This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa
File:                     323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa (raw, json)
Hash identifier:          jejzpZ0Z1sUqdfdjHTQlj8zbau50Ozja70TJHjwM0IM=
Subject key identifier:   A9:96:E4:AD:11:AB:30:ED:E1:5A:0E:E2:AC:4F:62:AE:44:70:1C:26
Certificate issuer:       /CN=7B95A4B07BA817CC9D8FD2E337A916689CD15D79
Certificate serial:       0E24EC5763B3CCC6300108E5B43CB0A10414D2C9
Authority key identifier: 7B:95:A4:B0:7B:A8:17:CC:9D:8F:D2:E3:37:A9:16:68:9C:D1:5D:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa
Signing time:             Mon 15 Dec 2025 14:27:57 +0000
ROA not before:           Mon 15 Dec 2025 14:22:57 +0000
ROA not after:            Mon 14 Dec 2026 14:27:57 +0000
asID:                     272245
IP address blocks:        2804:8430:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.crl
                          rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:24:ec:57:63:b3:cc:c6:30:01:08:e5:b4:3c:b0:a1:04:14:d2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B95A4B07BA817CC9D8FD2E337A916689CD15D79
        Validity
            Not Before: Dec 15 14:22:57 2025 GMT
            Not After : Dec 14 14:27:57 2026 GMT
        Subject: CN=A996E4AD11AB30EDE15A0EE2AC4F62AE44701C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:0a:f9:5a:ac:3c:9b:1d:7d:fb:94:19:9c:
                    b2:ab:54:0e:af:ed:13:bc:31:81:4c:e2:f0:53:37:
                    27:0f:e4:db:74:fa:ae:ad:0e:f5:4d:34:ec:83:62:
                    7c:42:5a:05:47:1f:c2:f9:03:c1:e0:15:1d:ef:10:
                    23:7c:78:4d:54:1f:e1:11:c4:ac:72:a4:2b:e1:23:
                    75:fe:be:41:b1:50:df:5c:ef:bc:9b:30:0e:37:8f:
                    6a:25:d9:0e:35:14:20:68:de:82:af:e6:18:30:1a:
                    ac:69:52:03:60:80:ff:32:55:7b:f3:e8:72:d7:23:
                    d8:b5:4a:49:a7:68:5b:e7:d8:cd:c2:1a:08:cb:39:
                    aa:74:7b:49:4a:3e:2d:fb:02:c8:99:4b:e5:53:c6:
                    4a:7f:7f:b0:0c:ea:3f:6a:74:ca:b2:c3:82:ac:95:
                    a4:14:7d:b6:fb:fa:d5:9a:44:58:78:b2:8d:ce:24:
                    22:e2:28:fe:80:d9:65:76:46:a4:da:10:72:79:86:
                    a0:58:17:e1:fb:1d:89:1f:ae:eb:83:34:bc:f2:1e:
                    98:6e:5e:6e:80:e4:c6:4f:af:dc:35:04:19:c8:30:
                    bd:c2:82:b9:8d:36:ee:1d:98:6e:e2:4c:0b:4d:87:
                    bf:f8:ad:c8:8b:aa:53:34:df:c9:ca:b0:d7:e0:79:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:96:E4:AD:11:AB:30:ED:E1:5A:0E:E2:AC:4F:62:AE:44:70:1C:26
            X509v3 Authority Key Identifier:
                keyid:7B:95:A4:B0:7B:A8:17:CC:9D:8F:D2:E3:37:A9:16:68:9C:D1:5D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B95A4B07BA817CC9D8FD2E337A916689CD15D79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8430:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:d2:46:47:50:fb:79:9b:21:05:e6:00:1b:05:9a:f8:a7:
         e6:5c:d6:d7:e1:a8:46:d3:29:fc:30:12:42:fb:fe:b8:0f:93:
         4f:df:b0:a3:0a:35:6d:22:4f:54:ea:23:cf:29:5a:53:5c:e8:
         b3:9f:fe:0e:f9:a4:51:c2:10:78:92:f6:4d:3e:49:c8:fd:4a:
         c9:2e:56:08:d7:44:4a:45:b4:6e:30:a2:4a:ee:8a:61:68:c3:
         52:58:09:54:e8:68:cd:d2:b5:aa:4f:23:c1:c4:66:6b:10:0a:
         9a:54:44:9a:bb:60:2b:fb:6e:e1:9d:28:6d:86:25:43:b3:d3:
         72:1d:2d:60:16:aa:0a:3f:3e:9f:71:a0:85:1a:e4:fb:57:53:
         64:da:09:1c:1d:c2:4f:d2:c0:b5:64:a8:29:0c:92:4b:c5:e4:
         a0:a3:de:a4:7c:f6:6f:ac:86:25:c4:43:af:8b:84:05:64:03:
         17:03:82:0a:9f:88:22:dd:3b:89:31:6a:4d:82:6d:36:e2:55:
         9a:43:fd:fe:c0:c0:e8:4d:52:5f:58:99:50:ca:28:6b:cb:87:
         80:67:3d:79:cc:b8:ce:b1:01:65:0d:a3:51:c2:50:f5:16:c4:
         cb:9f:ea:50:4e:8d:89:4e:6a:d6:4e:93:be:91:36:c9:20:b7:
         7a:ac:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:06:11 2025 by rpki-client