This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a393030373a3a2f34382d3438203d3e203631363231.roa
File:                     323830343a346433633a393030373a3a2f34382d3438203d3e203631363231.roa (raw, json)
Hash identifier:          e3Vmommma08cZoibhjKj78XEHhKKJP1fkdis0lxYbxc=
Subject key identifier:   0A:3A:6C:72:E2:78:B6:2C:9D:95:B0:06:B7:36:E4:D3:83:E9:B0:F7
Certificate issuer:       /CN=F350A9A60C94593716E8BF7D10666C1777A7789E
Certificate serial:       4589DB328F6C2A1043C475EB03BDB70B70C64E90
Authority key identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a393030373a3a2f34382d3438203d3e203631363231.roa
Signing time:             Wed 24 Dec 2025 01:34:26 +0000
ROA not before:           Wed 24 Dec 2025 01:29:26 +0000
ROA not after:            Wed 23 Dec 2026 01:34:26 +0000
asID:                     61621
IP address blocks:        2804:4d3c:9007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 22:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:89:db:32:8f:6c:2a:10:43:c4:75:eb:03:bd:b7:0b:70:c6:4e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F350A9A60C94593716E8BF7D10666C1777A7789E
        Validity
            Not Before: Dec 24 01:29:26 2025 GMT
            Not After : Dec 23 01:34:26 2026 GMT
        Subject: CN=0A3A6C72E278B62C9D95B006B736E4D383E9B0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:88:bd:1b:ba:62:64:c0:67:d6:a2:66:6e:
                    84:81:d3:67:2b:39:99:fc:9e:ed:6a:11:23:6d:63:
                    f6:97:40:8e:b2:4f:e0:d3:20:e1:3c:3b:13:0d:66:
                    ed:56:d5:ed:48:1b:9d:eb:6b:ca:c7:0c:f5:e2:56:
                    8f:ef:1a:b5:72:e1:76:3a:66:f0:eb:7a:d9:d7:29:
                    f0:e3:e9:6d:a8:a8:a1:e4:8e:9e:5c:4b:84:cf:1a:
                    bf:96:11:aa:3e:6e:c9:04:7b:a6:f3:da:61:60:d4:
                    30:ab:64:f2:2f:1b:d2:b5:2e:e1:1c:28:7c:7a:73:
                    c8:fb:78:61:0f:6e:fb:21:8e:f3:2a:96:3a:23:23:
                    16:3b:e2:4c:3b:36:f0:66:b9:87:73:64:64:cd:49:
                    2c:31:0a:40:d4:3a:cc:9d:f1:05:df:3a:a7:01:24:
                    96:ef:7c:cf:1c:db:5b:fa:e4:d4:53:b9:22:d7:46:
                    21:5f:2e:99:d0:75:f2:05:2e:15:f2:ee:12:a2:93:
                    76:1d:e0:69:a4:54:63:00:46:5e:67:79:9e:7c:c3:
                    35:a5:07:3d:ee:66:6e:5d:92:fe:23:7f:33:d6:a0:
                    f9:24:e7:e7:fd:df:2c:10:c3:b8:7c:59:68:05:61:
                    0d:b5:83:62:c5:42:e4:cd:86:98:fc:26:d4:c6:71:
                    bc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3A:6C:72:E2:78:B6:2C:9D:95:B0:06:B7:36:E4:D3:83:E9:B0:F7
            X509v3 Authority Key Identifier:
                keyid:F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a393030373a3a2f34382d3438203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:9007::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:5c:a7:74:34:6b:52:24:06:38:a4:a9:76:76:33:77:87:10:
         97:0b:d2:c4:c1:30:98:f9:15:fc:cb:66:db:c8:2e:da:0f:1a:
         3a:16:a7:41:ad:1c:ab:43:ad:06:c0:e3:57:fb:eb:d3:ae:ed:
         83:45:5f:61:51:1a:fb:68:58:15:82:db:95:da:54:76:5a:96:
         23:87:a9:1a:9e:58:ca:04:70:9f:39:69:3e:5e:e0:7b:3f:f5:
         b1:71:e7:fb:9e:3f:08:1f:7e:f6:ad:b4:24:4a:95:40:aa:a0:
         13:18:8e:92:b3:4c:c2:44:3b:88:d6:99:c8:3e:47:70:6a:22:
         22:07:7b:f8:55:51:e8:f2:02:e6:fc:61:a1:eb:28:0c:bd:34:
         fc:c6:fd:44:d0:c3:4b:05:c0:92:ad:15:3b:70:77:7f:67:2e:
         56:a0:a6:d1:80:63:49:ef:0d:a6:df:e0:81:56:7b:f4:31:a0:
         c2:b9:b3:5f:ef:7a:b8:46:cd:14:d3:4f:35:6f:29:53:0d:a8:
         4b:23:fb:bf:d7:13:06:ce:9d:ce:54:61:ab:2e:b7:a1:08:f2:
         00:50:c0:6b:6f:5c:df:6c:a2:17:83:26:c8:a2:1e:a6:ca:9b:
         ef:a5:56:36:df:3c:9a:eb:fe:21:16:da:ef:77:e8:0d:e7:80:
         b9:53:ab:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:02:08 2025 by rpki-client