This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a653030303a3a2f33352d3335203d3e20323731313735.roa
File:                     323830343a373736343a653030303a3a2f33352d3335203d3e20323731313735.roa (raw, json)
Hash identifier:          vIZGy7i+IFXHzjQRUKx6oOpriH1IPTb4mS4wPSxz0KA=
Subject key identifier:   2C:18:25:4C:CF:21:30:17:28:03:80:AF:7A:37:4B:DA:75:95:83:F2
Certificate issuer:       /CN=C424690F0D40D5A947CD0515B923B426E1FD684B
Certificate serial:       1A1B661E7617BEEE80003619C45302B0B953F913
Authority key identifier: C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a653030303a3a2f33352d3335203d3e20323731313735.roa
Signing time:             Fri 12 Dec 2025 12:35:55 +0000
ROA not before:           Fri 12 Dec 2025 12:30:55 +0000
ROA not after:            Fri 11 Dec 2026 12:35:55 +0000
asID:                     271175
IP address blocks:        2804:7764:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 07:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1b:66:1e:76:17:be:ee:80:00:36:19:c4:53:02:b0:b9:53:f9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C424690F0D40D5A947CD0515B923B426E1FD684B
        Validity
            Not Before: Dec 12 12:30:55 2025 GMT
            Not After : Dec 11 12:35:55 2026 GMT
        Subject: CN=2C18254CCF213017280380AF7A374BDA759583F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:02:31:d9:0d:88:a0:22:4d:34:45:b5:6d:
                    37:9f:18:1d:5d:7b:7c:e2:5b:c7:54:43:52:59:a7:
                    91:60:bc:b7:0a:85:17:90:80:e1:26:e3:ee:82:ff:
                    7c:7e:c2:a4:ef:eb:a5:38:e3:f3:f5:88:ff:b8:ef:
                    b0:8b:f3:82:5a:17:66:f1:5e:f8:a9:2c:89:d7:02:
                    79:24:98:b5:29:fe:f3:db:69:ba:2c:f3:40:79:3a:
                    db:ac:74:9c:b9:81:b5:71:37:90:73:f0:cf:b5:a7:
                    d4:3f:b4:c4:49:21:69:6d:24:d9:cd:0a:fb:2a:a0:
                    03:58:0c:7f:f3:52:6d:30:a7:c9:fa:2e:32:e0:92:
                    f4:f6:09:94:6a:a7:3c:c9:f8:c9:a9:f5:72:a9:c9:
                    29:3f:54:82:61:f6:ec:48:de:e0:94:d6:ae:9e:97:
                    c6:1e:90:fd:e5:0c:c1:16:70:4a:b0:39:c7:54:9c:
                    bd:5a:4a:5f:3a:14:78:39:d1:11:9f:f8:cf:72:3f:
                    fa:5f:df:8c:b6:12:b3:3c:59:1f:c8:2c:eb:19:44:
                    5b:ae:40:25:d3:1c:70:e2:fe:14:f4:28:68:7d:3b:
                    b2:48:fe:67:17:a6:a8:9d:53:c5:13:d7:7e:4c:63:
                    72:c3:58:38:8f:9f:64:d0:ce:00:bc:76:9c:f7:ff:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:18:25:4C:CF:21:30:17:28:03:80:AF:7A:37:4B:DA:75:95:83:F2
            X509v3 Authority Key Identifier:
                keyid:C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a653030303a3a2f33352d3335203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7764:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         90:52:8f:ef:9e:06:ea:14:6e:8a:43:bb:02:bf:f6:36:18:23:
