This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a666430303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          pGztnhr7V8u5UB7GDsSTdiR527CeckTRsaaowZ9ZKBw=
Subject key identifier:   23:52:37:F9:30:EA:24:98:D6:92:C2:87:B2:BC:21:EE:64:54:7C:EA
Certificate issuer:       /CN=E35C46B07BDFD3BE5620121FF3CF80B746251C04
Certificate serial:       49A72680FBE818CA5385F7FBE9A6991674D08B35
Authority key identifier: E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Sat 29 Nov 2025 12:09:58 +0000
ROA not before:           Sat 29 Nov 2025 12:04:58 +0000
ROA not after:            Sat 28 Nov 2026 12:09:58 +0000
asID:                     274672
IP address blocks:        2804:91e0:fd00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a7:26:80:fb:e8:18:ca:53:85:f7:fb:e9:a6:99:16:74:d0:8b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35C46B07BDFD3BE5620121FF3CF80B746251C04
        Validity
            Not Before: Nov 29 12:04:58 2025 GMT
            Not After : Nov 28 12:09:58 2026 GMT
        Subject: CN=235237F930EA2498D692C287B2BC21EE64547CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:e4:dc:5e:b6:1d:df:2a:3b:d3:98:9d:02:
                    ae:50:b4:e9:02:b2:f1:43:30:63:3d:cb:75:26:db:
                    ca:1e:cf:89:a8:a5:b9:97:f4:dc:a2:bb:71:bb:72:
                    8a:83:fe:2e:63:56:38:b9:cf:88:6d:ff:33:3a:64:
                    23:81:05:57:36:b5:0a:92:f4:a9:2f:2f:54:fc:3d:
                    f4:f2:8b:82:e3:8d:07:15:bf:d7:10:d1:30:80:8e:
                    e3:c9:56:1f:25:92:cc:ef:d6:45:66:01:37:e7:1c:
                    c0:4f:57:67:6b:07:00:a1:56:e2:88:b1:20:27:3d:
                    b0:f6:0f:12:a7:d0:c3:40:e1:1e:ac:6d:53:9a:a3:
                    33:d9:5c:83:66:0d:e0:a5:58:b5:b5:de:0e:f0:22:
                    97:70:a0:1c:d9:9c:56:58:d2:de:f8:5f:8b:d2:fb:
                    66:67:7b:32:2a:e0:f3:a2:5b:95:12:f0:e3:ff:03:
                    ed:16:26:db:93:9f:73:69:d9:97:c1:f6:f2:35:dc:
                    f6:2d:77:46:44:67:23:5d:87:76:7e:5b:86:fe:86:
                    11:73:a3:7d:33:df:32:04:aa:61:d3:40:d7:e6:b6:
                    fb:60:76:19:0a:b1:39:62:02:9a:91:76:f8:51:dc:
                    af:c7:63:58:1c:ed:af:a4:6d:9d:2d:0d:1a:53:38:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:52:37:F9:30:EA:24:98:D6:92:C2:87:B2:BC:21:EE:64:54:7C:EA
            X509v3 Authority Key Identifier:
                keyid:E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:68:36:cc:3f:2d:14:e0:f5:34:1a:37:df:4a:b9:c6:87:7e:
         c0:05:76:79:ad:7d:34:5a:be:73:f6:f2:e8:cb:94:af:bf:9a:
