This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/323830343a366361383a3a2f33322d313238203d3e20323730343833.roa
File:                     323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (raw, json)
Hash identifier:          6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=
Subject key identifier:   B8:52:85:9F:68:42:8A:48:99:53:49:23:B0:9E:50:F7:9D:F7:1A:67
Certificate issuer:       /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial:       74F1209BB66AAC33647F24D4DDF5E6307C908821
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/323830343a366361383a3a2f33322d313238203d3e20323730343833.roa
Signing time:             Wed 10 Dec 2025 20:14:55 +0000
ROA not before:           Wed 10 Dec 2025 20:09:55 +0000
ROA not after:            Wed 09 Dec 2026 20:14:55 +0000
asID:                     270483
IP address blocks:        2804:6ca8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 16:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f1:20:9b:b6:6a:ac:33:64:7f:24:d4:dd:f5:e6:30:7c:90:88:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
        Validity
            Not Before: Dec 10 20:09:55 2025 GMT
            Not After : Dec  9 20:14:55 2026 GMT
        Subject: CN=B852859F68428A4899534923B09E50F79DF71A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:ec:14:a0:a5:9c:65:af:a5:98:6e:07:55:
                    5d:d4:96:f0:37:b9:e2:64:ad:46:ce:1a:f6:88:23:
                    3d:22:83:df:94:64:68:61:8b:95:93:d4:26:a6:89:
                    d1:a4:fd:7a:e3:b8:e7:87:59:d4:9f:60:ca:09:a4:
                    f1:5f:25:53:be:51:77:c5:d6:18:d0:71:70:34:c7:
                    18:3e:bc:32:16:b1:7a:cf:85:9f:44:ac:34:2f:99:
                    9a:2a:bc:f5:0b:96:aa:35:38:53:ea:f1:2c:e7:46:
                    d7:6c:fc:c5:72:a3:b0:86:1e:02:72:98:d1:51:e0:
                    8f:42:8b:d8:84:2d:56:3d:72:fb:e5:fc:e5:d1:82:
                    58:f6:3a:d7:43:bd:7d:2c:a0:e6:42:d6:75:60:5e:
                    83:bc:2e:5c:a0:01:7c:42:5f:24:fd:dc:45:69:30:
                    67:88:31:1d:b4:f5:78:09:f2:f7:01:9b:c1:a7:d2:
                    7b:f7:77:78:78:5a:2f:7c:79:1a:4a:66:fb:1f:ff:
                    70:ac:68:91:bc:9a:ea:10:2a:81:d3:97:88:92:a7:
                    0e:b4:52:22:c4:92:99:d0:df:3b:11:bc:12:33:95:
                    cb:3c:d6:a4:8d:6d:50:bf:f3:f3:9c:b5:5d:b3:43:
                    84:ff:ed:e5:66:e6:8a:22:2c:24:3c:26:b5:a1:20:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:52:85:9F:68:42:8A:48:99:53:49:23:B0:9E:50:F7:9D:F7:1A:67
            X509v3 Authority Key Identifier:
                keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/323830343a366361383a3a2f33322d313238203d3e20323730343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ca8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:fc:b4:e2:1c:bc:a3:5f:35:89:73:f0:86:0e:ec:68:a3:fa:
         fc:6e:b5:07:70:83:1a:f5:cf:24:ad:82:68:55:e2:44:55:de:
         bf:d8:2b:ac:43:54:ce:5d:69:49:dc:ad:65:f4:f8:2e:d0:49:
         83:18:90:7a:aa:01:c0:a2:89:f2:fd:cd:3a:e6:5a:30:af:63:
         3e:b7:f7:ac:25:fb:f5:a8:81:c0:66:2f:a5:e3:2b:e4:59:a7:
         28:4b:c1:f4:65:2d:f0:2b:fe:f7:5e:11:b9:ca:62:3c:bd:a1:
         09:f0:21:0e:7c:b0:ae:33:d8:80:38:f3:bb:d9:9c:52:42:c4:
         97:7b:6b:87:5f:35:d8:12:ba:5f:87:f2:83:4e:03:36:cf:23:
         db:80:00:fd:8a:e2:31:9c:44:de:c9:ac:46:8e:16:c9:90:48:
         87:14:a3:c3:80:9e:b8:25:8f:0f:28:ab:13:d1:b2:24:3f:28:
         3d:c9:25:a5:0f:03:de:62:cf:4c:2e:3d:8b:8d:e3:95:4c:f2:
         f9:cf:59:b1:d4:74:e1:70:58:18:91:bd:47:88:da:54:7f:a3:
         a9:b0:16:50:f9:fe:f9:2b:de:a0:31:72:d8:20:8a:93:cf:f0:
         eb:9a:07:89:ba:50:1d:30:36:6a:64:c6:5f:d6:8c:23:39:d3:
         e9:16:61:7a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUdPEgm7ZqrDNkfyTU3fXmMHyQiCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGODgzOTVFOTk3OUVGRkMwMzM1MTMwN0Q4Q0QwRTU0
NTU0QkJEQjAeFw0yNTEyMTAyMDA5NTVaFw0yNjEyMDkyMDE0NTVaMDMxMTAvBgNV
BAMTKEI4NTI4NTlGNjg0MjhBNDg5OTUzNDkyM0IwOUU1MEY3OURGNzFBNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2z+wUoKWcZa+lmG4HVV3UlvA3
ueJkrUbOGvaIIz0ig9+UZGhhi5WT1CamidGk/XrjuOeHWdSfYMoJpPFfJVO+UXfF
1hjQcXA0xxg+vDIWsXrPhZ9ErDQvmZoqvPULlqo1OFPq8SznRtds/MVyo7CGHgJy
mNFR4I9Ci9iELVY9cvvl/OXRglj2OtdDvX0soOZC1nVgXoO8LlygAXxCXyT93EVp
MGeIMR209XgJ8vcBm8Gn0nv3d3h4Wi98eRpKZvsf/3CsaJG8muoQKoHTl4iSpw60
UiLEkpnQ3zsRvBIzlcs81qSNbVC/8/OctV2zQ4T/7eVm5ooiLCQ8JrWhIKwtAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUuFKFn2hCikiZU0kjsJ5Q9533GmcwHwYDVR0j
BBgwFoAUyviDlemXnv/AM1EwfYzQ5UVUu9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0
OTgvMC9DQUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjg4Mzk1RTk5NzlFRkZD
MDMzNTEzMDdEOENEMEU1NDU1NEJCREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JXb1BVMUhoWHVFblA1WjZEMktZVTFuelBvS05kc3lUdmRqTWNoQTVWdDk4LzAv
MzIzODMwMzQzYTM2NjM2MTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGyoMA0GCSqGSIb3DQEBCwUAA4IBAQCg/LTi
HLyjXzWJc/CGDuxoo/r8brUHcIMa9c8krYJoVeJEVd6/2CusQ1TOXWlJ3K1l9Pgu
0EmDGJB6qgHAoony/c065lowr2M+t/esJfv1qIHAZi+l4yvkWacoS8H0ZS3wK/73
XhG5ymI8vaEJ8CEOfLCuM9iAOPO72ZxSQsSXe2uHXzXYErpfh/KDTgM2zyPbgAD9
iuIxnETeyaxGjhbJkEiHFKPDgJ64JY8PKKsT0bIkPyg9ySWlDwPeYs9MLj2LjeOV
TPL5z1mx1HThcFgYkb1HiNpUf6OpsBZQ+f75K96gMXLYIIqTz/DrmgeJulAdMDZq
ZMZf1owjOdPpFmF6
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:54:38 2025 by rpki-client