This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa
File:                     323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa (raw, json)
Hash identifier:          lY1ZRByHZJsS22AcbO8O6dW4bKVuYZbrA7VTTL+6Occ=
Subject key identifier:   35:59:C8:72:1C:74:E6:81:ED:2D:F4:A3:30:B7:C2:69:57:D8:0B:31
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       03A34B0E1329DCE8CC7CD53896EE18AB40A0A6F3
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa
Signing time:             Tue 09 Dec 2025 20:01:56 +0000
ROA not before:           Tue 09 Dec 2025 19:56:56 +0000
ROA not after:            Tue 08 Dec 2026 20:01:56 +0000
asID:                     53035
IP address blocks:        2001:12f8:6::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a3:4b:0e:13:29:dc:e8:cc:7c:d5:38:96:ee:18:ab:40:a0:a6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Dec  9 19:56:56 2025 GMT
            Not After : Dec  8 20:01:56 2026 GMT
        Subject: CN=3559C8721C74E681ED2DF4A330B7C26957D80B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:57:c3:e8:ac:54:61:0e:a7:0b:ab:83:05:
                    1a:fd:2a:ef:c4:09:ba:78:42:94:77:62:2a:56:28:
                    a4:c5:c7:bb:67:d8:ed:94:f2:fc:76:4e:29:10:9c:
                    fd:2f:d3:01:15:05:6a:5e:fb:80:2f:9d:2d:bd:3f:
                    32:4f:1a:a0:db:fe:1e:91:53:6d:4c:7b:bd:13:86:
                    dd:8d:fb:72:01:14:f0:1c:99:36:da:3a:74:9e:47:
                    9b:f6:b5:30:f8:da:89:4a:aa:8b:0b:6e:f6:a0:94:
                    d7:58:e7:48:cd:62:19:70:73:a7:f1:23:90:8a:7f:
                    70:e6:9e:ef:1c:00:d3:2b:80:f3:00:8b:53:35:c8:
                    47:aa:e9:47:8e:31:67:4e:28:ec:ce:20:39:7a:6e:
                    7e:1e:ae:74:82:1c:07:e8:2f:a7:44:9e:ae:64:30:
                    bd:53:ad:c2:50:ff:c0:e9:f6:68:1f:a7:65:11:c4:
                    ac:a4:bb:a5:0c:29:0f:a6:c5:8c:34:2a:05:f9:64:
                    41:84:d2:e8:9d:f2:aa:22:16:52:ea:3c:7d:44:a8:
                    2a:57:92:4b:40:b3:03:d5:b8:da:28:64:c4:56:08:
                    a1:ae:ab:b4:f5:43:55:8a:2b:cc:1e:a6:91:70:32:
                    5f:77:9e:ce:40:c2:0a:06:15:19:20:1d:ad:e3:8a:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:59:C8:72:1C:74:E6:81:ED:2D:F4:A3:30:B7:C2:69:57:D8:0B:31
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a363a3a2f34372d3438203d3e203533303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f8:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:04:9b:42:a7:9e:f4:f8:2c:d4:cd:a7:d0:6b:25:d2:e2:87:
         a1:4c:7a:07:92:3b:cb:ba:0b:09:2f:bb:f8:d6:2f:e2:b4:75:
         5a:4c:c1:13:f6:e8:b4:39:39:eb:51:05:56:d5:32:19:96:38:
         0a:4f:02:a4:5a:06:bc:3d:6b:eb:35:21:f9:67:05:2f:ba:7e:
         61:02:f4:13:ac:1d:fd:41:b1:6b:b1:e2:cd:4b:e3:5d:ee:fa:
         b3:b3:11:a7:34:be:f8:be:68:02:8a:67:f8:66:e6:c6:db:70:
         cf:ee:5f:3a:b8:98:b7:09:2b:00:a2:5e:44:da:92:10:f8:a2:
         f6:df:b1:4b:c2:1f:64:3e:4a:5d:22:bc:72:4c:3b:1e:29:6c:
         e6:c6:e8:81:18:1e:83:5b:34:fe:3e:c9:77:20:89:d8:e2:4e:
         31:9f:69:04:7e:f9:03:8c:47:d2:52:e5:29:a7:fe:fc:65:e9:
         cc:7b:46:f1:78:04:9c:7b:a6:b2:3a:22:fa:69:fe:b8:0b:b2:
         85:1e:4d:01:25:71:e5:73:e6:2e:43:55:78:6a:22:c6:0f:aa:
         17:d7:8f:ee:c2:e5:66:de:96:ea:e0:c8:3c:17:2e:52:bf:cd:
         32:b7:36:d5:26:df:d1:5c:5b:31:49:11:09:1c:0c:a0:30:09:
         5e:4f:c3:27
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUA6NLDhMp3OjMfNU4lu4Yq0CgpvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTEyMDkxOTU2NTZaFw0yNjEyMDgyMDAxNTZaMDMxMTAvBgNV
BAMTKDM1NTlDODcyMUM3NEU2ODFFRDJERjRBMzMwQjdDMjY5NTdEODBCMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuylfD6KxUYQ6nC6uDBRr9Ku/E
Cbp4QpR3YipWKKTFx7tn2O2U8vx2TikQnP0v0wEVBWpe+4AvnS29PzJPGqDb/h6R
U21Me70Tht2N+3IBFPAcmTbaOnSeR5v2tTD42olKqosLbvaglNdY50jNYhlwc6fx
I5CKf3Dmnu8cANMrgPMAi1M1yEeq6UeOMWdOKOzOIDl6bn4ernSCHAfoL6dEnq5k
ML1TrcJQ/8Dp9mgfp2URxKyku6UMKQ+mxYw0KgX5ZEGE0uid8qoiFlLqPH1EqCpX
kktAswPVuNooZMRWCKGuq7T1Q1WKK8weppFwMl93ns5AwgoGFRkgHa3jinZrAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUNVnIchx05oHtLfSjMLfCaVfYCzEwHwYDVR0j
BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx
Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2
OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv
MzIzMDMwMzEzYTMxMzI2NjM4M2EzNjNhM2EyZjM0MzcyZDM0MzgyMDNkM2UyMDM1
MzMzMDMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwEgARL4AAYwDQYJKoZIhvcNAQELBQADggEBAA4E
m0KnnvT4LNTNp9BrJdLih6FMegeSO8u6Cwkvu/jWL+K0dVpMwRP26LQ5OetRBVbV
MhmWOApPAqRaBrw9a+s1IflnBS+6fmEC9BOsHf1BsWux4s1L413u+rOzEac0vvi+
aAKKZ/hm5sbbcM/uXzq4mLcJKwCiXkTakhD4ovbfsUvCH2Q+Sl0ivHJMOx4pbObG
6IEYHoNbNP4+yXcgidjiTjGfaQR++QOMR9JS5Smn/vxl6cx7RvF4BJx7prI6Ivpp
/rgLsoUeTQElceVz5i5DVXhqIsYPqhfXj+7C5WbelurgyDwXLlK/zTK3NtUm39Fc
WzFJEQkcDKAwCV5Pwyc=
-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:03 2025 by rpki-client