This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          rtssP3Rp1XGL2LQNLCCLIxK6y5s+fY3tiDeUA5X+ZGY=
Subject key identifier:   5C:82:CC:FB:58:07:55:5A:15:2F:84:33:55:3F:E6:F4:6D:ED:31:69
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       395761FFDCF937184698C3D72FB66E33E8D0B967
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:35 +0000
ROA not before:           Mon 22 Dec 2025 19:11:35 +0000
ROA not after:            Mon 21 Dec 2026 19:16:35 +0000
asID:                     266268
IP address blocks:        2804:3d54::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:57:61:ff:dc:f9:37:18:46:98:c3:d7:2f:b6:6e:33:e8:d0:b9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:35 2025 GMT
            Not After : Dec 21 19:16:35 2026 GMT
        Subject: CN=5C82CCFB5807555A152F8433553FE6F46DED3169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:7c:16:c8:ee:9f:4a:4c:86:5c:b3:78:ea:
                    3f:8e:f6:5c:5e:1d:67:26:a6:63:d3:49:de:ab:c3:
                    2e:70:f0:3c:e0:6e:92:04:46:e6:ff:67:be:d2:4f:
                    99:8c:07:34:8b:ee:fe:c7:d4:dc:0d:9d:e4:b3:c4:
                    bb:22:20:bf:c3:33:a8:9c:63:68:e7:a6:24:3d:2a:
                    c9:ba:95:c8:bf:5d:f6:1b:8b:a4:0d:5c:07:47:82:
                    26:84:fd:c8:88:cc:30:e5:f8:d2:75:7b:35:05:27:
                    21:51:f8:52:cf:a2:0e:b6:b7:b4:be:0b:d9:a8:df:
                    2d:12:cc:6f:4b:7b:8f:71:3e:20:a6:3f:c7:f8:11:
                    64:6b:d1:89:bf:8d:01:d9:76:d3:51:6f:5a:89:42:
                    ea:a1:1c:fa:c1:7d:13:a1:5d:51:53:b8:04:4a:b3:
                    84:b9:bd:fe:4d:f5:1e:72:d3:e2:ee:44:d7:80:61:
                    b3:93:a6:bb:b4:87:02:c5:e5:9a:34:26:5f:89:2a:
                    69:fa:e9:90:9c:78:eb:d1:53:52:3f:a7:20:1c:30:
                    22:8b:6c:ab:e4:a6:21:7c:ec:13:9a:bc:09:9a:f4:
                    9b:02:7b:a1:0b:1e:d2:88:fa:c2:ad:d0:90:8d:57:
                    e2:3f:19:a0:8c:5e:70:31:0e:b4:f6:92:d3:20:76:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:82:CC:FB:58:07:55:5A:15:2F:84:33:55:3F:E6:F4:6D:ED:31:69
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:c6:e1:a8:a7:a4:65:4d:7c:bd:63:65:ce:c3:47:8d:3d:ab:
         ab:b2:f5:00:91:8e:eb:99:76:d7:d9:3c:10:08:7e:98:42:79:
         ea:a8:ac:bc:ea:3d:3c:39:8d:61:c2:3a:7b:56:1c:5d:ee:77:
         87:57:cc:39:10:22:42:ae:e7:bf:23:9d:e8:9e:59:71:24:34:
         5d:00:b5:8a:15:e1:81:07:3a:30:1d:ac:3c:40:c3:bd:dc:ef:
         49:73:4e:22:fd:28:b0:5a:61:6c:92:6d:0f:76:f4:5c:6b:dc:
         fb:93:31:3c:ff:4e:59:58:bb:1a:60:19:9d:4d:de:7e:b3:c1:
         96:ec:56:ec:f6:5c:43:cd:63:af:d0:af:f6:ed:85:c6:56:5d:
         23:b9:d9:01:d9:50:a5:1a:1c:04:05:82:1e:7c:d0:87:3b:0d:
         2f:72:4b:01:37:6f:88:19:66:96:55:da:57:1a:cf:c8:3a:52:
         34:78:62:f5:64:12:e1:b4:84:d9:fd:a4:81:b3:80:9d:17:46:
         bb:ee:bd:86:a1:22:14:e5:bf:7b:03:84:d2:42:8e:66:68:c4:
         87:4c:01:24:36:9b:73:cc:96:3b:c1:43:d6:89:f7:e3:96:fb:
         8f:59:e2:12:dd:94:43:7b:06:b1:1b:dc:6f:cb:de:ae:34:f0:
         b1:0b:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:14:53 2025 by rpki-client