This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a343030303a3a2f33342d3334203d3e20323731313530.roa
File:                     323830343a373730383a343030303a3a2f33342d3334203d3e20323731313530.roa (raw, json)
Hash identifier:          bnMwIRYifC3Gbexye9qP53376pOKR6AaCS/5zV5nLFg=
Subject key identifier:   A3:50:98:F6:80:0D:C5:49:2F:9A:9E:29:8D:1E:58:D5:06:5A:85:9E
Certificate issuer:       /CN=96FB193C8C41E5A8A5F1DA3563F6023508649BB3
Certificate serial:       6D4E5569A11992B336F2C08C09744538CDE1B50F
Authority key identifier: 96:FB:19:3C:8C:41:E5:A8:A5:F1:DA:35:63:F6:02:35:08:64:9B:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a343030303a3a2f33342d3334203d3e20323731313530.roa
Signing time:             Mon 17 Nov 2025 23:19:31 +0000
ROA not before:           Mon 17 Nov 2025 23:14:31 +0000
ROA not after:            Mon 16 Nov 2026 23:19:31 +0000
asID:                     271150
IP address blocks:        2804:7708:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4e:55:69:a1:19:92:b3:36:f2:c0:8c:09:74:45:38:cd:e1:b5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96FB193C8C41E5A8A5F1DA3563F6023508649BB3
        Validity
            Not Before: Nov 17 23:14:31 2025 GMT
            Not After : Nov 16 23:19:31 2026 GMT
        Subject: CN=A35098F6800DC5492F9A9E298D1E58D5065A859E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:2e:8b:a2:4e:74:26:0d:e8:64:e7:47:49:
                    77:04:9a:96:5b:a3:e0:d1:bf:65:ef:fe:9f:3b:cf:
                    ca:b0:4b:a0:88:63:56:0c:3d:05:c5:2f:34:6f:4c:
                    78:b3:b5:dc:5f:77:37:cf:51:53:1c:c7:4d:f9:08:
                    c0:4c:d2:76:cb:fb:11:42:b0:aa:3d:12:23:b0:27:
                    32:59:7b:98:94:27:5c:00:d8:fb:6d:d4:e7:9c:bf:
                    9e:7b:f7:64:99:30:2c:e4:4a:bb:60:7b:a3:4d:fa:
                    4c:36:5b:08:99:e7:cd:64:8a:4d:32:8d:c1:9e:99:
                    a4:5e:16:47:b1:05:c9:45:6d:71:d4:95:81:d6:b2:
                    b5:ae:47:7e:cf:47:b2:43:45:fb:40:45:cf:0b:5d:
                    0c:7e:45:86:f7:c7:27:80:67:1c:21:9c:b6:c3:4e:
                    bc:bc:d9:5c:49:cd:8d:89:2b:44:cb:77:29:4b:11:
                    2e:26:f1:ca:48:a5:5f:85:bb:ae:29:da:54:fd:f7:
                    49:19:35:ff:95:61:56:31:01:1c:41:65:15:8a:aa:
                    b0:f4:7a:05:2f:79:6a:d2:72:ae:21:88:82:0a:90:
                    da:9a:60:57:36:33:d2:76:28:d2:4a:cb:7a:82:1a:
                    06:e0:de:9f:fe:ea:8a:71:e8:be:47:10:ec:c1:a9:
                    71:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:50:98:F6:80:0D:C5:49:2F:9A:9E:29:8D:1E:58:D5:06:5A:85:9E
            X509v3 Authority Key Identifier:
                keyid:96:FB:19:3C:8C:41:E5:A8:A5:F1:DA:35:63:F6:02:35:08:64:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a343030303a3a2f33342d3334203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7708:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:9b:ce:33:fa:9f:69:8f:8a:5c:73:40:7c:14:3d:1d:f7:8a:
         cf:83:6a:19:87:c0:74:11:de:24:71:94:52:dc:3b:bd:de:f6:
         38:05:86:ac:e5:ba:28:c8:16:65:83:9d:11:ae:6e:2b:9d:c6:
         5a:d4:08:05:6f:52:29:3d:0c:7a:f8:95:34:59:a9:90:d7:fd:
         eb:61:90:5c:95:91:c6:f9:59:36:57:5c:a7:f2:b8:3c:72:bd:
         41:ad:7a:d4:92:c3:23:3c:e4:db:59:89:13:90:f2:27:ce:02:
         a4:08:40:e1:e1:00:df:0b:be:09:06:c3:22:65:d2:e0:4d:b8:
         cf:cf:92:6a:4b:3e:a3:1c:7c:28:77:89:cc:d5:4e:3b:54:4a:
         0c:df:bc:91:20:61:a4:70:63:62:b3:ea:08:1e:42:10:c0:1f:
         e0:8d:0f:50:8b:a1:32:9f:81:e6:ad:e2:ab:93:a5:4a:8d:eb:
         2d:b6:1d:b7:83:42:22:92:04:96:32:8d:39:ac:0b:26:35:a3:
         c9:51:d0:18:51:5f:b4:59:3c:9d:38:0d:cc:c3:1d:fc:4d:f6:
         64:0c:9d:48:b9:6c:c3:1e:5f:36:bf:59:4e:56:ba:3b:54:cf:
         c9:af:01:40:8f:26:aa:85:0b:6b:5a:93:ea:48:b5:66:a7:51:
         7a:3e:06:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:19 2025 by rpki-client