This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d313238203d3e20323731333633.roa
File:                     323830343a376134633a3a2f33322d313238203d3e20323731333633.roa (raw, json)
Hash identifier:          AxnYX9NoVxsgmNEMteRGtT2pTz/QAMPmYTqPwdhIQ9E=
Subject key identifier:   60:C1:5F:3C:3F:61:A5:49:32:72:B6:67:D1:72:4F:37:F3:9E:B4:8A
Certificate issuer:       /CN=077EB0F07B9EB83899915225C99A893D0233E39F
Certificate serial:       62C6FD41396812B979FFB98D51CB3404F52948EE
Authority key identifier: 07:7E:B0:F0:7B:9E:B8:38:99:91:52:25:C9:9A:89:3D:02:33:E3:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/077EB0F07B9EB83899915225C99A893D0233E39F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d313238203d3e20323731333633.roa
Signing time:             Wed 17 Dec 2025 15:36:57 +0000
ROA not before:           Wed 17 Dec 2025 15:31:57 +0000
ROA not after:            Wed 16 Dec 2026 15:36:57 +0000
asID:                     271363
IP address blocks:        2804:7a4c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/077EB0F07B9EB83899915225C99A893D0233E39F.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/077EB0F07B9EB83899915225C99A893D0233E39F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/077EB0F07B9EB83899915225C99A893D0233E39F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c6:fd:41:39:68:12:b9:79:ff:b9:8d:51:cb:34:04:f5:29:48:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077EB0F07B9EB83899915225C99A893D0233E39F
        Validity
            Not Before: Dec 17 15:31:57 2025 GMT
            Not After : Dec 16 15:36:57 2026 GMT
        Subject: CN=60C15F3C3F61A5493272B667D1724F37F39EB48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:f1:22:9f:dc:b1:7c:b4:3c:f7:1e:c6:09:
                    76:ef:72:77:40:bc:b4:99:fd:fa:66:fd:13:76:b8:
                    d1:5c:19:b7:f5:0c:03:8d:10:c0:2b:e6:e9:af:a1:
                    dc:ec:90:d3:78:16:4c:fb:34:12:32:34:38:a6:0d:
                    e4:35:d1:4d:cd:1a:2c:b3:f4:af:be:95:ed:26:d6:
                    a1:42:51:44:58:3b:b8:0b:24:08:f0:70:f7:e9:75:
                    9a:33:53:eb:cb:12:c7:0e:22:4c:6d:75:f9:fe:b5:
                    5a:57:b3:9d:62:4d:5e:60:72:93:79:3a:80:69:c6:
                    5e:47:66:d5:99:ac:a0:97:4c:a7:3e:f6:ce:9a:cc:
                    0c:cd:a1:0e:29:7b:98:0f:b6:81:35:48:e8:21:73:
                    b6:5b:35:e5:c0:e0:0d:f7:b2:b8:88:7e:9c:c2:d6:
                    ab:f2:c1:1c:c8:e0:cd:9c:59:9e:a8:9c:60:43:39:
                    fe:d9:3b:3c:dd:f6:c2:90:a9:8f:e9:3a:54:54:92:
                    65:02:ea:e7:6d:0e:e8:11:2b:aa:fd:04:d2:13:1e:
                    7d:46:48:bb:0e:5f:82:30:8e:ea:80:09:11:1f:ea:
                    c7:df:9b:9f:31:cb:a8:8f:ba:02:89:a3:54:c3:c0:
                    36:c9:66:f0:23:13:d5:8f:d6:26:13:58:46:96:98:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C1:5F:3C:3F:61:A5:49:32:72:B6:67:D1:72:4F:37:F3:9E:B4:8A
            X509v3 Authority Key Identifier:
                keyid:07:7E:B0:F0:7B:9E:B8:38:99:91:52:25:C9:9A:89:3D:02:33:E3:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/077EB0F07B9EB83899915225C99A893D0233E39F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/077EB0F07B9EB83899915225C99A893D0233E39F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d313238203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:ce:b8:c9:7f:ee:5c:ff:61:d2:79:bb:bb:4a:e3:04:86:5a:
         45:a8:f0:1d:35:ac:ae:9d:07:af:f3:03:40:9b:11:ec:1a:4c:
         33:58:0f:5e:34:62:c3:ca:35:d1:89:89:39:c2:7e:0d:eb:ae:
         1e:01:19:95:24:65:49:22:c0:20:84:69:c3:a4:a6:c5:cc:bb:
         07:5e:26:e6:e3:2c:5c:88:9d:35:cb:87:be:18:e5:87:c3:74:
         65:98:6b:e0:ac:04:61:0a:92:00:31:32:a5:68:28:2a:e3:11:
         3c:0d:1d:6d:5e:c3:1c:c3:2d:98:5d:b3:1b:1b:42:d7:4f:99:
         a3:f3:9c:1a:10:59:01:39:98:1c:40:bf:ba:86:ed:2c:8b:7a:
         f3:76:c1:52:e9:18:60:60:55:aa:01:9b:03:29:f3:50:ab:d8:
         37:1d:27:e3:74:1b:16:59:09:be:8b:9d:13:d5:d0:95:16:08:
         f1:34:ce:ff:db:6f:4f:4d:4a:76:42:e6:a2:c9:bf:c7:98:b8:
         b6:96:71:4c:d6:83:27:36:9d:ad:8c:1d:a8:43:e4:10:92:b2:
         47:46:41:e0:79:73:7b:ea:88:bc:c6:28:3e:8c:af:c9:d2:10:
         fb:84:f0:4f:c7:49:ad:c5:49:02:1d:00:5d:d1:69:cb:2c:a5:
         69:54:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:43:09 2025 by rpki-client