         e7:b8:fd:0f:55:06:69:09:1f:d7:d7:9c:d4:51:fb:91:b4:9b:
         a4:81:59:1a:52:2d:63:a7:51:7a:32:36:da:fc:9f:49:2f:9d:
         c8:33:03:a1:f0:a5:9e:b3:c6:7c:ae:dd:3f:dc:1f:84:fb:e6:
         08:42:b8:2b:7d:f2:0b:1f:96:30:7c:5e:23:41:63:be:d2:c7:
         9f:0c:b3:5a:02:2e:b4:12:29:d9:52:60:6a:24:13:5c:c5:73:
         b8:9f:b9:ad:32:da:2b:90:25:74:e6:88:cc:93:d5:45:4e:44:
         71:67:25:08:10:a1:2c:98:30:9b:b3:35:4f:41:a2:3b:c8:19:
         37:7f:c3:18:d2:b3:44:5f:6f:cf:68:8e:e1:6b:f6:f7:89:5d:
         25:f7:4c:11:e8:e3:4d:70:d8:f9:76:26:0f:a2:2e:41:03:2c:
         50:fc:9c:23:88:24:d1:bb:fe:be:87:1d:15:58:39:e8:c1:e5:
         c9:96:61:7a:02:a6:c5:38:b9:90:f7:3c:d3:e7:47:ba:0e:a1:
         77:b2:8b:49:12:a6:5e:2a:c9:2f:63:8f:72:9d:ac:b2:94:45:
         b6:bc:b4:7c:64:a6:de:9d:eb:9d:c9:c6:16:25:b9:72:3a:5e:
         5b:7a:ba:8a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGhtmHnYXvu6AADYZxFMCsLlT+RMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQyNDY5MEYwRDQwRDVBOTQ3Q0QwNTE1QjkyM0I0MjZF
MUZENjg0QjAeFw0yNTEyMTIxMjMwNTVaFw0yNjEyMTExMjM1NTVaMDMxMTAvBgNV
BAMTKDJDMTgyNTRDQ0YyMTMwMTcyODAzODBBRjdBMzc0QkRBNzU5NTgzRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmYQIx2Q2IoCJNNEW1bTefGB1d
e3ziW8dUQ1JZp5FgvLcKhReQgOEm4+6C/3x+wqTv66U44/P1iP+477CL84JaF2bx
XvipLInXAnkkmLUp/vPbabos80B5OtusdJy5gbVxN5Bz8M+1p9Q/tMRJIWltJNnN
CvsqoANYDH/zUm0wp8n6LjLgkvT2CZRqpzzJ+Mmp9XKpySk/VIJh9uxI3uCU1q6e
l8YekP3lDMEWcEqwOcdUnL1aSl86FHg50RGf+M9yP/pf34y2ErM8WR/ILOsZRFuu
QCXTHHDi/hT0KGh9O7JI/mcXpqidU8UT135MY3LDWDiPn2TQzgC8dpz3//ahAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQULBglTM8hMBcoA4CvejdL2nWVg/IwHwYDVR0j
BBgwFoAUxCRpDw1A1alHzQUVuSO0JuH9aEswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZ6cHhGbVRoYUw3UW5uVWo5cGhXRnZuQ3J1aEdGaHlGb1VMUW5VN1di
a20vMC9DNDI0NjkwRjBENDBENUE5NDdDRDA1MTVCOTIzQjQyNkUxRkQ2ODRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0MjQ2OTBGMEQ0MEQ1QTk0
N0NEMDUxNUI5MjNCNDI2RTFGRDY4NEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGenB4Rm1UaGFMN1FublVqOXBoV0Z2bkNydWhHRmh5Rm9VTFFuVTdXYmttLzAv
MzIzODMwMzQzYTM3MzczNjM0M2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzczMTMxMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEd2TgMA0GCSqGSIb3DQEBCwUA
A4IBAQCQUo/vngbqFG6KQ7sCv/Y2GCPnuP0PVQZpCR/X15zUUfuRtJukgVkaUi1j
p1F6Mjba/J9JL53IMwOh8KWes8Z8rt0/3B+E++YIQrgrffILH5YwfF4jQWO+0sef
DLNaAi60EinZUmBqJBNcxXO4n7mtMtorkCV05ojMk9VFTkRxZyUIEKEsmDCbszVP
QaI7yBk3f8MY0rNEX2/PaI7ha/b3iV0l90wR6ONNcNj5diYPoi5BAyxQ/JwjiCTR
u/6+hx0VWDnoweXJlmF6AqbFOLmQ9zzT50e6DqF3sotJEqZeKskvY49ynayylEW2
vLR8ZKbeneudycYWJblyOl5berqK
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:48:54 2025 by rpki-client