This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/323830343a333638633a383030303a3a2f33332d3336203d3e20323636333535.roa
File:                     323830343a333638633a383030303a3a2f33332d3336203d3e20323636333535.roa (raw, json)
Hash identifier:          MtMrZHgoS6qcJ/jvwoTLDvrMThNb8/wSobNbbQzSMPA=
Subject key identifier:   DD:62:8E:EF:05:79:2D:5A:20:60:A5:F9:62:26:A3:45:1D:33:45:77
Certificate issuer:       /CN=63DA8A9ED5D7884298FABFA76F4B597051D2977B
Certificate serial:       62667FD2C69CEC0EF3DE25C02E22B015D816DC37
Authority key identifier: 63:DA:8A:9E:D5:D7:88:42:98:FA:BF:A7:6F:4B:59:70:51:D2:97:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63DA8A9ED5D7884298FABFA76F4B597051D2977B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/323830343a333638633a383030303a3a2f33332d3336203d3e20323636333535.roa
Signing time:             Thu 18 Dec 2025 13:35:48 +0000
ROA not before:           Thu 18 Dec 2025 13:30:48 +0000
ROA not after:            Thu 17 Dec 2026 13:35:48 +0000
asID:                     266355
IP address blocks:        2804:368c:8000::/33 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/63DA8A9ED5D7884298FABFA76F4B597051D2977B.crl
                          rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/63DA8A9ED5D7884298FABFA76F4B597051D2977B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63DA8A9ED5D7884298FABFA76F4B597051D2977B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:66:7f:d2:c6:9c:ec:0e:f3:de:25:c0:2e:22:b0:15:d8:16:dc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DA8A9ED5D7884298FABFA76F4B597051D2977B
        Validity
            Not Before: Dec 18 13:30:48 2025 GMT
            Not After : Dec 17 13:35:48 2026 GMT
        Subject: CN=DD628EEF05792D5A2060A5F96226A3451D334577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:40:e1:26:e8:71:cc:99:ab:eb:19:4a:54:
                    02:5b:4c:ce:ff:7b:00:87:2a:ea:0b:67:4e:6d:a7:
                    b2:9a:f6:fe:ce:42:90:42:a9:7d:60:9c:0e:56:75:
                    d8:d9:ef:32:01:ad:e4:01:4f:e3:96:e0:e6:6f:15:
                    a6:40:38:42:e7:76:45:b2:e4:71:54:2f:5b:d2:2d:
                    ae:d8:07:72:0c:88:52:19:c5:dd:62:d8:d2:c8:1e:
                    14:5c:c0:5f:20:98:fe:fc:9e:9d:3e:d6:98:0a:13:
                    4a:4f:7e:3d:78:0b:16:ce:f5:fd:d7:68:1e:42:0b:
                    af:c8:1e:4f:71:aa:86:b4:28:ea:f2:c1:d1:8b:a3:
                    3e:09:55:ba:50:bd:a1:52:fb:cf:2d:80:9e:a6:76:
                    84:04:f3:8c:33:d4:a8:11:6f:bd:f0:fb:f4:46:6d:
                    a3:e4:21:8d:e9:bc:b0:bd:ba:1f:d7:28:50:42:d7:
                    14:5d:36:43:bb:a8:56:59:fa:85:46:f8:35:1d:65:
                    43:c9:c1:89:82:9b:ac:2d:f1:7a:d9:de:c7:da:f9:
                    e5:a8:3a:24:23:e8:41:53:f7:96:bc:dc:57:b6:68:
                    24:32:f2:2c:dd:7d:f5:6e:e0:00:b7:4a:c1:5a:c5:
                    18:7c:8c:37:b0:c6:e4:47:68:20:13:f9:59:48:8b:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:8E:EF:05:79:2D:5A:20:60:A5:F9:62:26:A3:45:1D:33:45:77
            X509v3 Authority Key Identifier:
                keyid:63:DA:8A:9E:D5:D7:88:42:98:FA:BF:A7:6F:4B:59:70:51:D2:97:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/63DA8A9ED5D7884298FABFA76F4B597051D2977B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63DA8A9ED5D7884298FABFA76F4B597051D2977B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/323830343a333638633a383030303a3a2f33332d3336203d3e20323636333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:368c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:b0:a5:07:28:0e:d6:48:b9:92:9a:97:dc:6e:5b:88:da:41:
         99:69:3f:ba:53:c6:b2:3e:7b:5c:1a:07:80:79:a0:ee:8f:c8:
         4e:66:7e:4a:13:5c:25:7c:ac:3e:36:32:24:1d:57:1e:ca:7c:
         ee:0f:84:a1:90:a4:17:3d:61:b2:a1:1c:05:c2:0d:26:59:26:
         7a:e4:4b:9b:09:a0:ec:9c:8d:84:8a:51:2b:e6:47:42:f3:34:
         b5:ec:a0:2d:fe:f5:85:19:c3:50:4a:42:bd:a5:dc:f2:51:06:
         64:17:98:e6:4a:eb:0d:05:5c:0c:b9:ff:d0:00:72:3b:d4:7d:
         9a:f6:d2:75:6e:f4:73:8c:45:0f:bc:49:7b:ed:2f:ea:2e:93:
         4a:16:54:d8:cd:14:fb:38:4a:ca:27:71:09:29:19:aa:42:27:
         3c:10:82:1b:b8:b7:19:15:05:b0:42:17:c1:d4:b4:bc:3c:4e:
         57:64:b4:73:3b:f0:d4:7f:09:0d:91:07:b0:70:bb:7f:30:a6:
         80:21:bc:b5:e1:bc:a1:2b:91:18:ea:55:ac:44:5c:c5:30:0a:
         c4:0c:49:42:d6:dd:20:39:e7:87:7a:99:07:78:75:1f:93:4e:
         fb:90:0d:84:f3:22:70:e2:f0:d4:a8:98:e7:87:5b:ee:70:71:
         5b:87:71:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:20:34 2025 by rpki-client