This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DK2dzrSu1Ywb9nzXN7Na6vZnhTNYcCXswDprgAmACxK/0/323830343a393735303a3a2f33322d3438203d3e20323735363135.roa
File:                     323830343a393735303a3a2f33322d3438203d3e20323735363135.roa (raw, json)
Hash identifier:          Zu1YvMqRshwtVVinF8HPHlc2Ha1is5/5M4Nmpsv3yYE=
Subject key identifier:   2D:03:B7:73:98:1E:B6:D7:77:73:65:01:BF:FF:64:CC:AD:68:FF:1D
Certificate issuer:       /CN=051BEA726B0FBACAFB055210F19DEA8B8AFDAFA8
Certificate serial:       731C3ACCBD77B07874E5FF6FC4B5168D5F28F603
Authority key identifier: 05:1B:EA:72:6B:0F:BA:CA:FB:05:52:10:F1:9D:EA:8B:8A:FD:AF:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/051BEA726B0FBACAFB055210F19DEA8B8AFDAFA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DK2dzrSu1Ywb9nzXN7Na6vZnhTNYcCXswDprgAmACxK/0/323830343a393735303a3a2f33322d3438203d3e20323735363135.roa
Signing time:             Tue 23 Dec 2025 21:07:44 +0000
ROA not before:           Tue 23 Dec 2025 21:02:44 +0000
ROA not after:            Tue 22 Dec 2026 21:07:44 +0000
asID:                     275615
IP address blocks:        2804:9750::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DK2dzrSu1Ywb9nzXN7Na6vZnhTNYcCXswDprgAmACxK/0/051BEA726B0FBACAFB055210F19DEA8B8AFDAFA8.crl
                          rsync://rpki-repo.registro.br/repo/9DK2dzrSu1Ywb9nzXN7Na6vZnhTNYcCXswDprgAmACxK/0/051BEA726B0FBACAFB055210F19DEA8B8AFDAFA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/051BEA726B0FBACAFB055210F19DEA8B8AFDAFA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 16:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1c:3a:cc:bd:77:b0:78:74:e5:ff:6f:c4:b5:16:8d:5f:28:f6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051BEA726B0FBACAFB055210F19DEA8B8AFDAFA8
        Validity
            Not Before: Dec 23 21:02:44 2025 GMT
            Not After : Dec 22 21:07:44 2026 GMT
        Subject: CN=2D03B773981EB6D777736501BFFF64CCAD68FF1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:14:2b:71:6b:ce:83:9a:a8:bf:2b:e4:06:6f:
                    75:32:4c:46:b0:35:06:a4:69:cd:e0:5a:95:fa:d1:
                    49:27:77:9d:6c:55:56:02:5b:8c:70:15:e3:d5:dc:
                    92:32:01:62:04:47:b1:ea:76:d5:72:f3:b3:eb:0b:
                    43:c5:54:6a:a9:7c:98:2b:8d:06:e0:9a:51:53:d4:
                    3f:69:3b:37:b1:76:ff:b9:3a:75:b2:e4:6b:42:c4:
                    2e:c7:11:35:08:ca:e2:60:b2:d0:4b:18:9a:1a:f4:
                    36:0a:82:cc:a4:5e:ef:04:5c:8d:a2:4b:91:05:6a:
                    79:7c:cd:42:ac:fc:85:2f:0f:67:b4:5b:2e:f2:ac:
                    e5:26:5e:e5:4f:3d:73:9d:d5:2d:ae:50:a7:db:04:
                    f9:a7:13:36:33:7e:56:1d:d7:f9:c8:c7:67:3d:45:
                    bd:45:6e:c8:c7:29:aa:4c:c8:0c:2d:e5:ab:e4:15:
                    56:ff:8f:8e:f6:b7:9a:0a:c5:04:82:21:25:19:33:
                    cd:86:fc:11:2b:d1:ce:d4:d5:3a:60:a2:cd:03:ed:
                    40:ed:f5:9e:dc:e4:6a:ac:39:47:08:7e:01:7e:58:
                    0d:18:af:99:74:1e:f1:51:a2:6d:99:dd:a0:6f:8d:
                    94:55:66:91:09:4a:cf:65:dc:b6:04:4b:46:37:82:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:03:B7:73:98:1E:B6:D7:77:73:65:01:BF:FF:64:CC:AD:68:FF:1D
            X509v3 Authority Key Identifier:
                keyid:05:1B:EA:72:6B:0F:BA:CA:FB:05:52:10:F1:9D:EA:8B:8A:FD:AF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DK2dzrSu1Ywb9nzXN7Na6vZnhTNYcCXswDprgAmACxK/0/051BEA726B0FBACAFB055210F19DEA8B8AFDAFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/051BEA726B0FBACAFB055210F19DEA8B8AFDAFA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DK2dzrSu1Ywb9nzXN7Na6vZnhTNYcCXswDprgAmACxK/0/323830343a393735303a3a2f33322d3438203d3e20323735363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9750::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:bf:93:21:2f:61:56:b4:dd:d3:81:6c:94:42:06:9c:cb:f8:
         26:63:50:16:af:93:53:11:13:4a:9c:7b:cc:a1:fc:0c:73:a0:
         a2:b2:1a:6e:47:7d:d1:16:06:6e:2a:f7:69:67:83:d0:c6:8d:
         5b:18:f7:2d:7c:b1:fd:f3:7a:92:f7:b9:8b:5d:97:51:a7:bc:
         11:cb:df:04:a1:49:38:8c:2f:35:32:f9:7a:1c:5e:35:99:60:
         58:57:87:7b:76:1d:24:bf:9e:c4:88:01:1a:7c:65:46:ad:75:
         45:d9:dd:d4:92:ad:f5:4f:66:fc:5e:9e:a3:bb:39:df:cf:75:
         88:94:85:09:b9:5a:63:57:1c:5f:97:df:87:51:ee:d4:dd:df:
         9b:87:9a:0c:2f:00:21:b6:e7:cc:14:6c:98:96:e5:ce:2c:7a:
         e3:65:0a:ed:24:4e:c5:87:f4:ca:d2:b8:03:46:5d:e4:29:1b:
         6b:c5:8a:a6:30:6d:10:4b:1a:01:06:7a:f2:f7:e4:28:c8:9f:
         98:53:cc:b3:fe:c8:a3:b4:43:d2:ea:dc:30:4a:a4:a6:00:e9:
         a9:cc:6d:bd:18:60:67:29:77:cd:fc:f9:15:fd:19:bb:64:72:
         05:6c:da:72:25:c0:6e:26:84:65:e9:c5:ea:26:97:09:44:98:
         6a:1b:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:03:09 2025 by rpki-client