This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa
File:                     323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa (raw, json)
Hash identifier:          66WsVJ+GnzPRLLDojkiHQjsHPawiIUgqns+qhOco3P8=
Subject key identifier:   D5:21:24:37:85:14:1E:8E:A0:CA:1E:74:0F:80:38:FA:CA:7F:08:15
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       683D748E5395BE446C32F072F22E2ECB1EB360CF
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa
Signing time:             Tue 09 Dec 2025 20:01:55 +0000
ROA not before:           Tue 09 Dec 2025 19:56:55 +0000
ROA not after:            Tue 08 Dec 2026 20:01:55 +0000
asID:                     12136
IP address blocks:        2001:12f8:2::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3d:74:8e:53:95:be:44:6c:32:f0:72:f2:2e:2e:cb:1e:b3:60:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:55 2025 GMT
            Not After : Dec  8 20:01:55 2026 GMT
        Subject: CN=D521243785141E8EA0CA1E740F8038FACA7F0815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:af:22:1f:c8:fd:f6:3c:d6:1c:6c:40:b0:
                    07:fb:e7:ce:8f:0e:71:6f:c4:93:ac:70:fa:96:fb:
                    1b:ae:95:19:00:10:49:9c:f4:55:5d:1d:3e:83:14:
                    65:4c:52:ea:c9:6c:1d:af:15:55:97:72:6c:af:aa:
                    89:98:46:17:75:cd:f1:64:0c:e7:e2:4c:29:ae:93:
                    5c:04:fb:bb:c6:8d:e2:7a:0b:68:24:88:96:98:0c:
                    5c:46:70:eb:44:85:b6:af:e2:97:61:57:f2:ec:45:
                    3d:4d:40:9e:b8:f6:b4:15:c3:ce:1b:97:34:23:40:
                    c2:99:c8:82:5f:ff:2b:b3:fc:c1:e7:1a:c2:96:0d:
                    e4:8a:0a:8a:ab:68:51:fd:09:70:8d:d0:47:15:96:
                    38:55:34:0d:c3:a1:41:16:c2:35:54:70:8d:c9:1c:
                    69:ba:b0:51:aa:50:08:b2:fb:37:7f:04:c4:9f:c3:
                    b7:5d:af:54:c4:3a:d6:4e:70:4f:2d:bc:4c:5f:95:
                    08:9d:d4:c8:1b:2c:cc:49:99:f2:f5:85:d6:63:a0:
                    83:94:bc:a3:07:f8:c0:38:d2:33:d3:d3:e4:61:8d:
                    af:ba:05:13:57:82:a0:46:6c:a8:1f:8f:66:45:0e:
                    93:f2:d9:71:9b:b3:44:3b:99:44:f4:e8:3f:f8:d8:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:21:24:37:85:14:1E:8E:A0:CA:1E:74:0F:80:38:FA:CA:7F:08:15
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203132313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:63:46:30:3b:2f:88:94:d3:95:0a:bc:86:e4:f4:97:99:
         5b:e9:e7:f5:c8:d5:e7:fc:58:1d:de:f9:63:18:ba:2d:b1:bc:
         9d:73:af:7f:76:f1:75:a1:60:b6:79:45:86:b5:3c:aa:e6:27:
         af:be:20:cf:e6:6e:8b:5a:a2:5c:8e:ab:c0:a6:66:be:a5:4f:
         e5:ed:9d:29:26:5e:ab:42:ee:4b:74:ac:d5:02:1d:8a:7c:75:
         cf:2a:73:22:9c:d0:28:8b:f8:b9:7c:a4:f8:b3:a6:7b:1f:e1:
         3b:7f:80:87:a3:be:81:a1:78:c2:b0:9e:c1:f5:5f:69:fa:76:
         61:55:18:0e:4e:ed:42:f3:15:3e:94:6d:18:2b:27:1f:fc:16:
         97:40:02:38:97:4c:b1:d7:d2:65:81:8f:ed:f0:19:52:11:b9:
         98:c4:f1:af:16:d5:86:9f:3a:08:91:76:3d:f6:55:ea:92:51:
         be:4c:ca:3c:38:b0:d3:12:d4:9b:eb:f9:c5:08:ea:25:09:94:
         64:f8:a5:89:c6:67:f3:c7:cd:a5:59:db:a3:77:57:8c:99:91:
         44:b5:04:73:a0:25:da:3c:de:5b:00:46:ff:e8:0f:45:bc:a8:
         a7:96:97:97:60:6a:47:e7:7b:40:05:5e:9d:0f:4e:5a:f0:fe:
         86:da:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:39:54 2025 by rpki-client