This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa
File:                     323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa (raw, json)
Hash identifier:          l0RtArn3JhFQMmbR7OGyflzi+q3R73pVY/pH/vt4WRc=
Subject key identifier:   A5:E1:2C:BC:41:CF:B1:71:F7:E8:86:F3:30:04:2A:2E:5B:EC:8B:A0
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       283A48C3ADF3B21684616226EB99206A6FC1A380
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa
Signing time:             Tue 09 Dec 2025 20:01:54 +0000
ROA not before:           Tue 09 Dec 2025 19:56:54 +0000
ROA not after:            Tue 08 Dec 2026 20:01:54 +0000
asID:                     28345
IP address blocks:        2001:12f8:6::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3a:48:c3:ad:f3:b2:16:84:61:62:26:eb:99:20:6a:6f:c1:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:54 2025 GMT
            Not After : Dec  8 20:01:54 2026 GMT
        Subject: CN=A5E12CBC41CFB171F7E886F330042A2E5BEC8BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:db:c0:10:5e:2d:20:23:49:03:7d:44:00:
                    91:4e:d9:0d:ec:46:a9:c7:c5:24:2b:40:8d:28:9c:
                    ee:f1:5b:34:47:c9:4f:29:df:a9:c9:75:3f:20:b5:
                    f6:d9:7c:7a:cc:ad:e5:f4:3e:8a:ec:c9:ca:ac:56:
                    a1:dc:13:5e:f2:e3:97:33:1c:1f:d0:29:0d:37:2c:
                    88:fc:e9:b2:f4:6f:f2:10:6a:c8:f8:7e:ef:07:5d:
                    ff:31:37:74:b4:dd:bb:a5:dc:61:82:6a:ac:b9:85:
                    27:b7:6d:ca:79:b9:55:8a:ab:68:a4:57:1e:af:17:
                    29:5b:11:7e:a0:94:44:a7:0d:2a:6e:0d:d2:f6:59:
                    a7:b5:89:9d:c1:fc:31:33:6d:27:bc:e0:ff:dc:ae:
                    10:e0:f4:6d:5e:6a:08:dc:21:ab:69:bf:e7:54:1e:
                    58:88:d1:a1:d1:c3:c6:8d:a9:6b:17:74:30:44:f5:
                    ea:75:83:ae:a4:63:15:57:25:1e:14:1c:34:67:91:
                    3e:c7:f8:6b:68:b1:6d:41:9c:e3:26:76:66:e6:c1:
                    1f:ed:57:fa:73:4b:70:a2:74:f0:1f:f0:05:76:0b:
                    5d:34:00:38:45:81:a8:1c:24:91:64:b8:36:a3:7d:
                    a8:f9:15:19:aa:1b:f0:7b:7d:8d:e5:3b:ff:a3:f6:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:2C:BC:41:CF:B1:71:F7:E8:86:F3:30:04:2A:2E:5B:EC:8B:A0
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:6f:f2:c0:f4:20:7a:91:11:4f:55:ba:2a:6c:86:44:2a:
         50:18:a6:72:88:31:41:66:44:40:54:1e:05:e7:58:03:07:4d:
         64:0c:7c:75:c3:89:bb:03:c6:05:94:fd:0a:21:ab:22:2b:45:
         95:bd:d2:e1:48:90:46:f1:fe:21:58:fc:d9:d4:6b:0f:48:6e:
         d1:b6:d6:f9:98:7f:d6:7c:c5:7c:c5:de:f6:a4:b7:b0:2a:41:
         ee:9a:e1:1d:c3:d4:85:4f:8c:94:70:ad:7f:57:1a:bf:be:09:
         ba:fb:c6:c9:88:db:10:b6:9e:7d:91:44:d5:39:cc:ef:25:8d:
         80:7d:02:00:b3:fb:50:b6:f1:6b:cb:fa:13:92:9b:1b:3d:20:
         53:c7:82:42:1b:70:62:7a:07:4f:1c:43:9a:32:38:13:66:46:
         75:a9:26:62:3c:df:90:43:b4:88:ae:2e:f1:f1:78:83:bc:a6:
         51:1f:5b:96:42:3b:15:73:01:71:af:5e:a6:ce:1a:c2:06:d7:
         17:fe:f6:8b:3d:f0:90:58:87:af:34:66:14:e6:f1:db:56:ea:
         68:30:f8:fe:c3:63:da:8b:0b:31:de:c2:08:f2:49:35:19:92:
         1f:66:0d:34:c5:11:1f:74:fb:dc:b5:41:17:dd:cc:7d:9b:c3:
         71:68:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:03 2025 by rpki-client