This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa
File:                     323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa (raw, json)
Hash identifier:          TldNcaHXQVZGykpWF3rX9YQvzYUDmkROp5LgUwuHTUs=
Subject key identifier:   51:94:1C:D7:94:FB:E8:16:64:77:4B:E3:72:FF:43:36:B4:7F:59:28
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       14E948C2097DE4442CDDE0A935312FC19D97D890
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa
Signing time:             Fri 19 Dec 2025 18:58:11 +0000
ROA not before:           Fri 19 Dec 2025 18:53:11 +0000
ROA not after:            Fri 18 Dec 2026 18:58:11 +0000
asID:                     271673
IP address blocks:        2804:7f34:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e9:48:c2:09:7d:e4:44:2c:dd:e0:a9:35:31:2f:c1:9d:97:d8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Dec 19 18:53:11 2025 GMT
            Not After : Dec 18 18:58:11 2026 GMT
        Subject: CN=51941CD794FBE81664774BE372FF4336B47F5928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:40:e7:70:e6:9b:a3:4a:7c:9f:48:77:4f:
                    3e:19:43:c6:15:6e:28:0f:57:d0:be:2c:a7:b6:a3:
                    23:bc:27:a4:d9:b8:48:e3:b5:38:f2:43:30:4a:85:
                    e7:1c:10:3f:29:b1:7b:c5:aa:05:5d:6e:32:ee:3a:
                    01:97:71:0f:2c:2b:24:b2:b5:7a:0b:28:af:96:a5:
                    2f:3d:b5:a5:19:73:b8:c4:01:90:58:55:77:f1:99:
                    07:7f:1b:7e:e3:75:4d:a2:dc:96:ed:d0:5f:ca:f6:
                    8f:16:ff:8a:d2:b7:46:bd:2e:ed:b9:66:ec:2a:14:
                    10:2d:c7:00:ec:ff:da:0c:73:d7:cf:a1:7f:c7:23:
                    61:2e:fb:45:af:62:e4:2a:23:3b:ee:8d:fe:86:c5:
                    da:c7:17:99:c8:c5:08:15:45:79:02:13:e8:71:31:
                    79:81:a5:c8:5a:6a:f9:e6:5f:72:12:f7:c7:36:6e:
                    a2:a8:b7:60:ee:bb:f4:66:45:1d:a8:fe:f2:2d:09:
                    5c:21:6e:71:b3:a4:24:57:3f:2c:20:dd:f3:5f:13:
                    53:16:ea:07:8e:be:e5:cc:b0:95:66:d0:21:0a:92:
                    da:67:15:e5:0c:bd:47:71:ae:e3:76:7d:cc:5e:ed:
                    a9:1e:4b:b8:e9:bd:49:fc:a5:1b:ba:94:1d:12:13:
                    8c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:94:1C:D7:94:FB:E8:16:64:77:4B:E3:72:FF:43:36:B4:7F:59:28
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f34:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:1d:0f:9b:b4:94:9f:1b:30:e6:42:a7:ba:73:86:24:8f:a8:
         d0:04:77:13:73:ba:10:db:51:85:0b:04:61:ba:63:f7:02:8d:
         e8:29:e5:22:ef:ce:b6:00:a9:51:05:90:31:72:da:aa:a8:f7:
         6d:25:a4:62:e0:df:30:5f:2b:36:52:64:10:e6:e5:ad:b6:4c:
         df:58:38:c3:91:44:6a:98:a4:b4:95:e9:51:2f:d8:e2:be:8a:
         63:16:0c:92:a0:31:cf:d4:15:84:14:aa:e0:82:63:14:6b:7d:
         4f:7c:e8:bd:44:55:33:20:72:f4:02:fb:c1:6e:f7:b4:35:cd:
         39:e9:b1:79:66:c8:11:bd:4e:82:dc:c6:4e:f8:5e:76:26:c5:
         75:5b:76:e6:df:a5:20:43:cd:14:b8:ba:77:ae:3a:ed:e4:e6:
         3f:bc:68:c9:0b:80:dc:24:12:87:6f:55:dd:2c:5c:e6:9b:41:
         9b:13:d8:ed:2e:f2:e8:f8:26:35:a9:d1:4b:0f:92:49:d4:6b:
         0f:62:6e:f1:b9:42:ab:6d:9a:9d:f5:22:9d:b3:f7:64:7a:f3:
         be:91:22:d0:78:ef:40:7e:0f:8c:cc:02:09:07:14:c4:95:97:
         46:5d:dc:0a:c0:63:77:14:1c:df:11:4a:65:f9:aa:96:da:28:
         ca:b6:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:09:20 2025 by rpki-client