This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa
File:                     323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa (raw, json)
Hash identifier:          K0X4Vx5nGKcAUUAsT3isedZfgyWOqzS22YvhILMJaLo=
Subject key identifier:   BD:30:E4:EC:A7:06:3C:DB:31:E2:85:D0:F7:85:B3:39:9E:AC:03:BC
Certificate issuer:       /CN=B314917F1BC8CD321336C2D44EF8E783D4576716
Certificate serial:       6E43863298236631FCE3CE1ABDAD12EEE18385A5
Authority key identifier: B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa
Signing time:             Fri 12 Dec 2025 18:08:15 +0000
ROA not before:           Fri 12 Dec 2025 18:03:15 +0000
ROA not after:            Fri 11 Dec 2026 18:08:15 +0000
asID:                     264479
IP address blocks:        2804:203c:8000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Dec 2025 20:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:43:86:32:98:23:66:31:fc:e3:ce:1a:bd:ad:12:ee:e1:83:85:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B314917F1BC8CD321336C2D44EF8E783D4576716
        Validity
            Not Before: Dec 12 18:03:15 2025 GMT
            Not After : Dec 11 18:08:15 2026 GMT
        Subject: CN=BD30E4ECA7063CDB31E285D0F785B3399EAC03BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:6a:c8:0b:36:cc:a0:3b:5f:d9:c2:13:3c:
                    ce:52:9f:15:42:09:ed:7d:47:30:ca:78:22:55:f2:
                    47:5f:3f:b4:f3:d7:cc:6e:78:3e:5d:7c:65:cd:b9:
                    62:18:ee:c1:bf:6c:59:fe:10:81:1c:71:43:1a:25:
                    77:5d:47:71:16:c5:95:cf:31:8c:b0:33:2b:31:0b:
                    6f:4c:36:4f:26:73:74:53:a8:c1:a3:33:a7:9c:cf:
                    fd:12:78:7a:7b:59:77:8a:f2:b6:ef:3f:61:ca:f8:
                    85:9c:4e:e3:dd:17:3b:9b:63:08:f3:dc:bb:14:95:
                    a6:aa:d6:fc:3c:76:3a:13:a2:a6:6b:89:32:a6:de:
                    6d:9c:f4:44:3d:18:e8:d3:0a:77:98:e3:c3:6a:3e:
                    ee:f4:11:11:e5:0b:25:76:bb:61:52:11:d7:b8:c7:
                    c1:ea:8f:55:61:47:0f:8d:26:91:bd:5a:91:9e:ad:
                    9a:98:04:b6:a2:76:2d:07:1f:34:45:03:ad:23:58:
                    63:7c:47:1b:29:92:3d:5c:11:57:98:3b:e1:90:9b:
                    c2:2c:f5:68:55:f1:d1:8d:9b:fa:c6:e0:34:7a:7d:
                    0b:80:41:46:32:c2:37:61:46:d7:42:90:22:8c:b4:
                    a9:47:18:6a:8f:8b:c3:ca:f2:51:75:37:f3:21:96:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:30:E4:EC:A7:06:3C:DB:31:E2:85:D0:F7:85:B3:39:9E:AC:03:BC
            X509v3 Authority Key Identifier:
                keyid:B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383030303a3a2f34342d3434203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:203c:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:6c:80:3f:b6:d6:79:87:cb:ed:62:3f:f4:af:c3:03:5a:
