This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/323830343a353436303a3a2f33322d3438203d3e20323632393037.roa
File:                     323830343a353436303a3a2f33322d3438203d3e20323632393037.roa (raw, json)
Hash identifier:          sN0gr/A4WtxyR9E00g/4K14YzJtVudvhnNtkcZu0mwE=
Subject key identifier:   A8:4A:94:46:66:55:C9:ED:5E:37:FF:47:5A:BA:AA:CB:AB:39:52:26
Certificate issuer:       /CN=0F78626D3BF8B07214C737318E62EE73094347B3
Certificate serial:       592A341F90B9CD88DCC7DEE7CEF6644877DFF2FC
Authority key identifier: 0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/323830343a353436303a3a2f33322d3438203d3e20323632393037.roa
Signing time:             Fri 19 Dec 2025 17:11:58 +0000
ROA not before:           Fri 19 Dec 2025 17:06:58 +0000
ROA not after:            Fri 18 Dec 2026 17:11:58 +0000
asID:                     262907
IP address blocks:        2804:5460::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl
                          rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2a:34:1f:90:b9:cd:88:dc:c7:de:e7:ce:f6:64:48:77:df:f2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F78626D3BF8B07214C737318E62EE73094347B3
        Validity
            Not Before: Dec 19 17:06:58 2025 GMT
            Not After : Dec 18 17:11:58 2026 GMT
        Subject: CN=A84A94466655C9ED5E37FF475ABAAACBAB395226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:83:06:4b:53:49:78:97:83:93:99:57:70:
                    54:6c:ed:3f:c6:48:ed:16:fc:2f:fa:f4:4f:6e:4b:
                    fb:e0:f0:af:a9:7b:70:2a:15:e9:d1:35:1a:41:fd:
                    94:17:6f:db:ab:89:8b:eb:7b:3c:c8:23:f4:f5:01:
                    16:3b:dd:65:ab:f1:1f:43:84:7b:78:21:11:45:58:
                    4f:4c:89:f4:02:02:9d:62:38:68:e5:71:24:fd:04:
                    2d:63:1a:e2:2f:48:57:73:34:62:17:b4:c1:b4:97:
                    cc:dd:60:90:66:7b:72:72:a9:f2:92:86:95:8a:6e:
                    27:ab:12:9f:91:41:be:cc:ac:87:61:03:fe:6b:b5:
                    6e:ad:a1:11:6f:93:e5:aa:6d:65:31:a8:21:06:ef:
                    e1:31:9d:c0:e8:2a:3b:56:f9:a9:db:49:a2:9a:f6:
                    f5:a4:60:19:6b:9e:53:64:18:72:aa:43:fc:8d:55:
                    d2:3f:75:f7:c3:0f:7a:f2:53:28:63:08:27:bb:71:
                    f3:fd:8c:3b:2b:d8:bf:98:b7:20:22:b6:f0:6f:cd:
                    84:ad:ce:b1:be:84:8a:e6:5b:1f:b8:7d:00:36:96:
                    e0:aa:03:39:01:d7:55:82:cc:aa:c8:b8:00:3c:21:
                    b0:0e:c0:b3:ca:12:79:de:66:7c:7e:63:39:db:a3:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4A:94:46:66:55:C9:ED:5E:37:FF:47:5A:BA:AA:CB:AB:39:52:26
            X509v3 Authority Key Identifier:
                keyid:0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/323830343a353436303a3a2f33322d3438203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5460::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:0a:59:93:4b:73:d5:b0:43:1f:3a:fb:62:2b:ed:65:e7:30:
         f5:70:a7:0a:57:b7:3d:7c:1e:bc:4e:c9:34:29:d9:cd:5a:39:
         f4:5e:51:41:e3:e2:71:08:41:dc:11:3f:45:d7:ce:48:89:c0:
         39:dd:8c:56:35:ce:de:2c:25:cf:46:24:41:3e:21:c5:cc:e0:
         88:08:90:36:f5:f6:35:a0:e2:57:de:ed:1a:04:65:d2:48:e5:
         86:86:51:80:b9:00:4f:76:b0:f3:c6:fa:f9:bb:f7:e5:17:4d:
         17:bd:5b:fd:63:99:2a:83:ad:9d:80:d8:e9:cc:65:9b:78:f2:
         bb:0e:ae:bd:71:3f:6d:a9:c6:a0:78:d6:eb:09:30:03:c1:dd:
         68:e7:10:9b:6a:7d:75:4b:9a:26:66:ac:5f:ec:ed:36:74:28:
         1c:03:0c:2d:e5:7e:d3:5b:a9:0b:97:96:e3:0e:84:f4:25:df:
         71:6d:0f:dd:b3:df:6a:46:73:f1:f7:c7:60:01:e0:61:55:56:
         62:85:5c:e7:c1:ef:d3:bf:52:24:a2:22:52:8d:2c:68:3a:ce:
         39:11:f8:e3:72:d8:0b:e4:13:9a:18:36:d6:de:97:60:60:9c:
         7f:71:07:80:8c:4c:c3:f7:0d:ec:3a:65:2c:39:62:95:ef:e5:
         69:05:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:04:50 2025 by rpki-client