This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33322d3332203d3e20323636323638.roa
File:                     323830343a336435343a3a2f33322d3332203d3e20323636323638.roa (raw, json)
Hash identifier:          GMcaAiw2DS73oB7PqKUDUOL04XKd20lZf9UPwHJNRyE=
Subject key identifier:   90:F8:34:C4:84:29:9E:E9:2E:83:AA:D9:CB:25:CD:DA:44:DA:E6:0D
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       276537FC98679E274DFEEBAEF3ECD47DA767B898
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33322d3332203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:43 +0000
ROA not before:           Mon 22 Dec 2025 19:11:43 +0000
ROA not after:            Mon 21 Dec 2026 19:16:43 +0000
asID:                     266268
IP address blocks:        2804:3d54::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:65:37:fc:98:67:9e:27:4d:fe:eb:ae:f3:ec:d4:7d:a7:67:b8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:43 2025 GMT
            Not After : Dec 21 19:16:43 2026 GMT
        Subject: CN=90F834C484299EE92E83AAD9CB25CDDA44DAE60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:65:77:27:15:9d:60:35:da:23:e6:9a:0f:
                    e6:6a:06:85:bd:86:6f:12:fd:d2:ea:f1:8c:ae:73:
                    70:50:f9:7f:3a:24:d3:d6:ee:26:ed:ee:41:aa:33:
                    31:07:bb:cb:f6:9f:c1:e3:20:63:52:6e:ec:30:48:
                    f3:37:ff:4d:d2:8b:6c:1f:b5:04:2a:e4:a9:69:ee:
                    02:26:c4:24:8c:46:4c:5f:34:f6:c0:25:b7:16:e4:
                    e6:77:d6:a4:6c:bc:04:1b:60:a6:5a:ee:f6:b6:74:
                    2d:75:33:50:ee:a1:f4:d6:90:14:e3:00:b8:78:37:
                    87:3b:af:6d:ef:95:7d:6f:17:16:24:33:b3:e7:fd:
                    cc:73:18:63:86:80:ef:66:3c:f6:e1:8a:69:08:ad:
                    1c:52:cf:50:f3:46:fa:8d:87:d7:04:1e:fc:4b:01:
                    9d:8c:9b:01:14:d1:45:a1:ea:53:40:1c:18:6d:4e:
                    3f:b6:79:e5:9d:ed:9a:66:11:65:50:91:88:e3:a3:
                    e5:70:64:2c:0c:61:40:f5:20:77:ef:1c:77:ff:3f:
                    24:e6:a5:37:1d:2b:75:f3:31:ca:e4:46:f3:32:00:
                    a2:42:9b:9e:a2:a2:23:a2:7c:f5:14:3b:a8:f5:a9:
                    eb:9a:7c:b3:0b:e1:42:99:2a:f0:b8:00:25:08:4a:
                    f8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F8:34:C4:84:29:9E:E9:2E:83:AA:D9:CB:25:CD:DA:44:DA:E6:0D
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33322d3332203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:fa:61:04:59:10:a3:bc:03:59:ca:05:2f:6d:23:8c:a2:6e:
         a8:ac:cc:a6:6e:8a:bc:49:4b:0e:57:d5:aa:f3:c2:4c:96:bc:
