This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa
File:                     323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier:          MZgRTyf2J28RWgfhi5URnSouRJuk3sbODbnWZpe0v+A=
Subject key identifier:   30:69:AE:7C:EE:26:27:41:7F:54:CD:08:4A:2C:33:AF:D5:80:56:E3
Certificate issuer:       /CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Certificate serial:       6AE0E973C7EAF22401B2E618ADE610781120494D
Authority key identifier: BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa
Signing time:             Mon 24 Nov 2025 23:09:55 +0000
ROA not before:           Mon 24 Nov 2025 23:04:55 +0000
ROA not after:            Mon 23 Nov 2026 23:09:55 +0000
asID:                     263584
IP address blocks:        2804:f68:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e0:e9:73:c7:ea:f2:24:01:b2:e6:18:ad:e6:10:78:11:20:49:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
        Validity
            Not Before: Nov 24 23:04:55 2025 GMT
            Not After : Nov 23 23:09:55 2026 GMT
        Subject: CN=3069AE7CEE2627417F54CD084A2C33AFD58056E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:c5:76:44:ab:e7:f3:ed:ff:2e:37:c0:47:
                    c6:88:2f:6a:79:dd:38:47:7d:2e:42:e3:75:6f:de:
                    55:cb:33:52:97:fe:f6:45:b0:3a:47:c8:d5:c2:2f:
                    63:3b:6d:0c:ed:38:d8:ea:7b:5c:8c:6d:06:73:d1:
                    ef:1d:7b:82:31:4e:4c:10:41:2d:7e:a3:6f:01:bb:
                    78:d6:80:9a:01:31:d6:76:9b:ef:1d:d9:14:0f:d9:
                    7b:9a:c3:93:52:75:13:44:83:d1:11:10:9b:55:d0:
                    40:ed:95:91:1e:d9:18:6e:1b:16:cf:6f:ff:7e:6f:
                    f7:b6:12:85:b5:da:96:e5:2f:9e:f6:75:07:38:d7:
                    98:12:dd:f1:89:1c:06:b2:6f:8f:b9:7d:a4:e0:f4:
                    7a:47:7f:b2:2a:e6:e2:87:4b:ca:f9:c7:91:2f:77:
                    86:82:b9:78:d5:8d:da:30:22:dd:38:75:dd:d4:9c:
                    01:59:8a:e4:61:ff:bb:e6:f2:2e:d5:03:b0:c4:96:
                    5f:33:78:52:88:c7:d5:5b:92:f8:13:2e:0a:60:10:
                    1f:52:29:ec:e9:d1:79:00:1e:0b:13:3d:6a:43:13:
                    de:af:a4:ea:c0:fe:ff:04:67:3b:88:c8:c4:5a:ab:
                    ca:1d:ad:59:29:ea:fd:80:c2:ff:c5:f1:d5:ef:04:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:69:AE:7C:EE:26:27:41:7F:54:CD:08:4A:2C:33:AF:D5:80:56:E3
            X509v3 Authority Key Identifier:
                keyid:BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f68:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:36:ec:24:7c:bf:20:d2:a1:a4:bd:70:d0:af:e4:af:49:a0:
         11:50:56:3b:cd:3d:da:1b:38:47:3b:1c:ea:c1:79:fc:b8:84:
         5d:7c:b2:74:13:67:e4:da:0a:9e:bf:c9:68:af:34:35:f2:4f:
         d6:08:a3:de:ef:3d:08:4d:d9:c9:0d:86:47:9a:0e:f6:ef:0d:
         e3:f7:62:ef:81:58:da:c9:08:09:59:aa:88:5e:7f:f8:2e:78:
         fd:cd:f3:66:af:1a:9d:70:5c:a6:fd:90:c5:e5:23:c2:1c:d7:
         e7:17:fa:6d:54:46:09:c9:4a:20:9f:dc:1c:31:6e:84:03:a0:
         38:20:0c:c4:03:ee:8b:24:f7:51:74:1d:62:39:39:25:94:49:
         ae:7b:62:b1:2d:1a:29:bd:cb:57:a6:29:a5:a7:11:d6:bb:a0:
         2d:96:59:ad:96:81:3d:8a:f9:2c:63:a4:41:60:2a:9c:87:99:
         45:14:96:d4:88:51:16:9f:19:74:9c:d4:cf:34:b6:2b:82:39:
         4f:ad:1a:4a:7b:5b:71:18:e1:60:1c:f3:7d:a6:4f:3e:d1:0f:
         6a:f3:25:9b:57:1f:86:16:8c:26:6a:cb:ca:35:29:1f:97:e6:
         16:7d:ed:06:60:e7:84:2c:5f:2d:33:eb:a5:ea:68:30:3d:fc:
         ba:83:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:14 2025 by rpki-client