This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a3a2f33322d3438203d3e20323636323735.roa
File:                     323830343a333533383a3a2f33322d3438203d3e20323636323735.roa (raw, json)
Hash identifier:          msMEdT6Y+Tdp1QnQ2JvCcEWiWMQX8xTadRVZg4lK7tM=
Subject key identifier:   91:FB:9D:E0:83:04:45:3E:E2:0A:2A:17:A8:20:7D:F4:98:BC:5F:3E
Certificate issuer:       /CN=BD9C7186074BC751504044F8DFB36FDC273791F7
Certificate serial:       0DF6783BE9D9B59BF7C4F6CF279B09A5C0553C24
Authority key identifier: BD:9C:71:86:07:4B:C7:51:50:40:44:F8:DF:B3:6F:DC:27:37:91:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD9C7186074BC751504044F8DFB36FDC273791F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a3a2f33322d3438203d3e20323636323735.roa
Signing time:             Mon 15 Dec 2025 20:21:17 +0000
ROA not before:           Mon 15 Dec 2025 20:16:17 +0000
ROA not after:            Mon 14 Dec 2026 20:21:17 +0000
asID:                     266275
IP address blocks:        2804:3538::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/BD9C7186074BC751504044F8DFB36FDC273791F7.crl
                          rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/BD9C7186074BC751504044F8DFB36FDC273791F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD9C7186074BC751504044F8DFB36FDC273791F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 15:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f6:78:3b:e9:d9:b5:9b:f7:c4:f6:cf:27:9b:09:a5:c0:55:3c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9C7186074BC751504044F8DFB36FDC273791F7
        Validity
            Not Before: Dec 15 20:16:17 2025 GMT
            Not After : Dec 14 20:21:17 2026 GMT
        Subject: CN=91FB9DE08304453EE20A2A17A8207DF498BC5F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:a2:1e:5d:c4:f9:a8:9d:ac:54:e7:5d:bd:
                    0c:2d:ca:d2:6b:9e:8b:f6:5e:95:a1:9a:49:b6:26:
                    0a:ad:11:7a:92:93:71:11:53:29:5c:c6:fa:f5:11:
                    3e:e2:10:5e:92:62:4f:a0:ed:3f:46:d9:44:dd:0f:
                    ee:a8:b1:b7:29:15:9d:98:f5:3f:2d:60:cf:14:68:
                    13:2e:2c:ca:2e:86:d0:59:50:66:50:c7:8c:58:e7:
                    fd:ec:5e:38:44:d5:10:bb:31:53:32:c7:77:62:a2:
                    63:8c:dc:6b:18:57:22:a6:60:ed:5f:d3:3b:e3:19:
                    2b:21:8b:70:25:01:3d:8a:6d:26:90:94:8f:f0:d1:
                    7c:9c:7d:0f:88:0e:24:c4:ad:5b:9b:e0:b8:65:81:
                    56:ce:04:6f:a1:e5:46:3e:66:5b:e9:34:5b:47:66:
                    66:f9:d9:a3:1b:b0:5c:a4:f4:d2:05:02:dc:06:45:
                    99:d4:48:3f:e6:3a:f9:c7:75:95:f8:45:75:03:bb:
                    c1:f7:fe:8e:ac:38:cf:71:e7:25:d7:a7:72:e4:ca:
                    dd:23:fe:a2:04:e7:dd:54:26:fd:cf:d0:3f:07:34:
                    f8:f6:6e:a5:58:75:d2:81:27:6f:01:d4:e0:9e:db:
                    4f:a1:2f:3f:5a:bf:3a:28:29:cc:e1:b3:61:d8:4e:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FB:9D:E0:83:04:45:3E:E2:0A:2A:17:A8:20:7D:F4:98:BC:5F:3E
            X509v3 Authority Key Identifier:
                keyid:BD:9C:71:86:07:4B:C7:51:50:40:44:F8:DF:B3:6F:DC:27:37:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/BD9C7186074BC751504044F8DFB36FDC273791F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD9C7186074BC751504044F8DFB36FDC273791F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a3a2f33322d3438203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3538::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:df:98:e5:7a:d8:67:3a:6f:67:d4:36:25:33:2c:90:3b:ad:
         10:89:5e:f6:2b:a6:1c:50:ed:b3:f8:b6:27:65:37:12:b9:96:
         73:79:05:71:13:16:70:f2:40:6e:57:33:5d:7f:81:e5:62:de:
         48:80:51:d5:6b:31:b5:d6:0e:0c:69:c8:97:58:f1:75:ca:24:
         77:f0:34:28:f6:72:6f:7f:a0:a0:4a:ff:56:4b:7a:74:aa:42:
         37:f5:c8:3a:81:bd:23:ff:b8:4f:a2:77:7e:19:79:d4:91:11:
         f4:b1:33:37:59:1d:80:d3:7c:bb:77:a9:15:22:fb:42:1e:a2:
         9a:8f:f7:ee:f1:ad:0c:46:10:6e:63:fc:2d:96:cc:76:52:a4:
         6d:3e:b5:02:13:f7:94:f1:ad:cc:55:12:b7:b0:71:4c:c1:a5:
         8d:9e:b1:f8:0c:85:2a:15:14:e6:39:78:d4:ac:0f:39:dc:9d:
         d7:13:44:8f:93:5a:b1:a5:5a:9f:e1:a0:98:61:2c:5d:54:f6:
         8c:1d:c2:e9:26:3d:2c:c5:87:3a:af:ca:67:e3:5f:09:c5:8a:
         cf:83:54:9c:d3:92:4e:06:02:06:42:9a:6b:24:24:b7:2e:3d:
         b7:3e:cd:76:3e:2f:ac:17:5b:48:63:04:ce:af:3f:fe:3c:28:
         a5:31:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:08:54 2025 by rpki-client