         ca:ee:1f:ef:9f:20:0c:95:5f:54:98:08:fc:8f:fe:29:fc:41:
         d0:97:23:6c:25:39:df:89:e0:24:29:1a:1f:f4:0c:c7:0c:cd:
         31:15:65:13:f8:8f:cf:19:11:90:7e:f8:28:6c:c6:3d:67:53:
         f4:f4:01:24:a9:9d:5b:09:6d:4b:80:02:8e:f2:a3:01:df:c6:
         f7:e2:01:38:ff:f9:d7:17:4a:7c:b1:4b:69:2e:7c:33:bf:74:
         7a:d8:5d:bd:51:91:d5:7f:ab:4f:cb:50:a7:07:8d:fa:4d:e5:
         b4:0a:2c:fb:8a:d9:e3:29:f1:6a:02:95:9e:68:70:76:ea:de:
         c8:78:8a:3d:13:20:09:30:11:ad:a8:91:7d:d7:97:a2:bd:68:
         24:3f:1c:2d:c5:2c:d1:f9:18:a9:09:9c:b9:35:65:52:14:cd:
         b4:19:01:d3:6a:8f:5f:9b:2e:ec:f8:d3:79:a2:07:dd:3f:2c:
         b4:ea:03:ab:c8:f9:3e:b5:cd:b9:56:df:49:2a:3d:b8:69:ff:
         4c:51:5d:22:86:33:c9:a2:bf:78:be:d1:c8:b2:6d:0f:fa:7e:
         24:dc:4b:33
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSacmgPvoGMpThff76aaZFnTQizUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1QzQ2QjA3QkRGRDNCRTU2MjAxMjFGRjNDRjgwQjc0
NjI1MUMwNDAeFw0yNTExMjkxMjA0NThaFw0yNjExMjgxMjA5NThaMDMxMTAvBgNV
BAMTKDIzNTIzN0Y5MzBFQTI0OThENjkyQzI4N0IyQkMyMUVFNjQ1NDdDRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/uTcXrYd3yo705idAq5QtOkC
svFDMGM9y3Um28oez4mopbmX9Nyiu3G7coqD/i5jVji5z4ht/zM6ZCOBBVc2tQqS
9KkvL1T8PfTyi4LjjQcVv9cQ0TCAjuPJVh8lkszv1kVmATfnHMBPV2drBwChVuKI
sSAnPbD2DxKn0MNA4R6sbVOaozPZXINmDeClWLW13g7wIpdwoBzZnFZY0t74X4vS
+2ZnezIq4POiW5US8OP/A+0WJtuTn3Np2ZfB9vI13PYtd0ZEZyNdh3Z+W4b+hhFz
o30z3zIEqmHTQNfmtvtgdhkKsTliApqRdvhR3K/HY1gc7a+kbZ0tDRpTOIUxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUI1I3+TDqJJjWksKHsrwh7mRUfOowHwYDVR0j
BBgwFoAU41xGsHvf075WIBIf88+At0YlHAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhpWGc5bWNmMnpCZ0hRdGpyaUViTGVld2FpdUhoMlV3NjVyNFNkVXBh
QjcvMC9FMzVDNDZCMDdCREZEM0JFNTYyMDEyMUZGM0NGODBCNzQ2MjUxQzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUM0NkIwN0JERkQzQkU1
NjIwMTIxRkYzQ0Y4MEI3NDYyNTFDMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4aVhnOW1jZjJ6QmdIUXRqcmlFYkxlZXdhaXVIaDJVdzY1cjRTZFVwYUI3LzAv
MzIzODMwMzQzYTM5MzE2NTMwM2E2NjY0MzAzMDNhM2EyZjM0MzAyZDM0MzQyMDNk
M2UyMDMyMzczNDM2MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEkeD9MA0GCSqGSIb3DQEBCwUA
A4IBAQBKaDbMPy0U4PU0GjffSrnGh37ABXZ5rX00Wr5z9vLoy5Svv5rK7h/vnyAM
lV9UmAj8j/4p/EHQlyNsJTnfieAkKRof9AzHDM0xFWUT+I/PGRGQfvgobMY9Z1P0
9AEkqZ1bCW1LgAKO8qMB38b34gE4//nXF0p8sUtpLnwzv3R62F29UZHVf6tPy1Cn
B436TeW0Ciz7itnjKfFqApWeaHB26t7IeIo9EyAJMBGtqJF915eivWgkPxwtxSzR
+RipCZy5NWVSFM20GQHTao9fmy7s+NN5ogfdPyy06gOryPk+tc25Vt9JKj24af9M
UV0ihjPJor94vtHIsm0P+n4k3Esz
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:54 2025 by rpki-client