This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a333030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a333030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          vAgipPLfIutEL9tZE7KNRppFB5OmvH99ugDl4OfFuu4=
Subject key identifier:   71:D8:1D:E9:22:0F:47:AD:80:EA:C0:D6:05:11:4F:C8:AB:7C:DD:54
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       0E046FB78809FE6548499FB062B3435F4B58343F
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a333030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:29 +0000
ROA not before:           Mon 22 Dec 2025 19:11:29 +0000
ROA not after:            Mon 21 Dec 2026 19:16:29 +0000
asID:                     266268
IP address blocks:        2804:3d54:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:04:6f:b7:88:09:fe:65:48:49:9f:b0:62:b3:43:5f:4b:58:34:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:29 2025 GMT
            Not After : Dec 21 19:16:29 2026 GMT
        Subject: CN=71D81DE9220F47AD80EAC0D605114FC8AB7CDD54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:23:4e:c6:aa:f4:52:88:e3:ce:5d:50:b6:
                    09:10:1d:64:ba:0e:5f:c4:56:9a:ae:77:ec:fd:9a:
                    5f:a9:47:51:35:0e:5f:9b:cd:1e:46:c5:7c:35:63:
                    6a:b7:c0:aa:bc:71:b3:32:75:89:57:11:2c:bf:bd:
                    f3:f3:c5:0b:fe:95:53:68:44:82:41:1f:a3:e9:99:
                    53:2e:a4:04:82:c8:a8:53:ce:8c:88:8f:5b:98:5e:
                    3b:3e:97:cd:27:01:cb:ba:f0:d1:ca:66:87:d3:8f:
                    60:ff:20:5b:45:53:0b:b7:56:59:49:89:f1:37:ea:
                    d3:eb:33:9d:e0:fa:da:68:12:7a:b1:ee:1b:2e:ba:
                    56:27:53:01:9a:6f:cb:b0:e9:f3:d7:c8:6d:1d:44:
                    b7:48:c7:81:ad:7a:61:d3:d6:4e:08:c1:22:b2:db:
                    2b:ec:b5:d4:e7:c4:f8:25:1f:64:ef:89:e1:3d:8b:
                    5f:57:18:18:86:ef:46:7f:5b:32:07:27:71:64:fb:
                    09:af:d8:91:6e:7e:0e:40:f5:47:41:4d:d8:07:37:
                    ff:cb:5d:64:85:5c:0b:2e:a9:0a:bd:40:b1:4c:ca:
                    55:67:45:6e:db:06:61:29:74:ba:ac:d3:90:8e:7c:
                    9f:fb:e2:90:99:f7:47:0c:3f:7d:0d:08:8c:e4:ef:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D8:1D:E9:22:0F:47:AD:80:EA:C0:D6:05:11:4F:C8:AB:7C:DD:54
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a333030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:94:32:7f:f2:0b:b7:72:15:02:2f:81:ec:2e:ac:00:e8:
         67:cd:be:3e:53:e9:f9:9b:4d:2f:20:4e:05:ec:ca:5f:2b:b7:
         52:f2:ac:0a:e2:7e:86:da:c5:74:23:df:49:2a:72:12:3e:80:
         6b:dd:9d:9f:3c:b1:6f:bb:3c:30:7b:59:40:33:86:07:87:5d:
         b5:a9:58:7e:8e:d4:a7:70:de:58:31:b2:5a:81:90:e9:4b:73:
         17:eb:22:ed:31:76:62:20:4c:fb:55:ed:2c:b3:df:22:95:22:
         5e:e1:84:50:31:b0:47:c2:df:56:c1:51:a5:4e:a0:04:bb:28:
         7d:77:a3:95:61:6d:3b:44:b7:14:65:e7:f9:5e:e0:8c:a2:43:
         bb:61:27:3d:c7:02:7a:be:6c:d5:0c:cd:90:5a:a6:84:b0:e9:
         bd:c8:a3:8d:93:a7:d9:bd:d1:c5:24:40:07:71:19:79:6a:ce:
         37:58:4f:3a:52:66:e5:45:13:1b:db:b6:ea:a1:0b:5e:0d:79:
         3e:ad:c0:7e:7f:c5:8b:89:b4:d6:65:8b:cd:04:11:fe:ac:fc:
         f6:5a:a3:e4:3b:58:16:4e:b8:db:ea:f6:6f:bc:0f:48:43:14:
         81:e5:cb:bc:0a:5a:80:6a:f5:ad:49:48:7c:a8:bf:27:3c:be:
         c2:fd:95:31
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDgRvt4gJ/mVISZ+wYrNDX0tYND8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlENzM2ODQxQjA2MzhCM0RGQUI4OTcxRUVCQjRBRUVG
MjU2MUYxNTAeFw0yNTEyMjIxOTExMjlaFw0yNjEyMjExOTE2MjlaMDMxMTAvBgNV
BAMTKDcxRDgxREU5MjIwRjQ3QUQ4MEVBQzBENjA1MTE0RkM4QUI3Q0RENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlSNOxqr0Uojjzl1QtgkQHWS6
Dl/EVpqud+z9ml+pR1E1Dl+bzR5GxXw1Y2q3wKq8cbMydYlXESy/vfPzxQv+lVNo
RIJBH6PpmVMupASCyKhTzoyIj1uYXjs+l80nAcu68NHKZofTj2D/IFtFUwu3VllJ
ifE36tPrM53g+tpoEnqx7hsuulYnUwGab8uw6fPXyG0dRLdIx4GtemHT1k4IwSKy
2yvstdTnxPglH2TvieE9i19XGBiG70Z/WzIHJ3Fk+wmv2JFufg5A9UdBTdgHN//L
XWSFXAsuqQq9QLFMylVnRW7bBmEpdLqs05COfJ/74pCZ90cMP30NCIzk73r9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUcdgd6SIPR62A6sDWBRFPyKt83VQwHwYDVR0j
BBgwFoAUqdc2hBsGOLPfq4lx7rtK7vJWHxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi
TXAvMC9BOUQ3MzY4NDFCMDYzOEIzREZBQjg5NzFFRUJCNEFFRUYyNTYxRjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5RDczNjg0MUIwNjM4QjNE
RkFCODk3MUVFQkI0QUVFRjI1NjFGMTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3UXd2OVhacUJMM2paaUxYZlM5cmJGRXhUWlFwd2QxQjRjWDdjcm92Yk1wLzAv
MzIzODMwMzQzYTMzNjQzNTM0M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjMyMzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEPVQwMA0GCSqGSIb3DQEBCwUA
A4IBAQBcqpQyf/ILt3IVAi+B7C6sAOhnzb4+U+n5m00vIE4F7MpfK7dS8qwK4n6G
2sV0I99JKnISPoBr3Z2fPLFvuzwwe1lAM4YHh121qVh+jtSncN5YMbJagZDpS3MX
6yLtMXZiIEz7Ve0ss98ilSJe4YRQMbBHwt9WwVGlTqAEuyh9d6OVYW07RLcUZef5
XuCMokO7YSc9xwJ6vmzVDM2QWqaEsOm9yKONk6fZvdHFJEAHcRl5as43WE86Umbl
RRMb27bqoQteDXk+rcB+f8WLibTWZYvNBBH+rPz2WqPkO1gWTrjb6vZvvA9IQxSB
5cu8ClqAavWtSUh8qL8nPL7C/ZUx
-----END CERTIFICATE-----
Generated at Wed Dec 24 00:14:50 2025 by rpki-client