         78:17:e8:78:ed:2d:bb:f6:88:06:38:87:d1:22:d8:e4:a8:99:
         95:22:80:40:53:46:99:90:19:9b:a0:dc:b4:ad:c4:79:ef:a6:
         ed:af:10:44:0a:c8:e4:56:48:77:71:b9:fb:6a:d4:b5:a0:5d:
         3b:e2:86:ac:99:50:35:ca:c6:b6:21:8b:aa:85:c8:aa:89:21:
         87:a0:ef:34:3e:19:4d:b0:f8:8c:07:18:e8:2e:f2:2e:3d:44:
         2c:1c:14:78:4e:ff:35:18:11:80:f9:99:10:b8:bc:fe:06:6d:
         b5:78:21:20:44:a2:58:90:2f:ae:d4:0a:cf:04:75:9c:0f:37:
         65:95:bb:f8:21:2b:ff:c3:46:c6:d5:c9:de:a2:f9:a5:23:23:
         33:9d:5a:47:3d:18:d4:e5:7d:6c:de:f6:68:37:ee:e9:9b:db:
         43:ac:23:3b:c1:ab:55:ba:a5:e5:4b:c7:00:cc:7b:ca:47:78:
         e2:d9:da:08:cd:27:c4:79:2e:6e:1d:70:80:96:12:cd:4d:76:
         ed:8c:0b:18:3d:4e:2d:c2:a6:bb:21:78:57:45:1c:8f:7e:f6:
         6e:88:32:07:be:f6:89:06:a0:21:75:b1:99:5a:11:fb:00:5d:
         e1:0c:19:bb
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUbkOGMpgjZjH8484ava0S7uGDhaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjMxNDkxN0YxQkM4Q0QzMjEzMzZDMkQ0NEVGOEU3ODNE
NDU3NjcxNjAeFw0yNTEyMTIxODAzMTVaFw0yNjEyMTExODA4MTVaMDMxMTAvBgNV
BAMTKEJEMzBFNEVDQTcwNjNDREIzMUUyODVEMEY3ODVCMzM5OUVBQzAzQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSmrICzbMoDtf2cITPM5SnxVC
Ce19RzDKeCJV8kdfP7Tz18xueD5dfGXNuWIY7sG/bFn+EIEccUMaJXddR3EWxZXP
MYywMysxC29MNk8mc3RTqMGjM6ecz/0SeHp7WXeK8rbvP2HK+IWcTuPdFzubYwjz
3LsUlaaq1vw8djoToqZriTKm3m2c9EQ9GOjTCneY48NqPu70ERHlCyV2u2FSEde4
x8Hqj1VhRw+NJpG9WpGerZqYBLaidi0HHzRFA60jWGN8Rxspkj1cEVeYO+GQm8Is
9WhV8dGNm/rG4DR6fQuAQUYywjdhRtdCkCKMtKlHGGqPi8PK8lF1N/MhlnGtAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUvTDk7KcGPNsx4oXQ94WzOZ6sA7wwHwYDVR0j
BBgwFoAUsxSRfxvIzTITNsLUTvjng9RXZxYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMC9CMzE0OTE3RjFCQzhDRDMyMTMzNkMyRDQ0RUY4RTc4M0Q0NTc2NzE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzMTQ5MTdGMUJDOENEMzIx
MzM2QzJENDRFRjhFNzgzRDQ1NzY3MTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzAv
MzIzODMwMzQzYTMyMzAzMzYzM2EzODMwMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzNDM0MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEIDyAADANBgkqhkiG9w0BAQsF
AAOCAQEAN7hsgD+21nmHy+1iP/SvwwNaeBfoeO0tu/aIBjiH0SLY5KiZlSKAQFNG
mZAZm6DctK3Eee+m7a8QRArI5FZId3G5+2rUtaBdO+KGrJlQNcrGtiGLqoXIqokh
h6DvND4ZTbD4jAcY6C7yLj1ELBwUeE7/NRgRgPmZELi8/gZttXghIESiWJAvrtQK
zwR1nA83ZZW7+CEr/8NGxtXJ3qL5pSMjM51aRz0Y1OV9bN72aDfu6ZvbQ6wjO8Gr
Vbql5UvHAMx7ykd44tnaCM0nxHkubh1wgJYSzU127YwLGD1OLcKmuyF4V0Ucj372
bogyB772iQagIXWxmVoR+wBd4QwZuw==
-----END CERTIFICATE-----
Generated at Mon Dec 15 23:04:58 2025 by rpki-client