This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3332203d3e20323637343639.roa
File:                     323830343a343166383a3a2f33322d3332203d3e20323637343639.roa (raw, json)
Hash identifier:          Ks3u3FOVDXNgr1C723Q8QDIGH5YXu5WjdFq84+Aoa5Q=
Subject key identifier:   53:E7:5B:7F:ED:19:01:B3:BE:4A:AA:AD:C0:7D:EB:79:19:5B:F8:18
Certificate issuer:       /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial:       1D1E9F0A6038194FFB5D1FAAF1B70DF1E0EFCA29
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3332203d3e20323637343639.roa
Signing time:             Wed 05 Nov 2025 00:53:15 +0000
ROA not before:           Wed 05 Nov 2025 00:48:15 +0000
ROA not after:            Wed 04 Nov 2026 00:53:15 +0000
asID:                     267469
IP address blocks:        2804:41f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1e:9f:0a:60:38:19:4f:fb:5d:1f:aa:f1:b7:0d:f1:e0:ef:ca:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
        Validity
            Not Before: Nov  5 00:48:15 2025 GMT
            Not After : Nov  4 00:53:15 2026 GMT
        Subject: CN=53E75B7FED1901B3BE4AAAADC07DEB79195BF818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:7a:63:cf:15:a7:7b:73:1b:c6:ba:c0:e2:
                    87:db:1f:01:d9:e0:f9:4b:4b:6a:f8:b1:ae:1a:85:
                    32:f2:4f:bb:e9:be:a2:92:e5:b9:8a:f4:ca:0a:d3:
                    f6:70:ab:97:2e:e4:c8:77:88:fc:9a:f7:7e:63:45:
                    36:ed:e1:cf:a4:05:79:fc:59:0a:1f:0f:72:8f:fd:
                    ea:58:da:4d:2c:5d:64:03:0a:9f:1e:ee:89:ea:32:
                    3d:b7:b0:1d:f4:12:ab:07:da:9e:4c:a4:55:17:37:
                    47:82:a2:7d:34:1b:2e:6d:d9:70:ac:51:18:07:c0:
                    2a:15:f5:e5:46:4e:aa:5a:0e:27:5a:02:b9:50:35:
                    9b:55:f7:8b:91:37:da:18:9a:40:9b:8d:8d:12:53:
                    0b:fb:56:c0:88:17:aa:1b:4c:ce:f9:8e:27:df:3f:
                    80:86:2d:3d:2c:20:b3:61:e0:e6:93:f1:88:d8:8a:
                    c5:54:50:4b:e8:d6:ee:93:32:2a:aa:c1:9f:2f:0b:
                    25:07:3e:b6:34:85:7e:c7:5e:f1:c1:45:af:1f:6c:
                    68:60:fb:63:36:7c:90:5c:4e:77:d7:5d:c0:4e:9c:
                    3f:59:f6:45:90:3f:98:b7:5f:26:48:98:78:d0:ca:
                    8f:6a:ec:da:1d:b4:d0:8f:b0:76:32:64:e6:fb:d2:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E7:5B:7F:ED:19:01:B3:BE:4A:AA:AD:C0:7D:EB:79:19:5B:F8:18
            X509v3 Authority Key Identifier:
                keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3332203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:2d:cd:a6:dc:2e:63:69:09:90:99:05:4a:55:ef:45:b9:f6:
