This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a383030303a3a2f33342d3334203d3e20323639343434.roa
File:                     323830343a363462383a383030303a3a2f33342d3334203d3e20323639343434.roa (raw, json)
Hash identifier:          KRAl7UxWI8rQx6Mwm8KZ2GB1ZSkurVndjk3SB1N2MYM=
Subject key identifier:   81:AD:1B:97:43:E0:F5:E3:D9:77:7F:E1:D8:85:E2:EE:07:FA:DE:34
Certificate issuer:       /CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Certificate serial:       74020DFECDC116E913F1CFC884043D0AECE31973
Authority key identifier: F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a383030303a3a2f33342d3334203d3e20323639343434.roa
Signing time:             Tue 25 Nov 2025 20:15:16 +0000
ROA not before:           Tue 25 Nov 2025 20:10:16 +0000
ROA not after:            Tue 24 Nov 2026 20:15:16 +0000
asID:                     269444
IP address blocks:        2804:64b8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
                          rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:02:0d:fe:cd:c1:16:e9:13:f1:cf:c8:84:04:3d:0a:ec:e3:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
        Validity
            Not Before: Nov 25 20:10:16 2025 GMT
            Not After : Nov 24 20:15:16 2026 GMT
        Subject: CN=81AD1B9743E0F5E3D9777FE1D885E2EE07FADE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:94:66:ae:76:20:dc:6a:86:04:4e:85:71:bc:
                    69:18:a6:32:9c:39:64:cd:dd:64:68:ef:3c:25:84:
                    ab:0c:d4:aa:d1:3c:e1:5e:66:81:70:3b:1d:46:58:
                    55:45:fa:49:c3:04:28:7e:3d:d0:6e:68:ec:3e:df:
                    74:7b:83:92:8a:f0:7b:9c:5f:aa:4e:bc:f2:d6:e0:
                    a8:52:71:1d:26:f6:4c:a4:85:fd:d0:3c:15:e0:f3:
                    2f:d5:a9:57:b3:28:42:21:21:eb:60:15:a8:6a:12:
                    c0:94:50:09:ad:35:51:03:ba:a2:42:24:57:37:c7:
                    43:fd:fb:6e:bb:2f:fe:f1:33:66:db:7a:96:2f:1d:
                    e9:5c:03:22:f6:65:e1:0d:6c:68:b4:e5:46:74:04:
                    3d:75:c4:33:31:56:8e:6f:a4:e4:44:52:9e:8a:a7:
                    5b:e1:11:c4:7b:5f:cd:db:62:30:2b:a6:45:63:a6:
                    bf:34:16:20:f7:28:90:c4:e9:30:71:34:e7:98:66:
                    3d:5b:9f:86:82:f8:c4:5e:9a:bc:bd:78:bc:dd:a8:
                    14:82:23:d5:22:20:53:58:7d:0b:d5:1a:a2:5a:9c:
                    c4:11:65:4f:90:c6:7c:c2:2c:ff:f5:b1:b2:73:8b:
                    07:85:8d:42:06:5c:69:e5:4f:e0:7d:62:e6:b6:99:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AD:1B:97:43:E0:F5:E3:D9:77:7F:E1:D8:85:E2:EE:07:FA:DE:34
            X509v3 Authority Key Identifier:
