This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f34352d3435203d3e20323638313434.roa
File:                     323830343a353862303a3a2f34352d3435203d3e20323638313434.roa (raw, json)
Hash identifier:          Mq0EkJGDArgO2fRTCuU9jvTiWPQG9Jvuczq5U1utgyA=
Subject key identifier:   9E:1F:B1:E9:6D:2E:80:9F:AB:45:D3:05:94:D3:E0:26:C6:FD:B1:F3
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       7899F45A8FB80645481564AC938771CB487C91D7
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f34352d3435203d3e20323638313434.roa
Signing time:             Mon 15 Dec 2025 19:12:00 +0000
ROA not before:           Mon 15 Dec 2025 19:07:00 +0000
ROA not after:            Mon 14 Dec 2026 19:12:00 +0000
asID:                     268144
IP address blocks:        2804:58b0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 19:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:99:f4:5a:8f:b8:06:45:48:15:64:ac:93:87:71:cb:48:7c:91:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 19:07:00 2025 GMT
            Not After : Dec 14 19:12:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:95:d8:fd:74:7e:59:ec:66:25:5b:cb:0a:
                    cd:da:e3:9d:9b:88:f0:58:ba:4d:82:c6:27:bf:d6:
                    98:c3:c4:d3:85:5c:23:c9:c5:d0:8e:14:6f:4e:da:
                    d4:83:96:49:09:d3:a1:ac:de:47:be:b8:5f:70:b4:
                    d9:0f:ac:99:69:6a:80:2e:d3:9e:4a:a7:46:07:cb:
                    c4:63:f2:89:f4:a3:70:c0:42:3f:b8:cd:1f:2c:f4:
                    c0:c8:9d:94:88:1d:71:de:1e:46:7a:1a:fd:e6:c2:
                    49:5d:4c:1e:6b:07:93:b3:e6:ce:76:e0:43:13:4c:
                    e4:2f:db:24:f4:e8:b9:de:05:80:47:01:f2:ed:00:
                    a2:0a:2e:11:c2:77:3a:99:b9:ff:5a:91:30:1f:8c:
                    b6:4d:f9:b4:dc:e5:cc:52:14:a0:b9:85:cd:fd:d7:
                    2b:81:bd:98:46:f8:b0:97:a8:d2:34:fe:db:2c:0e:
                    8f:4c:4e:7b:a1:53:12:cf:30:9d:61:df:0e:36:4a:
                    48:24:39:d5:6d:fa:eb:3d:d7:b7:75:60:dd:de:67:
                    4d:6f:60:c5:1c:61:e9:53:0e:a7:2e:44:1e:60:83:
                    f9:2e:d0:4f:65:df:5e:60:3f:ff:98:00:64:64:43:
                    bc:e5:1d:78:c1:99:3f:9c:a3:bd:da:53:88:0a:87:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1F:B1:E9:6D:2E:80:9F:AB:45:D3:05:94:D3:E0:26:C6:FD:B1:F3
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f34352d3435203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0::/45

    Signature Algorithm: sha256WithRSAEncryption
         62:91:d7:a1:d9:20:9f:e1:d8:0c:81:62:b1:c5:46:a1:84:5d:
         c6:53:00:2c:40:93:5e:0f:2d:06:e7:ed:76:b3:6b:6b:20:c3:
         52:de:5f:32:5e:a4:7e:3b:9e:f2:f2:1c:d8:59:a3:16:fa:5a:
         a0:25:5c:63:ee:10:b6:04:21:4c:95:65:18:c4:77:f3:a6:fa:
         b4:0a:ef:87:40:4a:7f:b9:0d:4b:0d:b4:f3:7e:b5:c7:f6:05:
         b0:10:fc:8d:26:fe:fa:e3:38:6c:2e:12:d1:d8:55:71:3f:49:
         49:5b:dc:d2:db:0d:bf:fe:2e:07:8f:08:99:6c:f1:4f:3e:2c:
         7c:2a:bf:52:f6:56:0d:19:8d:cb:e9:13:60:ac:14:9c:86:92:
         59:93:74:1e:a0:e6:91:17:ae:21:02:e6:28:7f:c3:b7:db:eb:
         39:2f:2b:1b:f3:a2:71:f9:b3:e5:a1:8e:9a:04:f8:b3:83:82:
         da:87:d4:61:b6:0c:61:09:48:74:b4:72:03:a6:75:bf:1b:33:
         41:45:06:78:2f:e0:29:05:4f:9f:0c:0c:30:54:0b:9f:52:74:
         5b:f5:21:1b:32:23:19:f6:29:f2:a3:49:06:19:c7:e8:ad:ac:
         10:2c:00:c7:85:e1:de:4b:19:65:19:46:26:40:c2:81:67:4f:
         04:3d:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----