This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a633030303a3a2f33342d3334203d3e20323636323638.roa
File:                     323830343a336435343a633030303a3a2f33342d3334203d3e20323636323638.roa (raw, json)
Hash identifier:          ZCbxdzUXVvEwcGP1UWp1mrzWoAyo4m/hJMq3iYxBI0Y=
Subject key identifier:   E8:21:4E:04:06:25:4B:0B:CC:9E:2F:0F:00:27:60:0F:A1:53:65:6F
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       433D60D6FCC2F9615E94B6F19AC2102F4DF37D83
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a633030303a3a2f33342d3334203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:35 +0000
ROA not before:           Mon 22 Dec 2025 19:11:35 +0000
ROA not after:            Mon 21 Dec 2026 19:16:35 +0000
asID:                     266268
IP address blocks:        2804:3d54:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3d:60:d6:fc:c2:f9:61:5e:94:b6:f1:9a:c2:10:2f:4d:f3:7d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:35 2025 GMT
            Not After : Dec 21 19:16:35 2026 GMT
        Subject: CN=E8214E0406254B0BCC9E2F0F0027600FA153656F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:ae:9b:52:3d:74:2d:30:15:4e:96:33:d5:
                    5d:d8:95:95:78:d7:01:17:8c:b7:ae:44:b7:22:c8:
                    0c:47:6a:90:9b:eb:b1:cd:b4:3f:7c:ce:6e:82:ab:
                    31:ab:a8:16:a8:02:f2:e4:e3:bc:4e:c8:bf:dc:9d:
                    74:e6:f1:d4:bf:47:6d:25:69:f5:dc:8a:fb:a0:1f:
                    57:fc:a5:be:93:d7:02:d5:45:4c:2c:ef:a0:b8:68:
                    ff:6c:81:52:8e:fd:13:05:ea:a2:dd:9e:2a:53:bb:
                    58:a0:e8:e3:5c:58:21:38:b2:83:d5:44:f3:99:04:
                    a5:c1:d7:3f:87:a5:85:37:8b:1c:ad:b9:f5:9a:e3:
                    cd:9f:c4:98:56:98:5e:dc:9f:48:12:04:bd:7b:34:
                    2c:8c:84:7b:a7:ca:f8:35:06:da:c0:fc:a9:5a:b2:
                    83:67:68:06:27:6b:c6:94:d4:c1:22:bb:42:3a:f1:
                    37:9f:9e:d5:7f:2c:5d:72:d3:38:92:a6:73:61:e4:
                    69:6f:0e:71:28:2d:88:e6:c2:56:34:8e:0f:ff:73:
                    db:38:cf:44:35:78:e5:c4:d6:e6:df:06:87:9a:1b:
                    a4:ee:b6:6c:16:0d:7c:26:8b:5e:6b:a9:aa:8e:28:
                    5d:88:cd:24:49:0c:23:f1:49:15:a2:b4:c3:83:b1:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:4E:04:06:25:4B:0B:CC:9E:2F:0F:00:27:60:0F:A1:53:65:6F
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a633030303a3a2f33342d3334203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:91:ff:4c:f5:b6:9e:96:92:28:e2:05:42:2a:d9:b1:f1:f5:
         8f:17:a3:24:50:eb:44:98:ef:4b:c7:1e:88:be:2e:15:18:91:
         97:72:72:53:3a:7a:3b:c3:f0:a1:7a:b3:3d:7a:aa:a4:70:e7:
         e2:c9:d6:71:0e:25:ce:10:1f:99:31:f3:31:4b:b0:26:21:99:
         7f:a5:74:fa:e8:97:f0:8d:49:7c:4a:53:37:ce:dd:01:43:a0:
         b7:5f:47:8d:3c:fd:f8:00:1a:94:d0:09:3d:ec:8a:64:53:91:
         56:12:82:39:3b:d6:fb:ae:94:59:db:29:13:62:ca:a4:b9:c6:
         e5:29:f8:3b:12:22:e0:5a:8f:d0:5e:2f:53:07:b0:e1:1c:7a:
         77:6c:51:9c:67:0c:4b:cd:dd:4e:63:7e:76:4f:08:7d:a1:39:
         30:17:24:ab:53:f6:dd:a8:48:1e:79:e7:e7:5e:6f:89:63:14:
         85:d1:1f:78:43:30:fb:20:2c:a1:66:63:98:90:78:7b:6e:59:
         7c:29:0b:5c:42:c9:d9:e2:9b:70:f7:ff:2c:23:d1:ec:de:14:
         de:c5:a6:22:63:70:8b:e7:e5:32:93:f1:61:f6:a0:cf:26:6d:
         68:9f:c0:61:00:67:63:6d:3c:19:ed:a6:c0:43:96:0a:5a:34:
         1c:5f:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 23:53:11 2025 by rpki-client