This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a343030303a3a2f33342d3334203d3e20323639343434.roa
File:                     323830343a363462383a343030303a3a2f33342d3334203d3e20323639343434.roa (raw, json)
Hash identifier:          UHZPl3r5A589EYndrBObmu6zFUsYzZHAsGIIxDzpojk=
Subject key identifier:   19:D9:10:2B:60:B3:4E:2D:1E:82:BB:89:57:E6:FC:6B:37:F7:81:74
Certificate issuer:       /CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Certificate serial:       44B0863C7C0CC39FFDA8FF87C2EB787351C55461
Authority key identifier: F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a343030303a3a2f33342d3334203d3e20323639343434.roa
Signing time:             Tue 25 Nov 2025 20:15:16 +0000
ROA not before:           Tue 25 Nov 2025 20:10:16 +0000
ROA not after:            Tue 24 Nov 2026 20:15:16 +0000
asID:                     269444
IP address blocks:        2804:64b8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
                          rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b0:86:3c:7c:0c:c3:9f:fd:a8:ff:87:c2:eb:78:73:51:c5:54:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
        Validity
            Not Before: Nov 25 20:10:16 2025 GMT
            Not After : Nov 24 20:15:16 2026 GMT
        Subject: CN=19D9102B60B34E2D1E82BB8957E6FC6B37F78174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:33:05:83:b2:49:aa:7c:36:31:ed:e0:42:
                    06:ce:97:9d:73:9a:91:8b:f0:ee:20:5b:be:aa:30:
                    cf:2c:90:8c:d8:fe:63:78:a8:d9:9d:f8:2e:71:22:
                    08:e3:86:8d:66:4c:2d:77:65:58:20:67:bf:d1:57:
                    5a:c4:c9:40:17:1b:69:31:de:d6:ce:cc:ac:24:d0:
                    f8:f5:ea:03:56:fc:d2:e6:79:1c:78:af:26:f7:58:
                    74:27:ed:2d:be:46:4d:de:dd:a8:6e:3c:3f:c9:b5:
                    29:f4:e1:ef:24:65:86:f3:51:05:c6:2a:28:2b:c5:
                    84:ee:a6:9b:bc:16:19:1d:51:98:14:96:1b:b1:c8:
                    62:d8:97:4c:38:f9:10:95:3c:fb:a5:0b:4d:10:ac:
                    1f:36:61:14:4f:7e:59:35:5d:5d:18:76:86:7f:68:
                    9c:83:9f:96:0f:cb:01:e9:18:f2:5f:cf:b6:5e:95:
                    dc:99:f2:12:7a:56:c8:9d:bd:a3:66:4f:83:bf:ee:
                    91:10:7a:63:ce:36:31:50:6e:4e:4e:61:44:7c:a6:
                    11:77:7d:73:8f:30:3f:55:2b:bc:71:73:49:b2:52:
                    20:f4:95:1e:1b:02:91:7c:cf:b1:35:e6:90:ba:c8:
                    26:ae:44:66:46:63:ec:db:b9:16:2e:aa:9f:a2:a7:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D9:10:2B:60:B3:4E:2D:1E:82:BB:89:57:E6:FC:6B:37:F7:81:74
            X509v3 Authority Key Identifier:
                keyid:F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a343030303a3a2f33342d3334203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:68:37:db:46:06:37:a1:71:75:fe:88:06:29:f6:33:f6:
         e5:af:e6:84:ee:fb:1b:0f:eb:31:83:82:e9:dc:b4:c1:c0:37:
         b7:4a:ce:52:29:8e:27:6f:d8:26:35:78:69:f2:ed:50:55:31:
         89:e0:ac:ae:3e:be:fd:0a:a4:bb:49:a7:fd:39:84:6d:40:e1:
         ad:98:b1:fe:01:6a:e7:0f:e7:27:86:81:e6:a1:af:df:f1:2b:
         ef:44:9b:cb:7e:9e:c0:d9:0c:9e:28:d4:30:c0:f8:c3:fa:36:
         a8:2f:dd:ed:22:5d:17:d0:e4:26:1d:3a:ad:81:ae:81:57:3d:
         81:e4:cf:b2:fd:c2:56:90:be:0b:32:a5:af:3b:4f:87:fe:af:
         b7:98:ff:01:ab:08:50:ab:ef:b8:b7:7c:3e:37:04:bc:42:95:
         37:66:0d:ff:7b:1a:9c:b0:4c:3f:77:ea:8e:40:ca:9f:15:bb:
         12:f6:39:99:6b:9c:59:6a:cb:c6:ff:a5:f4:ae:cd:5d:22:cc:
         62:34:20:c5:9c:c1:1f:06:72:5d:90:c6:e6:1d:3a:be:03:23:
         31:a1:f6:f8:50:75:16:10:15:95:5e:14:f0:3f:04:9d:9f:81:
         a6:7c:60:4f:6a:a5:6d:38:9a:4c:b4:8c:77:98:ec:55:82:de:
         d8:67:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:45 2025 by rpki-client