This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/323830343a393338343a3a2f33322d313238203d3e20323734373832.roa
File:                     323830343a393338343a3a2f33322d313238203d3e20323734373832.roa (raw, json)
Hash identifier:          oQn/fpBjBYTnI+RM0NT9GR4PwQvB0BtS6Xo5M6dJOHI=
Subject key identifier:   7C:83:CA:65:A8:85:3F:5E:5E:FF:DD:34:17:E9:0B:F1:24:DC:7D:E0
Certificate issuer:       /CN=6384D4006D3443D42FA3A029B5FCD10A35D42A1B
Certificate serial:       4ED40B0907C5395783E16A972A2B11B02D242021
Authority key identifier: 63:84:D4:00:6D:34:43:D4:2F:A3:A0:29:B5:FC:D1:0A:35:D4:2A:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6384D4006D3443D42FA3A029B5FCD10A35D42A1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/323830343a393338343a3a2f33322d313238203d3e20323734373832.roa
Signing time:             Wed 19 Nov 2025 01:44:43 +0000
ROA not before:           Wed 19 Nov 2025 01:39:43 +0000
ROA not after:            Wed 18 Nov 2026 01:44:43 +0000
asID:                     274782
IP address blocks:        2804:9384::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/6384D4006D3443D42FA3A029B5FCD10A35D42A1B.crl
                          rsync://rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/6384D4006D3443D42FA3A029B5FCD10A35D42A1B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6384D4006D3443D42FA3A029B5FCD10A35D42A1B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d4:0b:09:07:c5:39:57:83:e1:6a:97:2a:2b:11:b0:2d:24:20:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6384D4006D3443D42FA3A029B5FCD10A35D42A1B
        Validity
            Not Before: Nov 19 01:39:43 2025 GMT
            Not After : Nov 18 01:44:43 2026 GMT
        Subject: CN=7C83CA65A8853F5E5EFFDD3417E90BF124DC7DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:c4:fe:c4:84:fb:80:2a:e6:53:f9:b7:84:
                    3c:fc:f6:ac:f3:9b:98:50:11:6a:f6:3e:6c:6d:55:
                    15:af:55:0f:73:13:c0:8b:8d:21:6b:11:33:43:44:
                    0b:60:53:1a:4f:44:15:c4:c0:34:94:1c:3d:ea:74:
                    03:84:83:2f:91:a9:b6:e8:e3:ec:ea:d5:b5:ee:ae:
                    29:83:9a:ba:34:68:99:af:3c:0f:da:8b:4f:ca:24:
                    e0:81:41:79:4b:d7:5f:8a:c3:a2:18:83:6d:0c:11:
                    53:3c:e7:16:31:0c:86:28:c6:04:8d:40:03:6d:7d:
                    4a:33:5c:0f:fd:ee:39:95:0e:b8:96:bf:04:cc:ad:
                    c6:b9:85:fb:88:57:d7:06:cb:c2:bc:3e:b2:dd:63:
                    26:b7:a1:9b:dd:22:29:cb:48:01:b6:77:04:a6:11:
                    9b:d5:97:95:5d:48:b6:b9:50:de:0e:76:24:02:ab:
                    11:b4:a3:53:d6:c4:46:d1:fd:ca:d0:ed:75:fc:e2:
                    56:1a:50:35:b6:0d:b6:d1:a8:bd:ae:16:74:a9:ff:
                    c0:b5:f4:df:e2:c6:a4:4f:a2:eb:5c:6b:8e:c4:23:
                    85:58:7e:c1:24:bd:15:30:ad:e6:22:cb:8d:79:83:
                    54:8c:08:16:33:a2:a3:e0:f1:2b:c9:35:c9:11:4a:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:83:CA:65:A8:85:3F:5E:5E:FF:DD:34:17:E9:0B:F1:24:DC:7D:E0
            X509v3 Authority Key Identifier:
                keyid:63:84:D4:00:6D:34:43:D4:2F:A3:A0:29:B5:FC:D1:0A:35:D4:2A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/6384D4006D3443D42FA3A029B5FCD10A35D42A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6384D4006D3443D42FA3A029B5FCD10A35D42A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/323830343a393338343a3a2f33322d313238203d3e20323734373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9384::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:b1:39:22:8b:51:1e:69:f2:f9:fb:72:2d:86:19:60:60:2c:
         e2:ed:7f:15:9e:60:46:91:79:b6:62:35:ff:03:e9:5b:27:9e:
         47:42:47:0d:b6:7f:58:1b:a2:d4:57:9c:37:b5:76:db:b9:2b:
         09:09:72:fa:66:37:13:fb:b5:a0:83:db:3d:0c:40:9c:02:23:
         eb:6f:d2:e7:44:5e:10:a4:b9:73:bf:0b:2c:0d:22:2f:b2:8e:
         8b:81:cb:84:ca:a4:f0:ca:ef:10:0c:a2:58:4b:4e:8d:da:cc:
         e1:86:a1:34:14:a2:b2:60:9d:85:46:26:7a:ca:30:1b:08:a2:
         dd:16:de:ff:78:d4:40:d7:ea:da:c0:88:99:9b:59:ac:64:22:
         2b:02:db:6f:91:94:50:60:74:bc:12:1c:82:c9:a9:02:cc:43:
         0e:fd:5b:4f:22:57:5e:a9:b2:66:82:01:17:ca:17:44:b9:65:
         fc:1d:b3:11:82:03:bf:dc:dc:39:7b:fe:71:b3:cb:f1:57:7d:
         3d:7f:64:fa:d4:f7:b6:1a:3b:44:ef:03:b2:90:64:27:e0:72:
         89:71:f3:5b:c3:ad:0f:e7:b8:cd:fa:c9:f1:47:1f:be:54:52:
         76:ce:2c:f1:e4:80:27:51:b1:f2:dc:a8:26:20:63:53:c5:2b:
         1c:d1:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:10:31 2025 by rpki-client