This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a363030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a363030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          lDxXbRJ9aGXxGxD03XO55Q0MbQu5HdebN7sS9j4HzwM=
Subject key identifier:   A9:0B:CE:C3:57:A0:D4:EF:04:E4:06:35:CA:D1:80:54:13:05:B8:5C
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       29A802256C33CA1D24546A5CE1394CDA024ED446
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a363030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:32 +0000
ROA not before:           Mon 22 Dec 2025 19:11:32 +0000
ROA not after:            Mon 21 Dec 2026 19:16:32 +0000
asID:                     266268
IP address blocks:        2804:3d54:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a8:02:25:6c:33:ca:1d:24:54:6a:5c:e1:39:4c:da:02:4e:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:32 2025 GMT
            Not After : Dec 21 19:16:32 2026 GMT
        Subject: CN=A90BCEC357A0D4EF04E40635CAD180541305B85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:73:29:c8:dd:d7:fc:f4:a8:99:0b:0f:d3:
                    a9:f3:d2:a1:b1:df:ce:f7:23:ec:77:6b:ae:e2:43:
                    e3:c2:78:e1:01:fc:e3:8a:34:7f:b2:66:3e:87:43:
                    66:8b:87:36:18:00:80:fe:29:9e:bb:c5:c6:23:8d:
                    2d:4a:21:14:de:05:e3:be:49:39:68:26:e8:95:44:
                    1a:0c:16:5e:16:0d:1c:90:7a:f7:9a:5d:9f:36:23:
                    98:66:6c:2d:c8:bc:21:a6:04:7c:c9:e9:fe:e0:65:
                    08:5c:72:c5:28:74:5e:b6:6f:74:61:40:62:e4:c1:
                    9a:14:bb:23:3c:de:71:3b:5c:02:be:00:17:d9:e9:
                    8d:3d:38:45:38:42:ef:c8:9d:ac:e9:bd:d0:d2:77:
                    9b:b5:be:a0:e0:c9:15:d6:70:e9:31:d9:40:48:90:
                    c3:c1:7d:7c:f3:1f:0e:4d:1d:6c:9f:5e:32:c0:29:
                    04:4b:30:c5:4c:48:1a:3d:ea:a4:fa:1e:0a:8c:00:
                    f5:11:71:e5:e7:39:4d:df:f0:d6:9d:8c:49:f5:52:
                    2a:69:bb:51:e9:4d:66:25:3f:e6:94:5d:ca:74:78:
                    01:a4:79:c2:ad:cd:e3:59:64:0b:80:56:56:c7:2e:
                    9b:50:68:9f:71:64:fe:bd:b2:52:d2:6d:b5:f9:ec:
                    29:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:CE:C3:57:A0:D4:EF:04:E4:06:35:CA:D1:80:54:13:05:B8:5C
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a363030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:33:3f:c9:05:57:23:57:9d:89:04:38:e0:43:8b:e7:79:1c:
         3e:87:34:53:0a:1e:46:47:4d:18:e0:f6:8a:b6:8e:dd:43:dc:
         bc:0d:e1:a5:6a:e6:e1:48:c5:ed:40:18:df:42:da:1b:ab:46:
         3b:09:a6:cd:81:f3:35:bc:15:fc:68:27:e8:fe:5a:e8:8e:a8:
         79:d5:5d:2d:d0:3c:db:54:1b:84:89:59:30:f2:a7:cf:5c:4b:
         55:34:98:ee:d4:1c:0a:f2:a4:5f:be:68:0b:33:fe:29:6f:b9:
         e1:6d:29:57:ce:3a:e9:83:7e:96:e9:ef:6d:e4:93:42:71:9d:
         55:81:ac:a4:7a:3c:bd:d6:52:6c:39:ee:d3:04:04:1f:40:b1:
         27:c6:50:96:1c:1f:ae:72:f7:5c:61:74:2b:ec:83:dc:49:ab:
         b3:d8:50:b5:23:da:6a:92:6b:8d:09:5e:94:e1:02:46:81:2d:
         75:8e:25:35:5c:c1:13:98:7c:d0:b4:52:cf:a2:b9:ea:8f:db:
         28:6e:4e:38:08:49:5e:1e:0c:2d:3d:95:e2:d2:a0:0e:7a:cb:
         4e:8c:7e:89:75:84:84:58:2f:3e:39:4c:46:5e:95:a7:bb:c3:
         27:fd:57:a6:c3:9c:50:ed:95:52:3b:83:c8:0a:82:36:e8:96:
         a7:cb:00:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:14:49 2025 by rpki-client