This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a663030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a663030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          9SIkpz1k8ca83aHrXWHHJ5Y5HZlMjYVegL3UIH+Rs/o=
Subject key identifier:   EE:14:8D:1B:AA:56:C5:23:EB:A6:A4:54:43:A4:21:92:95:12:00:BC
Certificate issuer:       /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial:       3CE133777F76B546CACCB1E1E342C0A65220B75E
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a663030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 22 Dec 2025 19:16:36 +0000
ROA not before:           Mon 22 Dec 2025 19:11:36 +0000
ROA not after:            Mon 21 Dec 2026 19:16:36 +0000
asID:                     266268
IP address blocks:        2804:3d54:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 15:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e1:33:77:7f:76:b5:46:ca:cc:b1:e1:e3:42:c0:a6:52:20:b7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
        Validity
            Not Before: Dec 22 19:11:36 2025 GMT
            Not After : Dec 21 19:16:36 2026 GMT
        Subject: CN=EE148D1BAA56C523EBA6A45443A42192951200BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:15:b1:7e:14:15:67:65:e3:7c:1a:2f:0f:
                    3e:47:9c:ad:87:f0:cf:9c:99:ac:78:d7:fd:bb:f1:
                    a7:c6:61:0e:5e:2c:00:8b:59:c8:ca:9e:fc:c0:5d:
                    22:6a:70:58:95:68:23:35:fc:59:36:fa:61:e6:13:
                    72:ee:1a:86:54:21:3c:e9:02:88:71:27:a8:e3:fe:
                    c7:b9:95:80:cb:ef:aa:d8:57:34:aa:83:32:72:f6:
                    99:14:f3:e3:e7:86:c9:a7:91:f8:b4:b8:8d:2f:19:
                    4e:32:8f:a1:1e:10:75:19:7b:b6:6c:4b:e4:24:ba:
                    7a:8b:69:8e:66:55:02:4b:4e:75:26:8c:94:1e:6f:
                    b2:24:a2:27:80:25:c7:43:1c:ac:b7:fa:73:c0:23:
                    82:e1:ff:f9:6d:bd:9e:26:38:7c:40:1a:74:09:c8:
                    27:0c:96:c1:3a:c9:ec:73:df:0e:fd:ac:fa:45:b7:
                    79:f9:90:23:ff:5e:03:ce:34:91:4e:e6:63:c4:1e:
                    66:f0:85:c6:da:80:c0:ec:cf:94:99:fe:45:91:90:
                    de:2f:84:5d:19:23:89:37:cb:e2:bb:b0:cc:10:c4:
                    d1:b2:49:bb:57:47:05:8d:82:58:15:1b:0c:06:54:
                    83:af:be:65:4a:23:fc:09:e1:0f:5b:14:1e:ea:ad:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:14:8D:1B:AA:56:C5:23:EB:A6:A4:54:43:A4:21:92:95:12:00:BC
            X509v3 Authority Key Identifier:
                keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a663030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:58:0a:8b:aa:3c:09:f1:44:09:be:fa:6b:8a:6a:e7:2c:a1:
         85:29:ba:6b:c9:64:3f:b1:d5:13:d7:b2:cd:3a:78:00:e5:de:
         b8:33:2d:3b:e5:a5:4c:f5:8f:67:f1:44:0e:43:17:02:7f:57:
         33:74:24:37:01:56:d0:22:c8:a9:b4:6e:43:a4:99:a3:35:5b:
         8e:ca:b4:89:b9:99:f1:3c:d1:7f:52:a4:33:36:aa:af:63:6d:
         57:b8:03:d5:51:4f:74:7f:ed:68:92:85:f0:d4:78:0d:95:8f:
         8e:a2:96:6e:b9:f4:27:f2:de:59:b3:35:f4:b1:27:07:42:17:
         64:7b:8a:82:69:ce:d5:87:ab:06:7e:73:5d:07:7b:dc:aa:37:
         c5:a8:14:d8:65:a6:1f:66:6b:0e:f1:a9:78:a8:25:38:c2:e2:
         9c:57:20:72:ed:db:d6:4a:42:1e:ef:3c:54:85:fd:3a:0b:a3:
         09:c9:e9:15:4c:b3:d5:82:f3:6b:03:c3:e6:fa:2b:90:e5:a3:
         ec:14:6d:53:b4:30:33:c5:37:40:db:67:0d:95:aa:ab:7a:ec:
         b1:5f:95:02:05:e8:b7:60:30:59:5b:e1:17:c6:53:4e:2e:62:
         91:0b:77:fb:23:28:69:bc:69:38:a4:a8:ca:7b:a9:e1:c6:24:
         24:e4:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 23:53:25 2025 by rpki-client