This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa
File:                     323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa (raw, json)
Hash identifier:          yz33kIjcV9FbP6gqupUlpaFnzlglfUOoRKGTn2ZrJGE=
Subject key identifier:   74:4C:2A:C8:BB:B0:C5:9F:CD:D7:08:DA:6B:68:FE:58:98:A0:D3:77
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       7367C632CE67B1E17E1259701E05A267CFE94B44
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa
Signing time:             Tue 09 Dec 2025 20:01:48 +0000
ROA not before:           Tue 09 Dec 2025 19:56:48 +0000
ROA not after:            Tue 08 Dec 2026 20:01:48 +0000
asID:                     11284
IP address blocks:        2001:12f8:a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:67:c6:32:ce:67:b1:e1:7e:12:59:70:1e:05:a2:67:cf:e9:4b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:48 2025 GMT
            Not After : Dec  8 20:01:48 2026 GMT
        Subject: CN=744C2AC8BBB0C59FCDD708DA6B68FE5898A0D377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:43:17:0b:0e:1d:66:e4:9a:c0:d1:6e:53:
                    22:09:1c:ff:45:dc:0c:d3:84:4c:c4:e5:3f:f9:58:
                    55:c9:a4:d9:b7:22:62:0b:3e:0f:a8:56:b2:fd:bf:
                    d5:d7:3d:fa:f0:76:ec:7b:98:09:7c:04:7f:99:f5:
                    5a:50:a2:ea:bf:66:f1:fd:bc:27:a5:47:80:ea:6f:
                    b7:c2:f5:c9:86:da:5f:4e:e9:3d:2b:53:e6:75:8c:
                    f9:eb:62:a8:a6:43:4b:82:7f:e4:e4:93:11:a1:97:
                    bc:1d:4c:20:ee:a3:51:8c:05:b2:44:41:99:51:f0:
                    ba:7e:80:cb:ee:d0:e2:90:54:da:f8:94:27:ed:b7:
                    63:39:d2:f0:52:42:da:32:18:f2:f2:c7:9a:6b:60:
                    a5:13:fc:fb:6b:ab:6b:8c:b7:41:ef:22:76:b3:d9:
                    21:be:a4:d5:d0:76:1a:c0:eb:ca:2d:c4:94:1b:0d:
                    05:6e:1e:20:44:cf:3f:09:4b:5d:01:50:ef:f5:90:
                    6f:1d:84:59:5e:b9:b6:5d:1f:e1:6a:d7:6c:aa:65:
                    47:db:c2:1f:a7:8f:db:93:4c:20:bc:ba:20:f0:83:
                    82:d3:49:db:28:e0:d9:9f:70:9c:26:f2:86:d5:4e:
                    62:02:98:c5:28:cd:24:0f:cb:ef:32:f3:e9:12:c5:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4C:2A:C8:BB:B0:C5:9F:CD:D7:08:DA:6B:68:FE:58:98:A0:D3:77
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a613a3a2f34372d3438203d3e203131323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         37:be:72:fc:a9:33:51:23:e0:1f:72:99:6d:e2:b7:00:ec:42:
         ee:22:b4:9a:e0:8f:4d:24:b5:06:9a:bc:40:8e:41:78:cd:44:
         dd:87:54:7c:2f:ef:0a:2f:ac:83:18:51:60:84:c7:2c:d8:c4:
         7f:16:a4:10:52:58:8c:4a:0e:92:a1:c6:15:e5:4c:1c:9a:e9:
         6d:6c:64:ab:4c:d7:f2:e5:38:0b:e0:ab:54:75:cb:72:98:90:
         c8:39:45:a9:f0:22:d9:5d:ff:dd:e7:13:eb:ee:a9:bc:34:dc:
         a4:a6:46:ae:3e:a2:49:62:28:cd:96:3b:1e:37:00:13:dc:98:
         0d:5a:a6:e3:2e:ed:31:7c:ae:6e:94:2f:d6:f5:0e:fd:5f:23:
         30:66:b1:ea:bc:f7:94:04:2a:fa:1b:30:5f:1e:1e:45:f0:c9:
         f2:1c:94:b5:95:06:05:f1:2a:54:e9:69:ee:a9:8f:d3:b3:3e:
         78:d1:d0:69:80:a5:d0:d6:9c:e5:0b:99:fc:77:23:5a:7b:7f:
         6c:a6:fd:ac:c2:21:21:06:86:e3:2f:4f:c3:9b:37:49:7b:a8:
         2a:49:9d:26:69:fe:64:a9:4c:00:49:99:f2:d7:c7:d5:2e:a0:
         a4:dc:94:2c:2e:04:42:fb:a3:6d:29:b9:ce:77:fe:cd:0b:37:
         c4:c0:12:ff
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUc2fGMs5nseF+EllwHgWiZ8/pS0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTEyMDkxOTU2NDhaFw0yNjEyMDgyMDAxNDhaMDMxMTAvBgNV
BAMTKDc0NEMyQUM4QkJCMEM1OUZDREQ3MDhEQTZCNjhGRTU4OThBMEQzNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+L0MXCw4dZuSawNFuUyIJHP9F
3AzThEzE5T/5WFXJpNm3ImILPg+oVrL9v9XXPfrwdux7mAl8BH+Z9VpQouq/ZvH9
vCelR4Dqb7fC9cmG2l9O6T0rU+Z1jPnrYqimQ0uCf+TkkxGhl7wdTCDuo1GMBbJE
QZlR8Lp+gMvu0OKQVNr4lCftt2M50vBSQtoyGPLyx5prYKUT/Ptrq2uMt0HvInaz
2SG+pNXQdhrA68otxJQbDQVuHiBEzz8JS10BUO/1kG8dhFleubZdH+Fq12yqZUfb
wh+nj9uTTCC8uiDwg4LTSdso4NmfcJwm8obVTmICmMUozSQPy+8y8+kSxfPBAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUdEwqyLuwxZ/N1wjaa2j+WJig03cwHwYDVR0j
BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx
Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2
OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv
MzIzMDMwMzEzYTMxMzI2NjM4M2E2MTNhM2EyZjM0MzcyZDM0MzgyMDNkM2UyMDMx
MzEzMjM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwEgARL4AAowDQYJKoZIhvcNAQELBQADggEBADe+
cvypM1Ej4B9ymW3itwDsQu4itJrgj00ktQaavECOQXjNRN2HVHwv7wovrIMYUWCE
xyzYxH8WpBBSWIxKDpKhxhXlTBya6W1sZKtM1/LlOAvgq1R1y3KYkMg5RanwItld
/93nE+vuqbw03KSmRq4+okliKM2WOx43ABPcmA1apuMu7TF8rm6UL9b1Dv1fIzBm
seq895QEKvobMF8eHkXwyfIclLWVBgXxKlTpae6pj9OzPnjR0GmApdDWnOULmfx3
I1p7f2ym/azCISEGhuMvT8ObN0l7qCpJnSZp/mSpTABJmfLXx9UuoKTclCwuBEL7
o20puc53/s0LN8TAEv8=
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:40:44 2025 by rpki-client