This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/323830343a333638633a3a2f33332d3336203d3e20323636333535.roa
File:                     323830343a333638633a3a2f33332d3336203d3e20323636333535.roa (raw, json)
Hash identifier:          cRpArJ/BMZBtV8+UhUQQ08CZrNuGI0EGYdlNR3VxHj8=
Subject key identifier:   E6:EC:AF:BE:A2:94:06:5C:64:DC:AF:48:A3:72:C8:9B:CF:B3:6B:72
Certificate issuer:       /CN=63DA8A9ED5D7884298FABFA76F4B597051D2977B
Certificate serial:       2FC59BDCC67B518EEE80B22778D578B8DE6F7083
Authority key identifier: 63:DA:8A:9E:D5:D7:88:42:98:FA:BF:A7:6F:4B:59:70:51:D2:97:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63DA8A9ED5D7884298FABFA76F4B597051D2977B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/323830343a333638633a3a2f33332d3336203d3e20323636333535.roa
Signing time:             Thu 18 Dec 2025 13:35:35 +0000
ROA not before:           Thu 18 Dec 2025 13:30:35 +0000
ROA not after:            Thu 17 Dec 2026 13:35:35 +0000
asID:                     266355
IP address blocks:        2804:368c::/33 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/63DA8A9ED5D7884298FABFA76F4B597051D2977B.crl
                          rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/63DA8A9ED5D7884298FABFA76F4B597051D2977B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63DA8A9ED5D7884298FABFA76F4B597051D2977B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c5:9b:dc:c6:7b:51:8e:ee:80:b2:27:78:d5:78:b8:de:6f:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DA8A9ED5D7884298FABFA76F4B597051D2977B
        Validity
            Not Before: Dec 18 13:30:35 2025 GMT
            Not After : Dec 17 13:35:35 2026 GMT
        Subject: CN=E6ECAFBEA294065C64DCAF48A372C89BCFB36B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e2:b5:29:4d:09:ef:b8:fd:81:6c:1c:d7:ba:
                    32:c3:11:d2:9c:ec:31:35:41:07:9e:a5:e6:b1:ac:
                    88:ff:74:fd:d2:6f:20:af:7a:bd:72:e1:dd:0e:ea:
                    67:51:e6:a6:76:66:44:84:d2:c5:19:83:d3:58:d4:
                    4f:d9:12:5a:11:42:d9:8d:71:20:5a:e3:99:6a:0d:
                    50:fd:5d:72:18:91:94:be:59:d0:88:96:fc:a5:93:
                    26:a1:8c:ce:46:40:71:31:f0:62:00:fa:6a:ea:92:
                    3a:fc:3f:90:ff:d9:55:e6:97:4a:fa:2d:8d:26:4e:
                    79:86:a7:56:ce:33:a6:61:97:86:7d:4e:42:a6:b6:
                    ac:a9:5c:d7:73:01:71:aa:6e:81:64:9b:2d:73:2c:
                    eb:3d:b9:c2:d1:6d:96:0f:fd:d8:53:67:88:75:d0:
                    59:df:de:7e:e2:7a:9c:54:cc:97:c4:e9:86:0e:42:
                    09:5a:9c:62:52:c4:92:61:77:5f:13:3c:3b:7c:d0:
                    9c:e3:95:24:48:61:9f:84:e8:1e:44:89:19:2d:e7:
                    52:c0:c9:6f:6b:74:80:d2:cf:bc:70:ed:f9:b6:31:
                    9b:f6:53:55:6b:0c:07:ee:a4:49:6d:47:05:55:7d:
                    73:c4:ef:d6:4b:e0:ff:84:1f:ee:d2:87:db:5b:8f:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EC:AF:BE:A2:94:06:5C:64:DC:AF:48:A3:72:C8:9B:CF:B3:6B:72
            X509v3 Authority Key Identifier:
                keyid:63:DA:8A:9E:D5:D7:88:42:98:FA:BF:A7:6F:4B:59:70:51:D2:97:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/63DA8A9ED5D7884298FABFA76F4B597051D2977B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63DA8A9ED5D7884298FABFA76F4B597051D2977B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/323830343a333638633a3a2f33332d3336203d3e20323636333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:368c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:92:8c:ff:f1:93:c9:84:5e:39:3b:2b:5a:bb:b5:bd:bd:0f:
         f6:b4:e5:88:41:5d:7e:60:16:3a:ab:8a:11:0f:33:43:f4:13:
         8c:35:dd:5c:7c:8c:ea:fd:30:86:48:9e:16:0d:b1:5c:3b:36:
         3a:01:e0:ce:d6:e9:7a:c4:3f:f2:a2:51:ab:c6:97:3c:7c:56:
         1e:42:28:d0:13:83:ea:ef:a6:da:08:8d:10:e5:9b:b3:ef:2d:
         b6:07:9a:4d:5e:d1:f9:e6:d7:7f:b3:50:03:e2:bf:6d:35:a9:
         65:56:63:50:1a:3d:4c:5e:0b:76:a3:15:29:4a:1d:bf:5b:10:
         7c:eb:63:df:4c:ba:cd:86:d5:10:d3:9c:61:ca:cc:57:12:fa:
         aa:fa:18:62:de:6a:2f:47:27:c6:82:39:ae:64:cd:2b:6c:f8:
         d0:87:8d:cb:47:07:e7:d2:75:20:fc:d1:32:70:ae:fc:f9:b0:
         88:77:8d:0f:45:a8:21:41:77:3b:e3:eb:c7:d1:f4:73:56:ac:
         4f:49:11:e2:39:c3:e7:24:c2:e0:2c:5a:7e:dc:a1:ff:b2:e7:
         2b:9c:7a:bf:22:79:8e:4c:7d:b2:25:7a:f7:78:ac:21:94:0c:
         00:42:e9:d6:c0:a1:7c:11:18:df:c9:ab:e9:da:ed:cf:71:41:
         91:8d:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:20:53 2025 by rpki-client