df:44:16:03:
         9b:68:0b:2e:1f:e3:cd:7e:03:41:88:92:8d:8a:b4:25:4e:db:
         a2:d2:b0:29:d9:5b:5b:37:f0:df:db:e5:7f:84:fc:aa:5e:7a:
         0a:25:04:96:c1:93:7f:ab:66:e6:f5:17:60:f8:9a:be:47:80:
         ad:63:3b:33:a9:a4:8a:7b:64:c5:d4:9a:05:77:8e:e6:17:b9:
         96:82:f1:d6:7f:60:47:86:3a:e9:e7:a8:a0:f6:ac:8f:76:c1:
         4e:b4:28:07:d4:f1:3a:e7:63:50:6a:e6:bc:a4:bf:0a:fd:6b:
         fc:f3:9c:8d:94:3d:97:61:84:b0:17:ab:4c:88:38:0b:df:cb:
         1d:dd:2a:a1:5b:50:c2:fa:f5:d8:91:37:a1:22:fd:dc:c7:49:
         e7:00:64:56:23:47:dc:f4:4c:6e:3f:9c:2a:67:fd:5b:3a:4d:
         bb:a1:c0:da:5c:c5:13:c9:e2:41:ae:df:9d:ed:cd:d3:f3:6f:
         02:6f:02:6b:31:f1:e7:0e:06:c1:e6:b9:c5:c9:e9:4f:95:5c:
         6e:f6:29:20:ae:4b:1d:4f:f8:fd:0c:27:ac:1f:15:34:74:19:
         02:c6:5a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:40 2025 by rpki-client