This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a323030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a323030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          WeIRtVMikKuw5Zi4TdZZJyu7rVYo+NBq+QpB6IBelYo=
Subject key identifier:   52:80:C2:24:25:3B:0F:E6:F0:0D:71:51:7A:BB:6A:E1:8D:27:6E:19
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       08C8A4E92E9A4BDE9B5108ED3F4BED6F500D77C9
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a323030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:26 +0000
ROA not before:           Mon 22 Dec 2025 19:11:26 +0000
ROA not after:            Mon 21 Dec 2026 19:16:26 +0000
asID:                     266268
IP address blocks:        2804:3d54:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c8:a4:e9:2e:9a:4b:de:9b:51:08:ed:3f:4b:ed:6f:50:0d:77:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:26 2025 GMT
            Not After : Dec 21 19:16:26 2026 GMT
        Subject: CN=5280C224253B0FE6F00D71517ABB6AE18D276E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:bf:c5:c4:ff:c4:96:41:dd:90:c1:5d:8d:
                    90:d5:b1:c0:53:7f:76:28:2d:80:77:48:b5:d5:da:
                    93:65:13:98:ed:b9:cc:09:43:d6:20:e7:25:17:58:
                    54:14:af:88:44:71:97:48:2f:08:a5:5f:b4:2d:6d:
                    56:05:77:7d:2c:e3:da:4c:a7:c0:e0:54:12:cd:cc:
                    d8:95:78:3c:c1:53:90:d9:41:93:b1:98:c6:b2:ea:
                    34:e2:e6:64:a8:96:bf:8c:0a:ce:3b:84:49:ac:f7:
                    a9:2b:ba:62:ff:83:d0:8b:9a:56:e5:a5:91:bd:21:
                    a6:01:01:94:b6:13:cd:1e:94:69:d8:54:1a:5f:f2:
                    a9:0a:55:71:f4:5a:6a:16:47:c7:d5:bb:95:b9:e3:
                    60:d5:e1:9c:cd:9f:1f:21:70:b7:9c:d9:c8:4e:34:
                    62:67:40:60:31:e5:26:1a:9e:8f:7c:cb:49:5b:e0:
                    79:23:b1:53:52:ba:71:43:1f:6d:1b:bc:3d:39:c3:
                    65:2b:56:82:fa:0c:c2:07:38:cf:3a:93:19:c1:25:
                    e3:4b:dc:45:d9:5f:86:11:ff:10:05:fb:be:28:5e:
                    37:4f:80:d0:34:6d:ad:5c:5b:d4:dc:47:64:32:3c:
                    d8:a4:7b:40:4d:8d:df:6d:4c:29:4b:dd:53:87:74:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:80:C2:24:25:3B:0F:E6:F0:0D:71:51:7A:BB:6A:E1:8D:27:6E:19
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a323030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:3b:19:4f:ec:d6:ac:e3:2a:f9:6d:f9:5a:45:a0:f9:8c:
         15:97:b5:65:aa:c4:c7:49:4d:9a:27:a5:32:26:92:cf:7b:05:
         01:db:f2:de:f1:33:de:71:fd:14:4b:e5:f9:25:72:14:d9:65:
         5e:12:54:c0:ec:13:02:66:7f:bc:9b:7b:f6:09:01:50:16:f4:
         10:35:48:b3:74:9a:a4:e3:67:74:49:ea:0d:55:ef:e8:60:ca:
         b4:10:61:67:d3:3a:08:18:a7:d1:ee:91:68:6e:bd:fb:ee:7c:
         66:cb:bd:a3:5e:5a:77:da:c1:44:ca:41:e3:60:13:e8:87:27:
         61:b7:a8:0c:65:c0:52:f4:73:38:ab:ae:cb:66:44:ba:0e:41:
         55:f0:76:c9:6e:03:67:67:40:71:aa:bf:1c:48:c6:41:74:bd:
         da:03:dd:a7:dc:2b:20:f0:58:78:bc:98:0d:35:22:52:5a:2a:
         60:91:14:24:ba:90:45:50:e6:45:c0:82:1c:1e:5d:ba:07:ee:
         ee:8d:9a:cb:6c:f2:34:fd:d0:3f:87:81:91:a6:91:ce:d4:42:
         81:62:03:ae:18:dd:ba:d0:f9:25:67:ab:a9:b1:c4:29:2a:eb:
         e9:9f:17:75:c9:66:3e:d7:72:08:94:c5:34:f3:2d:b1:92:03:
         12:b3:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:15:11 2025 by rpki-client