This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33342d3334203d3e20323636323638.roa
File:                     323830343a336435343a3a2f33342d3334203d3e20323636323638.roa (raw, json)
Hash identifier:          MrLZ7ksyJPQvtmaAUahSo3VyNyjrNGBhtKIZ9CeepTo=
Subject key identifier:   BD:52:D1:52:AE:63:B5:D4:29:3D:E8:74:CF:02:0D:7B:53:BA:BB:DC
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       3B5AE00C7AC6B36B99569CD038B2536990FAAE03
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33342d3334203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:43 +0000
ROA not before:           Mon 22 Dec 2025 19:11:43 +0000
ROA not after:            Mon 21 Dec 2026 19:16:43 +0000
asID:                     266268
IP address blocks:        2804:3d54::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5a:e0:0c:7a:c6:b3:6b:99:56:9c:d0:38:b2:53:69:90:fa:ae:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:43 2025 GMT
            Not After : Dec 21 19:16:43 2026 GMT
        Subject: CN=BD52D152AE63B5D4293DE874CF020D7B53BABBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:83:ab:a3:29:7f:ab:19:28:4f:8b:9e:f6:
                    7f:19:d4:77:a3:8b:6d:74:15:e7:d8:f5:d8:89:51:
                    cb:a3:63:94:72:4d:af:07:d9:77:32:7a:dd:72:1a:
                    e5:25:15:36:de:e4:15:dc:d2:0e:d8:ea:bd:fb:b8:
                    11:fb:f2:6f:ba:28:bd:c2:dc:0c:20:63:f3:cd:c7:
                    6c:3b:a9:e3:c8:8d:2b:e9:d3:91:a1:86:68:91:3d:
                    fa:67:a6:8f:fb:e6:06:7e:94:fd:7d:39:a6:15:5a:
                    38:b4:78:f4:c2:59:77:63:8d:82:4d:32:56:a0:0f:
                    c0:62:6b:f4:cc:9c:1c:97:e8:63:54:08:a4:fb:af:
                    32:b5:50:0f:f7:7c:5a:64:10:0b:47:10:c4:36:ba:
                    85:ee:39:ba:74:26:9d:f2:43:6f:ee:e0:c5:ca:d0:
                    48:83:f5:55:fd:8c:7b:86:75:63:73:eb:51:7a:87:
                    f5:d5:b5:d9:79:a7:3c:9d:69:50:03:49:2e:9e:2f:
                    65:5b:23:0d:9a:64:d0:e5:80:f7:26:5f:3e:24:b6:
                    43:4a:55:7b:00:06:48:8a:1e:93:94:d8:4f:fe:60:
                    71:36:27:b3:67:65:b0:12:10:45:17:56:1b:fe:91:
                    8e:ae:39:96:b4:32:cd:f9:d5:cd:c2:b9:bc:19:69:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:52:D1:52:AE:63:B5:D4:29:3D:E8:74:CF:02:0D:7B:53:BA:BB:DC
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33342d3334203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54::/34

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:52:bf:71:f6:b2:eb:8e:a2:4f:ca:db:5b:b1:43:dd:8b:
         16:2d:90:66:e9:fa:f8:55:75:1d:77:1d:54:04:2f:dd:e0:b9:
         76:08:40:ed:5d:a6:fb:99:7f:46:e0:48:23:20:db:61:10:2f:
         13:0a:25:05:21:07:9e:0f:13:3c:65:64:52:26:20:49:32:1c:
         47:e1:12:f6:e5:cd:cf:e8:35:d8:9a:f9:4b:fa:ef:cd:71:81:
         b8:24:ab:34:8d:4e:02:93:af:9c:b3:4e:9e:0b:4c:e2:5f:30:
         c0:41:0a:8b:12:f4:c7:88:a3:82:da:7a:48:7d:e7:43:4f:d9:
         dc:2f:ec:38:f0:d8:c7:e7:21:bb:ed:8f:4b:f9:57:b3:6d:02:
         0c:89:07:39:df:76:76:e3:ab:aa:3f:56:a3:86:2f:0a:c8:66:
         a3:0b:a1:d9:33:c1:cc:2d:76:87:14:fa:12:34:21:ee:61:3a:
         76:1a:8e:61:3c:e7:9a:48:7d:69:ab:a0:74:f4:e3:16:1a:f6:
         2e:74:ac:56:29:63:5e:05:7b:1c:59:d8:a4:a2:88:05:c7:be:
         fc:96:e0:8c:63:e5:26:2c:e2:65:62:b6:d8:c4:67:d4:6c:3e:
         ea:26:07:ea:bd:3e:6b:8e:94:db:9c:6c:44:5e:d9:3a:15:83:
         69:a1:86:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:14:18 2025 by rpki-client