This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dPvCUzjmEPy7rf8oT4NswqfMtj5jecuRTrrkHGmCG3f/0/323830343a393632343a3a2f33322d3438203d3e20323734353732.roa
File:                     323830343a393632343a3a2f33322d3438203d3e20323734353732.roa (raw, json)
Hash identifier:          8ZK10fUNX/KMaLDdTEsJR+2spl7ImbM4mNQd85d1f7M=
Subject key identifier:   E7:2B:1F:93:3E:5B:27:4C:45:AF:AB:25:36:BD:0D:64:02:7A:91:97
Certificate issuer:       /CN=03AD49E94AA6E5AA0E52DB53EE0A0A4FD0271495
Certificate serial:       416A934488D44CB0CDF7155BC8EDA1BFAE72FF9C
Authority key identifier: 03:AD:49:E9:4A:A6:E5:AA:0E:52:DB:53:EE:0A:0A:4F:D0:27:14:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03AD49E94AA6E5AA0E52DB53EE0A0A4FD0271495.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dPvCUzjmEPy7rf8oT4NswqfMtj5jecuRTrrkHGmCG3f/0/323830343a393632343a3a2f33322d3438203d3e20323734353732.roa
Signing time:             Fri 19 Dec 2025 18:22:21 +0000
ROA not before:           Fri 19 Dec 2025 18:17:21 +0000
ROA not after:            Fri 18 Dec 2026 18:22:21 +0000
asID:                     274572
IP address blocks:        2804:9624::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3dPvCUzjmEPy7rf8oT4NswqfMtj5jecuRTrrkHGmCG3f/0/03AD49E94AA6E5AA0E52DB53EE0A0A4FD0271495.crl
                          rsync://rpki-repo.registro.br/repo/3dPvCUzjmEPy7rf8oT4NswqfMtj5jecuRTrrkHGmCG3f/0/03AD49E94AA6E5AA0E52DB53EE0A0A4FD0271495.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03AD49E94AA6E5AA0E52DB53EE0A0A4FD0271495.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6a:93:44:88:d4:4c:b0:cd:f7:15:5b:c8:ed:a1:bf:ae:72:ff:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03AD49E94AA6E5AA0E52DB53EE0A0A4FD0271495
        Validity
            Not Before: Dec 19 18:17:21 2025 GMT
            Not After : Dec 18 18:22:21 2026 GMT
        Subject: CN=E72B1F933E5B274C45AFAB2536BD0D64027A9197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:ca:54:f0:90:0e:d2:b0:fc:82:2c:37:81:
                    6a:6a:59:67:6b:fb:a7:24:9b:af:97:9a:31:15:56:
                    50:d1:f0:e8:3b:13:11:9a:b5:c9:97:d9:1a:b3:6d:
                    be:0d:82:23:62:c0:99:9b:98:e2:e3:6d:6c:33:0a:
                    e9:c7:a8:b4:02:5b:77:56:c0:b2:fb:89:be:aa:be:
                    3a:cd:90:e8:3f:58:32:c7:b7:6c:09:e5:f4:72:82:
                    b8:a9:fc:5e:9d:c1:95:fd:35:0f:2e:cc:43:b6:58:
                    49:60:a0:9c:fa:14:9b:08:d6:53:90:fa:20:7c:17:
                    bd:5e:98:a4:5c:0d:dc:90:63:6c:0f:22:ac:40:e2:
                    89:1b:5f:a1:6c:7f:88:3f:68:08:f5:73:09:fc:ca:
                    36:24:5d:e0:14:7f:5f:49:10:b1:73:0d:0d:d1:02:
                    b1:44:af:7c:47:fb:31:82:75:f1:8c:5d:92:6b:a2:
                    10:b7:bf:30:f4:29:fa:0e:45:fb:b0:c0:b9:ee:e2:
                    9c:60:04:5b:45:81:32:da:6e:bb:6b:5d:e2:a2:5a:
                    f8:ff:7e:cf:9d:61:cf:b0:8f:c5:71:25:9b:48:72:
                    9d:62:04:7d:7e:01:91:34:4d:fb:f4:87:d8:4e:9c:
                    1d:f9:4e:69:92:7d:6b:22:f3:3a:fa:4b:5c:08:29:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2B:1F:93:3E:5B:27:4C:45:AF:AB:25:36:BD:0D:64:02:7A:91:97
            X509v3 Authority Key Identifier:
                keyid:03:AD:49:E9:4A:A6:E5:AA:0E:52:DB:53:EE:0A:0A:4F:D0:27:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dPvCUzjmEPy7rf8oT4NswqfMtj5jecuRTrrkHGmCG3f/0/03AD49E94AA6E5AA0E52DB53EE0A0A4FD0271495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03AD49E94AA6E5AA0E52DB53EE0A0A4FD0271495.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dPvCUzjmEPy7rf8oT4NswqfMtj5jecuRTrrkHGmCG3f/0/323830343a393632343a3a2f33322d3438203d3e20323734353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9624::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:45:08:ad:0b:89:29:c1:81:26:f2:cc:b7:c6:a1:c2:7f:
         e0:13:81:14:1a:31:f7:6d:ad:39:7b:59:7e:24:38:66:4b:8d:
         bb:8d:00:b7:1a:b6:fc:ba:d5:e9:e0:5b:71:cd:16:f9:8d:e0:
         e5:68:01:5f:6c:4d:49:c6:a1:74:0e:bc:c6:dc:19:ba:20:8b:
         02:d8:3f:a0:61:a8:b5:07:5d:2f:79:ec:2c:08:ea:ad:87:8e:
         cc:14:d9:30:17:c4:42:88:54:66:20:6f:a5:41:11:ee:21:6b:
         f4:a7:9d:38:d0:f8:8e:29:0b:e6:9a:79:fd:9e:6e:d7:17:63:
         65:d5:aa:92:67:03:55:11:95:8a:08:39:dd:af:76:8d:ec:37:
         5d:9d:72:5e:64:c3:13:7a:20:2c:c6:ef:47:92:eb:b9:8f:70:
         29:d7:64:4d:7f:f2:6c:08:e9:4a:94:49:82:26:20:52:d4:c7:
         c6:12:df:8e:93:76:2e:62:22:cd:ee:db:9d:fe:ce:69:bb:38:
         69:1a:8b:a6:0c:20:34:0c:8d:4e:57:10:a5:82:cf:6e:d7:b1:
         5e:e6:3b:e8:7f:69:75:c0:12:6a:b3:ba:c5:3d:e1:60:c7:8e:
         a6:49:c8:1e:77:cc:4e:d1:4e:59:72:49:5f:64:3e:3d:d9:69:
         c6:9c:7a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:13 2025 by rpki-client