This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a3a2f33342d3334203d3e20323731313530.roa
File:                     323830343a373730383a3a2f33342d3334203d3e20323731313530.roa (raw, json)
Hash identifier:          0XCFnf5HH+mR8J7jOEJFpI3sErfu0bIJAUXfDuxl310=
Subject key identifier:   DF:04:07:CC:4C:FD:09:34:1A:56:F8:9B:73:0C:6F:4B:74:A1:0F:3B
Certificate issuer:       /CN=96FB193C8C41E5A8A5F1DA3563F6023508649BB3
Certificate serial:       50D29EC6DCA8832A90AAF42C4FDC441D98C9C886
Authority key identifier: 96:FB:19:3C:8C:41:E5:A8:A5:F1:DA:35:63:F6:02:35:08:64:9B:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a3a2f33342d3334203d3e20323731313530.roa
Signing time:             Mon 17 Nov 2025 23:19:28 +0000
ROA not before:           Mon 17 Nov 2025 23:14:28 +0000
ROA not after:            Mon 16 Nov 2026 23:19:28 +0000
asID:                     271150
IP address blocks:        2804:7708::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 14:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d2:9e:c6:dc:a8:83:2a:90:aa:f4:2c:4f:dc:44:1d:98:c9:c8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96FB193C8C41E5A8A5F1DA3563F6023508649BB3
        Validity
            Not Before: Nov 17 23:14:28 2025 GMT
            Not After : Nov 16 23:19:28 2026 GMT
        Subject: CN=DF0407CC4CFD09341A56F89B730C6F4B74A10F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:7e:24:5a:c1:60:5f:fa:93:e5:6a:49:12:
                    b7:5a:65:01:2d:bd:70:74:8c:5a:3a:8c:e2:d6:9f:
                    bb:09:04:54:32:44:ee:6e:4f:7e:07:0d:29:6f:87:
                    d8:04:2c:aa:f0:20:24:62:a3:4a:85:f3:a5:02:03:
                    03:dd:5a:ea:35:da:94:a7:44:f1:49:c4:1b:b4:1b:
                    45:77:d4:0c:14:79:9e:b1:1b:c2:74:c4:10:26:88:
                    d3:cd:69:8c:00:d3:f7:64:0d:90:13:0e:b7:cd:8b:
                    29:6f:93:90:cb:95:c7:83:62:e5:20:2d:0d:1a:47:
                    94:1f:91:7c:c4:7d:86:6a:a4:93:05:03:a8:e6:eb:
                    b1:99:ef:87:24:72:17:d4:da:d0:90:cb:ca:8a:b3:
                    ef:b5:34:50:7e:a7:9c:70:90:87:09:eb:38:b2:32:
                    45:b0:cb:9f:55:f6:37:94:0f:8a:3a:07:49:cb:6a:
                    77:54:d1:2f:76:05:22:66:f7:a0:cb:92:41:d3:94:
                    a7:99:4f:95:e5:47:6a:c1:fd:98:15:f4:93:dd:67:
                    fd:2c:96:b6:af:71:a7:24:27:f4:df:31:54:62:77:
                    69:dd:f3:ac:a8:48:4b:44:ff:04:20:fe:92:4a:34:
                    b7:eb:3a:da:30:ba:94:55:63:19:84:27:5c:17:28:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:04:07:CC:4C:FD:09:34:1A:56:F8:9B:73:0C:6F:4B:74:A1:0F:3B
            X509v3 Authority Key Identifier:
                keyid:96:FB:19:3C:8C:41:E5:A8:A5:F1:DA:35:63:F6:02:35:08:64:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FB193C8C41E5A8A5F1DA3563F6023508649BB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a3a2f33342d3334203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7708::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:64:22:ee:e8:fe:bf:4f:49:c9:76:ba:1a:85:ba:3f:62:
         a0:f8:37:ab:dc:e2:7f:14:77:f1:89:af:28:2c:d1:25:38:4a:
         54:d4:f6:49:76:a0:3b:d8:b7:78:cd:4e:20:91:d3:d6:8f:7e:
         db:57:a9:f9:87:81:a5:ee:ce:14:d6:82:2c:1d:f2:9a:33:b4:
         e8:4e:26:10:ea:94:3f:ce:17:06:66:a4:a9:be:38:47:48:39:
         b6:a9:52:cf:e7:96:fd:5c:b9:af:50:80:47:80:08:82:ba:5f:
         03:93:af:51:04:78:df:61:b5:1a:e1:fc:64:c2:ff:48:61:76:
         c4:f2:13:48:90:7d:a2:83:0b:18:ba:a8:ba:77:4b:30:8f:61:
         76:1c:0d:91:df:51:30:fa:09:2f:bb:d4:55:0d:50:04:74:8f:
         75:9b:a6:08:c8:14:08:0c:be:89:e4:65:07:8d:d7:72:91:19:
         26:f3:d7:09:88:ed:d9:60:a0:99:93:e0:84:1b:a0:19:14:b6:
         25:ed:03:7e:02:1d:c1:a3:a6:a4:6e:68:89:a0:32:58:78:0a:
         32:19:eb:a2:17:9a:4d:85:c5:c9:f2:c7:a7:63:30:fc:46:15:
         fb:c6:c9:3c:b4:c2:89:bd:20:12:07:62:eb:c7:3f:a5:4a:fd:
         38:9b:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:22:06 2025 by rpki-client