         13:ac:5d:ea:94:3c:db:f3:62:59:fc:3e:e9:0a:e3:b3:b7:39:
         15:58:db:a9:a9:a3:18:6d:c1:3b:15:e4:07:2e:51:ca:dd:49:
         3a:18:59:99:9e:61:60:a0:78:f4:16:aa:87:6f:3e:4f:c7:35:
         71:22:d2:b4:b3:cc:75:be:43:33:df:2b:5a:8f:83:11:7c:0e:
         3d:d4:b7:ec:9c:cb:56:dd:09:e1:b1:3f:2b:05:5b:f7:2d:12:
         03:0a:cc:e8:1d:ce:aa:56:2d:a8:87:51:ff:ac:6c:62:76:4c:
         40:b3:34:f9:91:9f:3a:a4:16:57:7b:92:04:e7:fb:71:4c:4d:
         33:32:51:69:b2:1c:f5:c7:96:69:64:92:3a:af:e3:d5:82:ab:
         e4:98:7c:68:0b:11:a0:51:a6:ed:4c:ca:6c:1e:85:58:0b:de:
         e2:e7:a7:fe:50:1d:43:ed:70:41:d7:f6:a6:27:2f:c7:d2:13:
         34:1d:0b:df:3f:fb:95:85:00:7b:db:f8:00:cb:21:a2:30:80:
         e7:89:c6:6d:ee:bc:2c:7c:88:2a:5a:ec:f6:63:32:fa:ee:9a:
         79:63:ed:55
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJ2U3/JhnnidN/uuu8+zUfadnuJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlENzM2ODQxQjA2MzhCM0RGQUI4OTcxRUVCQjRBRUVG
MjU2MUYxNTAeFw0yNTEyMjIxOTExNDNaFw0yNjEyMjExOTE2NDNaMDMxMTAvBgNV
BAMTKDkwRjgzNEM0ODQyOTlFRTkyRTgzQUFEOUNCMjVDRERBNDREQUU2MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5GV3JxWdYDXaI+aaD+ZqBoW9
hm8S/dLq8Yyuc3BQ+X86JNPW7ibt7kGqMzEHu8v2n8HjIGNSbuwwSPM3/03Si2wf
tQQq5Klp7gImxCSMRkxfNPbAJbcW5OZ31qRsvAQbYKZa7va2dC11M1DuofTWkBTj
ALh4N4c7r23vlX1vFxYkM7Pn/cxzGGOGgO9mPPbhimkIrRxSz1DzRvqNh9cEHvxL
AZ2MmwEU0UWh6lNAHBhtTj+2eeWd7ZpmEWVQkYjjo+VwZCwMYUD1IHfvHHf/PyTm
pTcdK3XzMcrkRvMyAKJCm56ioiOifPUUO6j1qeuafLML4UKZKvC4ACUISvgtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUkPg0xIQpnukug6rZyyXN2kTa5g0wHwYDVR0j
BBgwFoAUqdc2hBsGOLPfq4lx7rtK7vJWHxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi
TXAvMC9BOUQ3MzY4NDFCMDYzOEIzREZBQjg5NzFFRUJCNEFFRUYyNTYxRjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5RDczNjg0MUIwNjM4QjNE
RkFCODk3MUVFQkI0QUVFRjI1NjFGMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3UXd2OVhacUJMM2paaUxYZlM5cmJGRXhUWlFwd2QxQjRjWDdjcm92Yk1wLzAv
MzIzODMwMzQzYTMzNjQzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzIzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ9VDANBgkqhkiG9w0BAQsFAAOCAQEAPPphBFkQ
o7wDWcoFL20jjKJuqKzMpm6KvElLDlfVqvPCTJa8E6xd6pQ82/NiWfw+6Qrjs7c5
FVjbqamjGG3BOxXkBy5Ryt1JOhhZmZ5hYKB49Baqh28+T8c1cSLStLPMdb5DM98r
Wo+DEXwOPdS37JzLVt0J4bE/KwVb9y0SAwrM6B3OqlYtqIdR/6xsYnZMQLM0+ZGf
OqQWV3uSBOf7cUxNMzJRabIc9ceWaWSSOq/j1YKr5Jh8aAsRoFGm7UzKbB6FWAve
4uen/lAdQ+1wQdf2picvx9ITNB0L3z/7lYUAe9v4AMshojCA54nGbe68LHyIKlrs
9mMy+u6aeWPtVQ==
-----END CERTIFICATE-----
Generated at Tue Dec 23 18:35:58 2025 by rpki-client