This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          idNnHE26xS0SYqJIlr8i9bwnLLpmNFuNhXC+F++rhGU=
Subject key identifier:   E8:54:FC:C4:31:37:0A:B9:F7:F8:1D:D6:A3:FE:DA:00:C1:AE:B5:1B
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       07DBBCF791C6F175C00507B86C4BA2B65B5BA820
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa
Signing time:             Tue 09 Dec 2025 20:01:52 +0000
ROA not before:           Tue 09 Dec 2025 19:56:52 +0000
ROA not after:            Tue 08 Dec 2026 20:01:52 +0000
asID:                     28345
IP address blocks:        2001:12f8:2::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:db:bc:f7:91:c6:f1:75:c0:05:07:b8:6c:4b:a2:b6:5b:5b:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:52 2025 GMT
            Not After : Dec  8 20:01:52 2026 GMT
        Subject: CN=E854FCC431370AB9F7F81DD6A3FEDA00C1AEB51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:af:77:a6:08:8d:8e:37:d1:ea:f4:93:e9:
                    b2:f1:19:9a:8b:7a:66:aa:f6:3e:f1:b8:24:c2:16:
                    de:59:61:86:b9:4c:44:4b:11:2d:5f:ac:5a:5d:1e:
                    07:3b:41:a0:cf:d4:ea:9e:20:d7:ec:14:10:51:2b:
                    95:c3:5a:61:63:cc:5b:8e:de:87:07:73:31:cc:1f:
                    7c:b2:e9:97:dd:cc:92:b4:08:56:3a:81:90:a1:1d:
                    ff:9a:f1:d6:d0:e1:67:fa:ab:63:12:cc:37:a9:ed:
                    15:de:3b:11:b2:ec:8f:74:dd:27:de:8d:cf:85:33:
                    a0:ba:6f:fc:22:cc:4b:7f:8f:39:cd:17:2b:dd:62:
                    28:73:04:b2:9f:72:89:99:e6:bc:9f:10:94:83:82:
                    96:9e:8e:da:3a:ad:d0:40:d7:a8:3c:18:2b:f8:d0:
                    ff:d6:c5:34:83:9d:22:d5:f8:ef:33:e7:86:42:a3:
                    a3:47:ca:b2:43:2b:61:bf:31:6f:67:14:f5:42:d9:
                    7b:51:26:4e:43:52:c2:7a:6e:bc:01:ee:27:3f:5c:
                    54:c2:a1:cb:10:22:96:6b:44:49:75:d5:98:cf:b3:
                    5c:2a:12:60:98:7e:40:2c:c3:73:ae:33:b7:9d:d7:
                    71:dd:9c:ca:a8:da:25:ed:e9:8c:7e:60:9a:a1:aa:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:FC:C4:31:37:0A:B9:F7:F8:1D:D6:A3:FE:DA:00:C1:AE:B5:1B
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a323a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         1d:2c:2a:4f:59:30:ef:a0:3d:96:1a:8a:cb:37:5c:b3:77:50:
         9d:d7:71:18:bd:0d:95:d8:55:8c:88:0b:73:69:50:87:fc:64:
         96:57:ad:30:6d:4c:65:85:d0:a7:15:d1:3b:6f:d3:f6:06:c9:
         1b:1d:a7:9b:62:23:ff:46:32:ca:06:2f:60:da:7a:dd:bb:62:
         01:67:47:35:32:3b:53:be:95:04:65:ee:fc:7c:4c:5c:e1:b9:
         72:b5:ca:08:21:01:36:e6:04:da:0b:82:97:5e:b9:c6:51:b2:
         0b:33:4f:85:b8:57:22:9a:46:ca:82:42:a4:41:2b:fe:90:62:
         6c:78:20:52:43:64:55:b1:6a:d8:c0:50:a6:91:2e:da:4a:86:
         38:9b:da:19:59:b7:5d:eb:47:cb:4c:db:6c:44:00:bd:bd:62:
         03:57:e0:4b:76:7f:46:66:78:a5:9b:3d:c7:f3:ba:ad:f2:a6:
         0d:95:8b:46:24:77:f1:ea:26:e2:63:22:5d:0f:ce:aa:d2:0c:
         db:47:4b:1c:37:6f:2f:04:20:10:64:f4:1e:a4:7b:1d:97:d4:
         5c:f3:0f:d2:b0:3c:ac:6e:cd:78:50:cd:59:98:1f:38:09:7d:
         04:9c:20:e2:fc:21:8e:88:29:40:35:34:0e:9d:5b:6a:ae:50:
         c8:60:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:17:38 2025 by rpki-client