This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4StjAVoGnFSnrCNj56QmAzoChfeUcxCK2TETpxGarEzr/0/323830343a393664343a3a2f33322d3332203d3e20323734333632.roa
File:                     323830343a393664343a3a2f33322d3332203d3e20323734333632.roa (raw, json)
Hash identifier:          JjNbo9j+zI0H1JcwDMudxKR8ox6wGE6+JfvjsYy0wto=
Subject key identifier:   0B:53:F2:63:CB:C1:20:E5:54:CF:52:D9:C7:8C:E8:F3:7E:B2:73:64
Certificate issuer:       /CN=7122268E5A7C59A3460B8DC4EBEBD171861086DE
Certificate serial:       29DE029C6A9ED70A46F403242E7FD8397F404153
Authority key identifier: 71:22:26:8E:5A:7C:59:A3:46:0B:8D:C4:EB:EB:D1:71:86:10:86:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7122268E5A7C59A3460B8DC4EBEBD171861086DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4StjAVoGnFSnrCNj56QmAzoChfeUcxCK2TETpxGarEzr/0/323830343a393664343a3a2f33322d3332203d3e20323734333632.roa
Signing time:             Mon 15 Dec 2025 19:25:01 +0000
ROA not before:           Mon 15 Dec 2025 19:20:01 +0000
ROA not after:            Mon 14 Dec 2026 19:25:01 +0000
asID:                     274362
IP address blocks:        2804:96d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4StjAVoGnFSnrCNj56QmAzoChfeUcxCK2TETpxGarEzr/0/7122268E5A7C59A3460B8DC4EBEBD171861086DE.crl
                          rsync://rpki-repo.registro.br/repo/4StjAVoGnFSnrCNj56QmAzoChfeUcxCK2TETpxGarEzr/0/7122268E5A7C59A3460B8DC4EBEBD171861086DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7122268E5A7C59A3460B8DC4EBEBD171861086DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:de:02:9c:6a:9e:d7:0a:46:f4:03:24:2e:7f:d8:39:7f:40:41:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7122268E5A7C59A3460B8DC4EBEBD171861086DE
        Validity
            Not Before: Dec 15 19:20:01 2025 GMT
            Not After : Dec 14 19:25:01 2026 GMT
        Subject: CN=0B53F263CBC120E554CF52D9C78CE8F37EB27364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:a5:b7:b3:e0:e6:64:01:d7:b6:25:02:52:
                    09:50:37:86:cc:c6:f0:e5:bf:41:7a:40:22:d5:64:
                    6a:e2:72:57:3a:b3:d9:30:72:04:50:73:f5:3e:c0:
                    76:df:67:be:83:d0:42:0d:ca:8b:b3:aa:68:e9:da:
                    97:bb:01:e6:96:28:02:a6:cb:b4:c5:69:cf:d0:f7:
                    3f:4c:7d:d7:52:41:5f:43:3c:fe:4c:69:e5:f6:27:
                    26:88:3d:33:16:f7:13:1b:d9:c4:9c:9e:1a:fe:50:
                    02:95:15:bc:3e:d4:7e:cf:b9:dc:7d:e1:f5:23:11:
                    5c:26:b3:cf:ed:67:37:03:5a:95:20:5b:1f:9d:2e:
                    35:18:21:eb:7a:f6:c7:a9:a8:7d:39:de:cb:5f:03:
                    03:36:1e:8d:65:36:8c:a4:72:ce:15:e8:5f:b0:12:
                    4a:1d:ab:b4:a5:bd:f4:9d:30:97:00:e9:62:96:d0:
                    5d:32:28:ec:e3:9e:32:ce:17:9d:b6:b8:c3:c0:24:
                    76:2e:df:1c:8a:35:cf:14:2a:b3:e6:e4:67:3d:90:
                    67:1a:2a:7c:c4:52:bb:21:c3:d0:3d:a1:1e:7f:96:
                    69:a4:d2:da:8c:be:bc:4a:d6:ac:27:66:74:6a:f8:
                    62:f5:07:d5:51:8b:86:5c:60:b5:61:a3:45:35:8f:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:F2:63:CB:C1:20:E5:54:CF:52:D9:C7:8C:E8:F3:7E:B2:73:64
            X509v3 Authority Key Identifier:
                keyid:71:22:26:8E:5A:7C:59:A3:46:0B:8D:C4:EB:EB:D1:71:86:10:86:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4StjAVoGnFSnrCNj56QmAzoChfeUcxCK2TETpxGarEzr/0/7122268E5A7C59A3460B8DC4EBEBD171861086DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7122268E5A7C59A3460B8DC4EBEBD171861086DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4StjAVoGnFSnrCNj56QmAzoChfeUcxCK2TETpxGarEzr/0/323830343a393664343a3a2f33322d3332203d3e20323734333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:f3:7c:67:40:6a:43:ba:dc:76:65:09:8c:f7:45:d3:38:4c:
         6e:38:52:70:06:97:5c:ab:79:32:12:f9:35:9e:b5:c1:eb:97:
         99:0f:3d:71:4f:82:13:3c:c0:d3:67:8c:ea:3e:6f:d5:e4:1a:
         57:8d:e5:88:0d:c1:33:89:62:02:ad:59:57:53:49:91:a8:29:
         99:62:38:78:94:13:be:44:8b:9a:bb:90:d1:2c:1b:01:4c:cb:
         dd:d7:44:df:8d:9f:fd:25:ef:7e:99:f7:a7:70:b9:a6:0d:ca:
         f2:e4:7b:47:1b:db:fe:a0:c7:5b:f2:70:5a:96:1d:f1:58:e6:
         f1:49:53:33:58:a8:45:b6:62:55:2b:a2:84:5f:ec:5a:93:f1:
         02:f3:1e:a5:cb:a8:1a:4e:02:51:26:f0:c5:3a:1c:79:bf:6d:
         32:9b:31:05:18:23:88:29:37:27:c6:e9:59:e8:1d:cd:72:2a:
         40:54:10:f8:ed:2d:26:e0:46:e8:cc:d6:e5:d5:80:55:35:7e:
         cb:ba:47:52:02:3e:87:84:68:c7:07:aa:8a:79:ee:ac:40:66:
         69:47:02:53:1a:74:09:8a:2b:c3:e2:cd:03:50:bc:60:49:cf:
         dc:67:ba:bd:3a:4e:24:e7:63:50:6a:c9:db:04:7e:2b:5d:69:
         2f:29:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:22:00 2025 by rpki-client