This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa
File:                     323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa (raw, json)
Hash identifier:          bOo/oYxZDolM2NG378OYb3Foj1DcfzGZp0C4bxyRfoI=
Subject key identifier:   38:11:FB:81:6A:54:6B:33:F7:D0:16:91:3E:80:1D:D5:2E:F0:EB:14
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       2D5E8C3352A0C366F45489B47ADCF6E372859C1F
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa
Signing time:             Tue 09 Dec 2025 20:01:47 +0000
ROA not before:           Tue 09 Dec 2025 19:56:47 +0000
ROA not after:            Tue 08 Dec 2026 20:01:47 +0000
asID:                     11431
IP address blocks:        2001:12f8:8::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5e:8c:33:52:a0:c3:66:f4:54:89:b4:7a:dc:f6:e3:72:85:9c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:47 2025 GMT
            Not After : Dec  8 20:01:47 2026 GMT
        Subject: CN=3811FB816A546B33F7D016913E801DD52EF0EB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:0e:5e:06:b0:af:6f:1f:35:78:f3:42:50:
                    8a:66:60:2b:7b:5a:94:9b:56:72:be:cb:02:78:b3:
                    fb:b9:e5:29:89:91:12:57:36:27:76:9e:dd:56:50:
                    d1:08:46:ea:8e:8b:f6:56:cb:77:1e:c2:17:9a:0d:
                    6e:cf:19:2f:51:7f:cc:30:85:30:af:95:50:c3:fd:
                    9f:cf:9b:19:e8:5d:61:bc:4c:cf:a7:9b:ed:63:5b:
                    76:d0:4e:8f:a3:06:4b:51:63:8e:38:50:78:9f:9e:
                    c7:0e:ed:b6:b3:d7:35:fe:f1:06:59:67:2b:4b:ed:
                    1e:8f:c7:3e:2e:7e:de:8d:c0:d8:b4:37:33:c7:cd:
                    30:81:0b:74:b3:a9:af:17:e5:34:fb:fd:2b:24:61:
                    45:74:fd:30:8c:cb:ea:22:ee:4f:c9:a8:0f:34:b1:
                    3b:78:35:67:ad:c4:df:1a:1d:db:0c:9a:d5:05:73:
                    17:c4:5f:c9:5f:49:6e:a6:5a:86:23:02:11:e7:f1:
                    c9:9e:7d:ae:8e:79:d2:22:43:6c:0c:6f:82:99:eb:
                    7c:74:cb:01:7e:cd:07:27:56:09:b7:a6:cd:5b:9d:
                    e9:e4:40:01:2d:3b:c4:16:bf:21:05:84:42:89:e9:
                    15:e2:b3:6e:9b:84:a6:fc:29:62:62:ca:9f:10:ad:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:11:FB:81:6A:54:6B:33:F7:D0:16:91:3E:80:1D:D5:2E:F0:EB:14
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a383a3a2f34372d3438203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         99:03:28:0f:47:73:13:99:ea:13:bc:c6:2e:28:bc:29:fa:1f:
         81:fd:05:ef:d1:ab:bb:a4:7e:74:4f:50:1c:00:49:7d:c9:a2:
         f9:51:31:db:55:68:6b:cc:93:3b:fa:de:ba:6b:c5:a6:77:f0:
         9d:36:3d:e2:6e:95:ff:d5:b5:b8:ff:aa:6b:b7:34:9f:26:cf:
         6a:09:ac:66:1e:59:d2:b5:5f:96:e2:3c:29:12:63:c3:87:bc:
         32:fd:7c:ac:01:91:b8:1e:7c:6a:5a:81:7b:fc:e8:d7:ee:2e:
         98:ab:a2:01:9f:8e:17:2e:b1:b3:b3:ad:7c:99:16:af:37:17:
         93:fd:47:6d:eb:c2:94:6d:bb:95:c4:9a:fd:e3:6e:33:f5:58:
         90:6d:56:57:1e:46:3f:d4:34:c6:20:59:65:23:12:89:e6:23:
         a7:57:53:e1:ff:cd:ee:d3:d7:7c:d5:14:f7:18:2b:a6:5d:33:
         06:3a:1a:b6:ca:38:32:f4:64:53:a6:e0:91:47:84:1f:a8:1b:
         e8:6b:0d:80:0c:8c:70:69:01:28:92:f4:e6:d2:bf:c2:5d:03:
         b2:b4:73:2e:89:cd:4e:c6:48:47:62:55:f8:27:e5:99:9f:b1:
         2c:4e:17:7e:e6:86:e2:3c:a2:61:7a:cf:9f:5b:31:a4:15:3b:
         cd:04:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:40:44 2025 by rpki-client