         e1:c6:3b:ed:4e:ab:c9:26:8f:55:a9:f2:0a:c0:d9:ed:a2:41:
         cd:1e:29:3a:98:9c:e8:c4:36:51:19:c2:6e:d9:71:d5:a7:28:
         5b:3f:f2:15:79:04:00:23:d1:13:ef:72:39:92:d6:ab:20:3e:
         3c:b5:a6:06:6a:93:67:7e:2c:00:55:12:2d:3c:06:d8:3c:a6:
         00:37:58:c5:43:f6:39:c8:20:8d:e3:5a:ca:02:c3:4c:22:3a:
         57:b1:f7:d3:0a:f4:c5:ee:e2:13:1f:fc:fd:68:69:75:dd:71:
         d6:7d:2f:02:dd:bc:01:a3:84:85:0b:31:71:d3:1a:9a:f1:53:
         da:40:65:5f:80:9d:75:db:23:0a:23:77:c7:4e:60:12:50:9a:
         05:7f:29:b4:4d:05:ad:bf:7a:38:6e:c7:fa:9c:d5:35:b5:6f:
         2f:cf:f8:7f:cc:69:ed:83:fc:f9:94:32:0d:44:7b:1e:61:e1:
         3d:f5:41:92:ef:1d:28:a0:b2:11:c9:a1:7c:15:cd:b7:e8:19:
         e2:1a:83:ec:c9:a3:f8:32:12:35:ad:dd:19:63:3e:56:ce:f8:
         8a:0b:bb:7d:96:55:b4:37:d3:eb:e9:5f:a0:a6:f3:06:34:25:
         97:ef:7c:64
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHR6fCmA4GU/7XR+q8bcN8eDvyikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFBNjZBMUI1OUIxRkY4MzJEMzAxMTBGOEI0QTcyRjRG
MTBCNzEzOTAeFw0yNTExMDUwMDQ4MTVaFw0yNjExMDQwMDUzMTVaMDMxMTAvBgNV
BAMTKDUzRTc1QjdGRUQxOTAxQjNCRTRBQUFBREMwN0RFQjc5MTk1QkY4MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu53pjzxWne3MbxrrA4ofbHwHZ
4PlLS2r4sa4ahTLyT7vpvqKS5bmK9MoK0/Zwq5cu5Mh3iPya935jRTbt4c+kBXn8
WQofD3KP/epY2k0sXWQDCp8e7onqMj23sB30EqsH2p5MpFUXN0eCon00Gy5t2XCs
URgHwCoV9eVGTqpaDidaArlQNZtV94uRN9oYmkCbjY0SUwv7VsCIF6obTM75jiff
P4CGLT0sILNh4OaT8YjYisVUUEvo1u6TMiqqwZ8vCyUHPrY0hX7HXvHBRa8fbGhg
+2M2fJBcTnfXXcBOnD9Z9kWQP5i3XyZImHjQyo9q7NodtNCPsHYyZOb70nFhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUU+dbf+0ZAbO+SqqtwH3reRlb+BgwHwYDVR0j
BBgwFoAU+qZqG1mx/4MtMBEPi0py9PELcTkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9yVmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tu
LzAvRkFBNjZBMUI1OUIxRkY4MzJEMzAxMTBGOEI0QTcyRjRGMTBCNzEzOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQUE2NkExQjU5QjFGRjgzMkQz
MDExMEY4QjRBNzJGNEYxMEI3MTM5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
VmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tuLzAvMzIz
ODMwMzQzYTM0MzE2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3MzQz
NjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARB+DANBgkqhkiG9w0BAQsFAAOCAQEAyS3NptwuY2kJ
kJkFSlXvRbn24cY77U6rySaPVanyCsDZ7aJBzR4pOpic6MQ2URnCbtlx1acoWz/y
FXkEACPRE+9yOZLWqyA+PLWmBmqTZ34sAFUSLTwG2DymADdYxUP2OcggjeNaygLD
TCI6V7H30wr0xe7iEx/8/Whpdd1x1n0vAt28AaOEhQsxcdMamvFT2kBlX4Cdddsj
CiN3x05gElCaBX8ptE0Frb96OG7H+pzVNbVvL8/4f8xp7YP8+ZQyDUR7HmHhPfVB
ku8dKKCyEcmhfBXNt+gZ4hqD7Mmj+DISNa3dGWM+Vs74igu7fZZVtDfT6+lfoKbz
BjQll+98ZA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:19:23 2025 by rpki-client