                keyid:F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/323830343a363462383a383030303a3a2f33342d3334203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64b8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b6:1b:3d:e6:d0:1e:fa:cf:a0:07:ab:d5:de:65:48:55:35:0f:
         c1:54:41:c6:e0:8b:36:75:d3:c6:b0:3a:bb:12:9c:4a:11:78:
         a3:0d:25:1c:ca:74:09:c5:e7:98:8d:3c:f2:5c:21:56:d0:99:
         c2:7c:2e:8d:ad:ce:21:70:f5:de:9c:d1:9c:b0:8a:36:72:23:
         46:69:4e:77:1e:3d:35:12:26:50:70:46:bf:33:a0:cf:c8:ce:
         c2:0a:e3:bf:b7:7f:4e:ef:c7:7c:80:fa:f1:60:f5:88:72:6b:
         7a:2e:3a:06:e4:23:cf:6a:fb:67:b6:1e:da:b8:63:70:17:be:
         3d:17:a0:41:88:39:b5:11:d2:09:67:a5:16:29:c2:bc:be:43:
         b4:53:9d:0f:47:b5:2d:56:49:94:f3:49:ae:a6:88:36:2c:3a:
         88:44:60:0f:f6:69:e5:11:16:7c:bf:46:3e:04:b4:f1:10:41:
         3a:f3:b8:d0:70:39:b5:2c:43:3b:cc:28:33:2f:17:dc:ac:35:
         5d:03:20:50:9c:42:b1:a6:be:95:b3:2b:9d:62:43:1e:b0:d2:
         e5:1e:8d:5f:b9:83:2c:c3:7d:e6:e4:28:77:ff:41:eb:95:0a:
         25:7a:43:f8:b6:02:57:84:44:76:d1:68:ff:3e:01:f0:69:9b:
         80:a5:10:3a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdAIN/s3BFukT8c/IhAQ9CuzjGXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkyOENDQzIzQjM3RjI5MUQ3OEYzQzg5OTFDRTlCRDNC
NUZFQkJEQzAeFw0yNTExMjUyMDEwMTZaFw0yNjExMjQyMDE1MTZaMDMxMTAvBgNV
BAMTKDgxQUQxQjk3NDNFMEY1RTNEOTc3N0ZFMUQ4ODVFMkVFMDdGQURFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDalGaudiDcaoYEToVxvGkYpjKc
OWTN3WRo7zwlhKsM1KrRPOFeZoFwOx1GWFVF+knDBCh+PdBuaOw+33R7g5KK8Huc
X6pOvPLW4KhScR0m9kykhf3QPBXg8y/VqVezKEIhIetgFahqEsCUUAmtNVEDuqJC
JFc3x0P9+267L/7xM2bbepYvHelcAyL2ZeENbGi05UZ0BD11xDMxVo5vpOREUp6K
p1vhEcR7X83bYjArpkVjpr80FiD3KJDE6TBxNOeYZj1bn4aC+MRemry9eLzdqBSC
I9UiIFNYfQvVGqJanMQRZU+QxnzCLP/1sbJziweFjUIGXGnlT+B9Yua2mfBTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUga0bl0Pg9ePZd3/h2IXi7gf63jQwHwYDVR0j
BBgwFoAU+SjMwjs38pHXjzyJkc6b07X+u9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3paM2VkTUFudzRnakpiVXBXaWVKbXhCMVJHY2lSOU03RXh4a2Jia05m
WmsvMC9GOTI4Q0NDMjNCMzdGMjkxRDc4RjNDODk5MUNFOUJEM0I1RkVCQkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5MjhDQ0MyM0IzN0YyOTFE
NzhGM0M4OTkxQ0U5QkQzQjVGRUJCREMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6WjNlZE1Bbnc0Z2pKYlVwV2llSm14QjFSR2NpUjlNN0V4eGtiYmtOZlprLzAv
MzIzODMwMzQzYTM2MzQ2MjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZLiAMA0GCSqGSIb3DQEBCwUA
A4IBAQC2Gz3m0B76z6AHq9XeZUhVNQ/BVEHG4Is2ddPGsDq7EpxKEXijDSUcynQJ
xeeYjTzyXCFW0JnCfC6Nrc4hcPXenNGcsIo2ciNGaU53Hj01EiZQcEa/M6DPyM7C
CuO/t39O78d8gPrxYPWIcmt6LjoG5CPPavtnth7auGNwF749F6BBiDm1EdIJZ6UW
KcK8vkO0U50PR7UtVkmU80mupog2LDqIRGAP9mnlERZ8v0Y+BLTxEEE687jQcDm1
LEM7zCgzLxfcrDVdAyBQnEKxpr6VsyudYkMesNLlHo1fuYMsw33m5Ch3/0HrlQol
ekP4tgJXhER20Wj/PgHwaZuApRA6
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:26 2025 by rpki-client