This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a313030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a313030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          WAGkqiDzAtzIMmTkoaNKLLgAvuy5U4WK5OPVKtpss+g=
Subject key identifier:   17:F8:61:33:20:82:8C:21:A2:09:2B:1F:41:88:66:A1:04:D9:E8:E9
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       1BF3BEBF0DD253162A551663A16E7E0E9BAF3C4A
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a313030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:27 +0000
ROA not before:           Mon 22 Dec 2025 19:11:27 +0000
ROA not after:            Mon 21 Dec 2026 19:16:27 +0000
asID:                     266268
IP address blocks:        2804:3d54:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f3:be:bf:0d:d2:53:16:2a:55:16:63:a1:6e:7e:0e:9b:af:3c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:27 2025 GMT
            Not After : Dec 21 19:16:27 2026 GMT
        Subject: CN=17F8613320828C21A2092B1F418866A104D9E8E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:08:88:95:e6:8b:f1:7b:5b:02:ff:43:78:
                    79:85:8a:21:8f:b5:f8:d1:82:f9:d4:c7:02:15:94:
                    50:34:34:73:d6:c8:d9:22:3f:91:65:71:05:7c:a1:
                    2b:4b:88:2c:2c:04:3a:8d:b5:83:25:2b:49:c2:61:
                    78:4d:1d:f8:c0:96:1b:e8:15:a7:81:81:36:68:fe:
                    96:1b:27:c9:50:d3:e7:9e:ce:fd:14:5a:cb:c0:c6:
                    c6:75:be:ae:44:b4:cc:e3:de:23:ce:f0:40:1c:03:
                    50:45:ca:20:38:96:72:11:fb:c4:63:cf:58:7e:77:
                    fe:f1:09:44:f7:e0:32:5c:6b:eb:56:7d:1b:0f:a4:
                    60:8f:90:f0:92:bc:9a:4e:9b:d3:14:30:d5:ad:b5:
                    d0:44:90:ac:42:3f:e4:07:b2:bd:9a:67:9e:4e:2c:
                    bf:56:ad:53:25:48:1a:19:4c:49:e4:bf:cf:28:50:
                    5d:a9:d7:48:d0:dd:4f:43:64:96:9e:94:eb:f2:f8:
                    c2:ba:9d:e4:29:6a:b7:3d:1b:7a:48:18:47:df:ef:
                    65:26:72:58:7e:32:a5:56:ec:a2:c3:5e:d9:da:7b:
                    9a:1d:74:ab:b5:e9:83:a5:bf:1a:7d:e8:71:f8:3a:
                    ae:45:09:42:ee:0e:f2:55:44:4d:96:3c:71:df:ab:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F8:61:33:20:82:8C:21:A2:09:2B:1F:41:88:66:A1:04:D9:E8:E9
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a313030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:4b:b3:5c:ca:f6:f0:37:a6:10:88:9d:3c:76:f5:d5:73:
         a5:a9:f6:08:6a:25:a5:df:73:e3:b2:19:5c:b1:2d:00:08:f4:
         77:f0:c5:a5:09:47:67:40:2c:52:2c:58:55:11:2a:c9:0c:b1:
         e4:a3:a1:eb:41:53:c7:e1:3c:99:0c:ce:89:a0:ea:5a:33:e6:
         66:82:bc:4d:9d:39:64:f9:04:bf:0d:2a:23:4a:38:d1:7c:90:
         b2:90:38:c4:60:0e:9d:16:0a:b0:d4:d6:47:9d:2a:84:b2:d5:
         9c:d0:bb:ab:53:f8:5b:c5:7e:d9:2b:1c:41:52:e6:50:5f:7f:
         88:a6:bc:5d:b4:74:83:d1:7e:b1:7e:2c:e0:7a:4d:09:8f:f6:
         32:d5:fd:cb:33:b1:20:81:ad:61:fb:57:05:56:e1:3e:eb:1d:
         81:5f:2a:d0:ed:3e:78:74:84:72:de:52:17:4a:d6:ef:a5:85:
         67:7d:a0:59:ac:e9:34:a7:ea:80:92:2e:09:08:d1:93:6e:51:
         7b:2d:14:47:41:78:a3:d1:92:91:1f:61:97:fe:c8:7b:71:51:
         1c:fa:df:ad:02:22:f3:96:fa:9e:dc:8d:38:f2:78:2f:a1:7b:
         94:0c:d8:69:ac:20:70:dd:a2:79:39:6d:3a:2e:f2:42:11:35:
         7d:80:f2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 23:53:35 2025 by rpki-client