This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/323830343a363431383a343030303a3a2f33392d3339203d3e20323639343035.roa
File:                     323830343a363431383a343030303a3a2f33392d3339203d3e20323639343035.roa (raw, json)
Hash identifier:          WDyJIFbcTBydYj7cOv7x64evtuK5c0wIQ6qRf+8Fwl0=
Subject key identifier:   72:17:D9:33:44:3F:BB:6D:79:38:75:4E:DE:2F:F9:67:66:88:92:29
Certificate issuer:       /CN=A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71
Certificate serial:       16157E965712893E25FC748930ABF4E441482113
Authority key identifier: A7:F0:27:6C:65:FB:74:CB:5F:D0:B1:FA:77:87:E8:CE:5B:47:2E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/323830343a363431383a343030303a3a2f33392d3339203d3e20323639343035.roa
Signing time:             Mon 08 Dec 2025 20:03:19 +0000
ROA not before:           Mon 08 Dec 2025 19:58:19 +0000
ROA not after:            Mon 07 Dec 2026 20:03:19 +0000
asID:                     269405
IP address blocks:        2804:6418:4000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.crl
                          rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 08:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:15:7e:96:57:12:89:3e:25:fc:74:89:30:ab:f4:e4:41:48:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71
        Validity
            Not Before: Dec  8 19:58:19 2025 GMT
            Not After : Dec  7 20:03:19 2026 GMT
        Subject: CN=7217D933443FBB6D7938754EDE2FF96766889229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:26:ff:32:5b:a8:3e:a1:12:75:9b:6a:42:9a:
                    ec:1a:bd:ca:30:94:ba:21:a9:07:60:69:f2:81:cf:
                    37:2f:0c:2f:b2:dc:d6:3c:69:00:88:6f:fd:cd:b2:
                    a8:63:b6:9d:7c:e6:bd:68:91:48:dc:fe:5d:7e:8b:
                    93:e8:c2:5a:08:0f:4c:de:40:27:ae:15:da:6f:6e:
                    d7:c5:4a:d5:3e:8d:d4:5d:5d:02:2d:9d:ea:bf:50:
                    9f:c2:9e:50:aa:35:38:21:28:d8:aa:bf:13:f0:2c:
                    93:95:8f:ce:82:22:5a:51:34:c6:fe:e4:0d:d3:74:
                    6b:33:5b:61:60:aa:09:99:8c:2d:58:7c:54:89:7b:
                    81:d7:e3:16:c3:1c:2d:2a:4a:b8:18:83:5b:09:f8:
                    5d:9b:0e:d3:bd:2e:86:d3:be:03:e5:7e:d7:fb:9a:
                    56:fb:dc:25:16:f5:33:7e:a5:44:4b:b3:e4:64:fd:
                    85:6d:3b:9b:22:f5:1a:db:46:10:69:d4:ea:46:c1:
                    34:91:ae:f9:54:1f:d1:f0:02:fa:62:55:8c:95:1a:
                    ce:aa:31:65:90:0a:f2:30:fe:de:08:60:84:33:3f:
                    bc:65:da:dc:c3:68:4e:63:37:37:c0:c6:3e:82:b8:
                    d4:8f:c1:05:6b:c9:a4:0b:34:2b:80:1b:4d:46:5b:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:17:D9:33:44:3F:BB:6D:79:38:75:4E:DE:2F:F9:67:66:88:92:29
            X509v3 Authority Key Identifier:
                keyid:A7:F0:27:6C:65:FB:74:CB:5F:D0:B1:FA:77:87:E8:CE:5B:47:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/323830343a363431383a343030303a3a2f33392d3339203d3e20323639343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6418:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         5c:fc:44:b7:cc:27:59:dc:b3:5a:57:3a:42:0d:4d:38:2e:02:
         f9:47:3d:93:12:20:af:01:0d:83:6f:c2:c5:b0:e8:43:a4:19:
         82:0a:79:fb:1f:7f:4a:6b:a6:2f:1c:ae:30:b9:e3:d6:de:5a:
         a8:51:89:4a:47:42:b8:6c:26:7e:e6:43:ee:ca:08:f7:74:51:
         3d:8f:d4:74:0d:b2:9b:a0:e8:88:49:aa:2b:75:ab:93:85:a3:
         36:a7:53:41:9d:bf:ee:34:dd:76:d8:5a:b7:1f:c8:ea:ec:d0:
         50:9c:14:ce:11:4a:91:0e:7c:75:32:39:dd:c6:d8:66:b6:fd:
         27:5b:6f:b7:8f:4a:1e:f5:50:43:09:1e:6d:0d:cf:1e:2c:55:
         a2:36:5e:cc:5f:39:2e:8b:65:0f:d4:c6:cb:4a:20:9c:3b:9e:
         ad:97:67:3a:24:c7:3c:50:48:77:2b:a3:63:cf:0d:de:22:ea:
         9a:e6:e8:f0:e0:9b:48:cb:4b:16:60:46:e8:ce:13:78:e1:73:
         cb:ff:dc:10:22:f8:1c:79:61:4d:ab:bb:c8:6e:ff:b4:44:d6:
         1b:ff:c4:db:3d:5f:40:a2:d9:a7:d8:24:cd:8f:10:57:bc:0a:
         1a:f3:8b:58:39:96:38:6c:1f:5a:5c:bb:d2:83:54:4e:06:a8:
         74:67:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:51:31 2025 by rpki-client