This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383032303a3a2f34342d3434203d3e20323634343739.roa
File:                     323830343a323033633a383032303a3a2f34342d3434203d3e20323634343739.roa (raw, json)
Hash identifier:          lLa9yrUoZZW791Up9zoqkY4PL6EG5dVRZCLcUz+5CXM=
Subject key identifier:   9C:1A:30:C1:4D:60:3C:6C:24:76:0F:D0:C9:83:9C:97:AE:6E:AA:C9
Certificate issuer:       /CN=B314917F1BC8CD321336C2D44EF8E783D4576716
Certificate serial:       66074B50630F623990AA91D0645C6546E38322EE
Authority key identifier: B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383032303a3a2f34342d3434203d3e20323634343739.roa
Signing time:             Fri 12 Dec 2025 18:08:20 +0000
ROA not before:           Fri 12 Dec 2025 18:03:20 +0000
ROA not after:            Fri 11 Dec 2026 18:08:20 +0000
asID:                     264479
IP address blocks:        2804:203c:8020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:07:4b:50:63:0f:62:39:90:aa:91:d0:64:5c:65:46:e3:83:22:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B314917F1BC8CD321336C2D44EF8E783D4576716
        Validity
            Not Before: Dec 12 18:03:20 2025 GMT
            Not After : Dec 11 18:08:20 2026 GMT
        Subject: CN=9C1A30C14D603C6C24760FD0C9839C97AE6EAAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:b0:45:0c:75:dd:8c:7e:09:1f:c8:e9:91:
                    2b:3e:b6:be:23:03:95:5e:45:7e:f5:d8:1e:91:2d:
                    3e:f7:a6:50:1a:3f:25:c3:0a:3f:11:39:96:fb:2c:
                    1b:7d:ac:4e:08:72:6d:fe:26:b3:7e:f2:5b:a6:ca:
                    3e:0e:72:f4:f9:4f:32:13:cb:ff:2e:f7:12:af:96:
                    3e:0d:be:4c:33:96:1b:0b:a8:e2:cc:14:2e:ba:fc:
                    54:47:0b:23:6d:6a:36:72:47:c3:f8:e4:c4:58:08:
                    aa:59:36:07:37:62:86:fb:85:bd:19:31:0b:ce:7e:
                    e8:19:8c:3c:c5:03:be:9e:2e:74:43:b9:6e:68:dc:
                    8a:46:fc:71:a6:84:e1:39:d5:99:f1:bd:44:b5:c2:
                    2e:ec:2e:06:87:ac:88:86:d0:73:0c:43:60:cb:07:
                    1d:d8:28:c4:7d:21:01:79:3e:d5:79:6d:53:8e:fc:
                    43:da:fe:1c:cd:5e:47:0b:d0:f7:43:d4:63:f4:ae:
                    0e:b9:5e:f8:ee:49:c9:c4:f0:ea:b4:7e:51:27:31:
                    74:68:e5:30:fa:c6:6c:b7:10:64:c5:f3:47:38:1f:
                    98:65:af:f0:2c:1f:b6:4f:ed:20:53:15:85:9e:7d:
                    31:1b:51:22:81:37:8e:70:98:58:76:d0:32:f3:72:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1A:30:C1:4D:60:3C:6C:24:76:0F:D0:C9:83:9C:97:AE:6E:AA:C9
            X509v3 Authority Key Identifier:
                keyid:B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a383032303a3a2f34342d3434203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:203c:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:18:0c:ec:c8:ae:49:88:a5:2c:f5:0a:da:19:11:38:45:85:
         49:93:b8:89:46:04:62:f7:06:dc:0c:b9:85:55:07:3b:af:9c:
         99:88:39:b4:68:41:41:b9:c8:6f:c9:1d:b7:c9:84:37:bd:2a:
         6d:ac:5f:39:1e:93:80:e7:08:5d:bc:1b:01:8d:31:00:11:71:
         64:c2:20:38:8f:c3:12:e4:45:70:88:c6:eb:18:5f:6d:2f:43:
         cf:dd:94:3d:ba:c0:b8:88:67:46:5d:19:e6:fa:ec:98:a2:ea:
         df:8b:d7:3d:5d:cf:e6:9e:19:51:06:cc:b7:d2:c7:6e:9c:21:
         cd:5c:f7:65:44:65:d5:41:a0:ca:3c:d2:e7:1a:d3:63:f1:68:
         b0:5e:81:88:cd:07:d0:12:9f:cc:db:e8:1d:1b:49:45:5e:00:
         3c:d3:17:49:1b:46:14:f4:12:67:1b:26:23:4c:0a:79:5f:d3:
         0f:e6:7d:bb:e6:b3:48:c8:98:a9:03:0c:2a:6c:14:7f:e6:f4:
         a0:1e:05:71:71:12:71:75:71:6a:cd:a1:69:f8:26:2d:48:9d:
         c5:0d:5a:0f:8c:e7:35:7d:35:3e:bc:85:e8:88:c5:24:6e:8d:
         5f:61:d3:8a:2a:b9:cb:d3:0f:8e:f5:c1:61:b6:be:bb:66:17:
         72:89:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 16:03:33 2025 by rpki-client