This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a343030303a3a2f33342d3334203d3e20323636323638.roa
File:                     323830343a336435343a343030303a3a2f33342d3334203d3e20323636323638.roa (raw, json)
Hash identifier:          fUePmiUOhPX1SPNshSU9pMbm1Nz2dPEgoyLBe+f/8Tg=
Subject key identifier:   FD:88:88:65:19:14:A9:DD:65:71:5B:5C:F6:74:D6:F2:DC:AE:CE:41
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       41743BB903938847657833F45A796921970B39D7
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a343030303a3a2f33342d3334203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:34 +0000
ROA not before:           Mon 22 Dec 2025 19:11:34 +0000
ROA not after:            Mon 21 Dec 2026 19:16:34 +0000
asID:                     266268
IP address blocks:        2804:3d54:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:74:3b:b9:03:93:88:47:65:78:33:f4:5a:79:69:21:97:0b:39:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:34 2025 GMT
            Not After : Dec 21 19:16:34 2026 GMT
        Subject: CN=FD8888651914A9DD65715B5CF674D6F2DCAECE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:a3:63:be:a4:38:a0:6b:b9:da:7a:05:f6:
                    b3:82:e7:06:a8:3c:06:41:85:76:fa:80:a5:5f:07:
                    c9:17:e2:6a:a7:92:63:15:b3:c8:73:5c:c0:10:c4:
                    d8:cd:00:b8:65:a2:c7:1f:7a:99:c4:00:79:66:3c:
                    44:e2:ad:3f:90:cb:ad:5a:19:e2:c7:b4:f1:3d:81:
                    cb:46:3a:b7:5a:54:3a:72:5e:40:bd:7c:c6:41:57:
                    40:52:4d:a4:6b:80:89:1b:e5:d7:ec:29:d8:35:78:
                    d3:9e:4a:94:8e:c3:2a:39:7d:2c:65:68:26:0e:b7:
                    66:38:80:08:a1:42:4b:45:67:99:84:37:63:8a:d6:
                    ce:32:d4:a2:29:f4:57:fe:b3:5e:24:14:8b:7d:0c:
                    e5:fb:7b:b8:76:c4:e8:cf:bd:9d:14:ca:c9:f5:43:
                    8e:46:87:85:0b:15:66:d1:28:d8:47:a5:53:6e:d9:
                    ef:1b:54:1e:10:e3:3f:0b:1a:e5:3c:12:5e:43:7e:
                    c0:d3:2d:20:f9:10:b5:eb:7c:45:66:64:ff:a2:35:
                    4c:3f:8e:82:28:0c:df:a1:bd:ad:4a:85:2b:2b:aa:
                    73:58:8e:d6:97:f3:d7:d1:fc:66:98:86:3c:94:ac:
                    25:c9:4c:a5:b1:73:c3:75:49:0c:57:d7:4f:21:83:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:88:65:19:14:A9:DD:65:71:5B:5C:F6:74:D6:F2:DC:AE:CE:41
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a343030303a3a2f33342d3334203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:03:fc:91:9c:61:a7:bf:30:dc:17:be:a8:18:45:d6:94:54:
         f9:c0:4b:5f:85:d4:c6:64:95:70:0d:dd:68:ef:6e:04:9e:ea:
         2b:d9:ff:6a:ec:ff:8b:b9:6d:e8:83:af:93:6d:bb:40:63:76:
         72:93:6e:a3:1c:47:d9:21:13:dc:ef:85:d2:c1:6c:24:28:3a:
         61:5b:0b:8c:f0:2c:78:d3:ff:e9:eb:41:e9:22:c6:04:19:b7:
         af:bf:14:d1:11:cf:02:0b:55:31:bf:f9:6c:3a:e4:37:92:23:
         40:91:57:d2:ab:32:fe:b2:38:d3:1f:c9:09:c6:b1:ed:e2:20:
         d0:ec:59:7e:3c:78:d5:4b:bb:15:9c:2f:0c:3f:73:43:fe:a9:
         8a:4b:9a:1b:63:00:bb:f6:13:96:b1:ac:f5:3c:b7:17:97:d3:
         54:b0:13:e1:01:72:fd:8d:22:5a:06:32:1f:8b:8e:c8:f3:13:
         cf:2a:97:af:9c:22:d5:c5:df:06:5e:70:f1:d8:aa:04:59:1b:
         13:9d:12:13:d6:0c:5e:f3:e8:c6:bb:c8:6c:b6:f1:5f:5a:85:
         01:cc:70:84:c9:a6:59:66:62:e7:22:57:e9:94:c3:b7:6e:c1:
         f2:59:11:fd:16:b6:e7:60:5b:2d:3e:77:d9:0e:e4:e2:c7:24:
         e7:5b:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 23:53:26 2025 by rpki-client