This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/323830343a333430343a3a2f33322d3332203d3e203532353339.roa
File:                     323830343a333430343a3a2f33322d3332203d3e203532353339.roa (raw, json)
Hash identifier:          sHMCl+ElMomfSOQ0Azp8pUcaAyI7gc5ztGAGKAHY35k=
Subject key identifier:   F8:78:FC:11:BD:27:B2:08:3C:B7:AD:2F:D2:0B:94:1B:87:79:89:3A
Certificate issuer:       /CN=69FB575E9B82912339A5739ABEEBB97A5C354E9B
Certificate serial:       02DA6E95DFBFA54BC990186A41E53049327E1BF9
Authority key identifier: 69:FB:57:5E:9B:82:91:23:39:A5:73:9A:BE:EB:B9:7A:5C:35:4E:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FB575E9B82912339A5739ABEEBB97A5C354E9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/323830343a333430343a3a2f33322d3332203d3e203532353339.roa
Signing time:             Thu 11 Dec 2025 18:00:19 +0000
ROA not before:           Thu 11 Dec 2025 17:55:19 +0000
ROA not after:            Thu 10 Dec 2026 18:00:19 +0000
asID:                     52539
IP address blocks:        2804:3404::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/69FB575E9B82912339A5739ABEEBB97A5C354E9B.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/69FB575E9B82912339A5739ABEEBB97A5C354E9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FB575E9B82912339A5739ABEEBB97A5C354E9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 02:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:da:6e:95:df:bf:a5:4b:c9:90:18:6a:41:e5:30:49:32:7e:1b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FB575E9B82912339A5739ABEEBB97A5C354E9B
        Validity
            Not Before: Dec 11 17:55:19 2025 GMT
            Not After : Dec 10 18:00:19 2026 GMT
        Subject: CN=F878FC11BD27B2083CB7AD2FD20B941B8779893A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:fb:5c:ad:98:c0:cb:62:21:b4:bc:aa:12:
                    b9:23:44:76:1c:9d:18:b2:4e:5d:22:c4:b1:a2:d6:
                    aa:77:45:96:8f:be:0a:1b:ca:a2:7b:a0:13:e0:2a:
                    21:16:04:30:6d:e9:47:e8:a5:cb:07:3b:d0:7a:b5:
                    c4:67:68:30:ce:48:a7:46:44:f0:36:25:69:51:b6:
                    a8:7a:fd:0c:f3:b5:78:35:10:b1:f3:c1:fe:fa:e4:
                    7c:37:4c:66:4d:8f:21:66:27:e5:e0:d2:ba:a3:5d:
                    3f:d9:7c:7c:82:b0:63:0b:c6:e8:6c:4c:f2:63:c0:
                    4a:12:22:80:c4:49:8b:15:8d:8d:10:c5:4b:62:03:
                    32:64:e4:72:65:9c:f0:fa:c3:9a:0d:9c:f1:ba:94:
                    db:8b:54:0f:78:eb:1e:94:b6:1e:b3:20:3d:b9:c5:
                    1b:37:a7:d0:e4:77:4f:aa:00:0c:6a:58:71:74:39:
                    0a:50:ad:ea:5f:0c:e9:06:50:d0:21:ba:af:06:b7:
                    b9:d9:e0:d0:4e:34:15:e9:d3:70:68:3b:ce:bb:ac:
                    07:5e:ca:66:c2:8f:b9:37:06:9f:ee:2a:01:27:7a:
                    2c:f2:19:53:34:d2:5b:b4:c6:af:32:80:54:76:ea:
                    96:e0:fd:db:32:ac:6d:dd:84:b7:c7:51:df:2b:75:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:78:FC:11:BD:27:B2:08:3C:B7:AD:2F:D2:0B:94:1B:87:79:89:3A
            X509v3 Authority Key Identifier:
                keyid:69:FB:57:5E:9B:82:91:23:39:A5:73:9A:BE:EB:B9:7A:5C:35:4E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/69FB575E9B82912339A5739ABEEBB97A5C354E9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FB575E9B82912339A5739ABEEBB97A5C354E9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/323830343a333430343a3a2f33322d3332203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3404::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:84:13:1d:23:8d:f6:81:07:6f:34:be:dc:6e:2c:f2:48:02:
         4f:68:e1:ad:08:fd:79:68:f3:d3:a9:0d:85:27:7e:1c:91:e3:
         15:00:29:ee:03:8f:1d:93:9b:28:03:66:f3:7f:fb:2f:4b:8e:
         42:86:a1:78:31:58:be:e0:1d:2b:fd:bf:4f:21:0a:a1:29:18:
         e0:8c:24:87:aa:21:e9:df:5d:ed:b4:61:74:97:ab:8a:43:1f:
         82:a6:08:00:71:fd:cc:0f:5b:51:c4:01:1d:cf:97:35:14:42:
         99:95:be:52:92:55:d7:f9:b8:81:bc:10:d0:bc:57:0b:3f:d2:
         ef:ba:96:36:5a:fe:4b:f1:2a:fa:eb:64:a4:78:6c:4f:e3:da:
         46:d8:d9:83:d9:54:71:38:f1:49:cc:41:dc:bb:71:af:ac:9c:
         db:2e:f8:37:b5:c6:2f:33:dd:bf:74:69:5a:55:b0:1e:e4:dc:
         ef:22:ec:b4:3e:a5:f5:f0:8b:5f:f9:45:58:bb:dd:56:be:f2:
         6f:8e:2b:69:24:f9:93:52:9c:bc:50:e4:fc:85:ce:65:39:47:
         6a:90:44:f2:be:40:9e:17:13:d5:d7:de:46:bd:0b:8c:29:37:
         0a:04:0f:cf:a5:0b:36:64:b3:10:e4:21:b2:81:14:68:d6:e3:
         ea:5a:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:23:29 2025 by rpki-client