This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a613030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a613030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          h5/R6i2r2PdgIij9verJUdqZvmEAyLhpdWVLQqqd72M=
Subject key identifier:   0C:76:59:3F:38:D6:D9:59:47:7A:0A:82:15:C6:15:E6:13:F8:99:F0
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       5963DF72ED184F29F6F54A74626A34E546C40D5D
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a613030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:27 +0000
ROA not before:           Mon 22 Dec 2025 19:11:27 +0000
ROA not after:            Mon 21 Dec 2026 19:16:27 +0000
asID:                     266268
IP address blocks:        2804:3d54:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:63:df:72:ed:18:4f:29:f6:f5:4a:74:62:6a:34:e5:46:c4:0d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:27 2025 GMT
            Not After : Dec 21 19:16:27 2026 GMT
        Subject: CN=0C76593F38D6D959477A0A8215C615E613F899F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:a3:36:ef:7b:e3:21:83:9c:66:7f:a4:f8:
                    ba:59:50:fb:dc:00:77:e3:a0:6b:08:9c:8d:0a:bc:
                    08:7a:81:c3:33:61:ad:46:86:27:33:a6:7d:97:17:
                    9a:86:cf:e3:56:8f:13:69:01:7d:ae:71:91:17:86:
                    15:26:79:6e:45:a1:05:16:02:e3:83:c8:64:79:9b:
                    8e:ef:5f:ea:2d:50:a8:21:fa:65:76:07:9e:6d:53:
                    19:88:7e:ce:15:5b:c2:c9:bb:60:cd:9d:f6:7f:25:
                    01:3b:67:7a:61:d4:8f:96:b3:f7:7d:0a:16:b1:68:
                    68:d2:88:0d:a4:f7:c2:87:5c:b8:8b:bf:9b:35:a4:
                    b5:60:b3:f5:d1:61:22:79:a8:23:4b:bd:b8:50:85:
                    cc:da:c1:f0:14:e3:4e:3d:08:19:a4:70:e2:f8:13:
                    75:5d:98:c4:dd:9e:98:71:ac:7e:51:8d:c7:6e:aa:
                    3f:ab:23:1a:6f:43:df:60:85:e7:45:16:9a:66:20:
                    c6:c7:1a:75:f1:4e:7e:fb:2e:34:49:88:66:11:e7:
                    b5:ba:ed:54:94:a2:b5:09:c6:86:76:2e:7e:fe:f9:
                    89:98:c1:f9:6f:a0:77:a1:d6:0d:0f:fa:ba:64:54:
                    ec:50:30:b8:b8:99:69:32:71:80:cb:7c:e0:2e:48:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:76:59:3F:38:D6:D9:59:47:7A:0A:82:15:C6:15:E6:13:F8:99:F0
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a613030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:de:1d:df:ea:5a:77:27:3b:ab:c7:a8:ea:5b:fb:32:b8:9b:
         58:78:37:55:bc:7f:e7:72:51:a9:fa:9b:f2:02:03:4c:17:29:
         3f:95:97:d8:fe:c0:86:38:d8:df:ba:c7:f9:85:3a:16:0e:8c:
         78:c5:08:18:db:c9:da:4c:f8:e3:15:2c:00:fd:a1:33:75:f4:
         11:26:21:f8:2d:1c:a5:bd:24:8d:9e:b5:09:2a:50:47:0d:a0:
         59:6b:40:9c:fb:1d:00:df:3b:6d:1c:9c:d7:db:af:8c:c3:77:
         0c:62:48:a4:cf:d3:bb:3c:42:dc:79:fb:a6:ec:7d:62:f7:a3:
         b7:85:39:35:ea:72:d9:5a:19:52:f9:2a:32:37:87:3d:03:0b:
         82:61:1f:4c:79:00:c8:ad:f8:39:96:7f:e9:51:cc:cc:c9:f9:
         fb:ca:7a:8d:16:d9:89:b3:76:72:c6:80:75:9f:89:49:5e:40:
         f9:16:9a:86:b0:10:85:64:c2:8f:41:8d:85:8a:b3:24:15:37:
         92:31:ae:8b:ed:c6:43:96:ae:cf:21:3e:12:7d:9a:10:3c:bc:
         b8:c6:9f:f4:c8:1f:3f:7b:b9:41:19:3c:5a:db:a6:78:3d:c4:
         da:27:c0:8b:cd:52:b8:55:af:12:74:d2:ac:a1:fc:b5:4f:b4:
         df:c1:c7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:15:12 2025 by rpki-client