This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          12Ik1WP+wXlXmA60L59ZzxshMAk9r87hHdopBM1o5d4=
Subject key identifier:   D4:7A:93:F8:07:1F:EA:CC:E6:22:47:11:FC:45:CD:F6:22:14:DD:64
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       47E41EF344B92A73DE48C630BCE5A0948485EC1D
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Mon 15 Dec 2025 12:56:03 +0000
ROA not before:           Mon 15 Dec 2025 12:51:03 +0000
ROA not after:            Mon 14 Dec 2026 12:56:03 +0000
asID:                     268568
IP address blocks:        2804:532c:120::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e4:1e:f3:44:b9:2a:73:de:48:c6:30:bc:e5:a0:94:84:85:ec:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:03 2025 GMT
            Not After : Dec 14 12:56:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:95:95:d2:68:30:46:72:7b:2d:76:e0:d3:
                    ca:09:de:18:34:e0:ba:3c:e3:52:ff:da:c1:a4:9a:
                    f0:de:22:02:95:ee:0e:ac:d9:21:0e:de:87:b3:80:
                    07:97:04:1d:90:72:65:5c:c1:95:17:e1:98:35:1f:
                    5d:3d:4e:b7:41:b5:c5:17:90:c1:54:2d:14:bc:e7:
                    e4:a3:7f:71:fc:8a:bb:1d:20:04:66:0b:00:6f:07:
                    c4:7e:c2:f5:da:b7:73:8f:63:99:6b:b4:e3:48:71:
                    48:24:f2:fb:26:cc:8e:50:69:b8:96:5e:80:59:85:
                    0f:26:82:68:12:58:04:7e:04:26:d1:78:fe:24:3e:
                    55:a8:72:71:c0:18:00:52:89:16:32:a5:ea:32:cc:
                    0a:fe:44:e5:41:f7:f5:8e:ca:96:78:57:a1:f2:e3:
                    ea:cf:20:5f:77:2f:33:1e:2f:97:34:e5:18:cf:e7:
                    a1:1c:ae:b1:42:40:8e:78:bb:2b:52:1f:53:80:27:
                    e7:f1:80:26:8f:eb:6f:3b:d6:d1:ff:f3:3e:39:fe:
                    75:24:ee:d1:3f:2e:86:b6:91:a9:60:f1:b0:93:57:
                    b2:b3:8a:d5:f5:0c:75:48:de:ba:29:18:e1:b3:d9:
                    3d:df:8c:38:da:03:52:5c:9c:92:43:54:ad:c8:e0:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7A:93:F8:07:1F:EA:CC:E6:22:47:11:FC:45:CD:F6:22:14:DD:64
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:120::/45

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:59:a5:23:f0:0d:e2:83:dc:5b:69:dc:ec:47:ee:0a:9d:
         71:3a:06:cc:af:ba:8a:48:09:9d:26:0b:e8:0d:83:c6:d8:c4:
         76:20:ee:58:37:0d:3d:27:f8:89:5e:1d:fa:f2:b2:9e:fe:7a:
         95:ac:87:c9:91:3f:6f:36:e6:68:33:be:be:ca:a6:f4:37:fa:
         c0:a2:c1:f6:bc:c0:4d:09:b0:bc:07:25:c0:c2:39:2d:10:b6:
         14:de:74:51:90:d7:65:a5:77:30:6f:85:20:f7:53:2d:68:be:
         46:20:08:5e:c8:b7:04:29:17:dc:50:37:82:13:3f:76:5b:f5:
         24:43:88:2b:83:a0:d3:3f:ec:a0:eb:e2:53:a0:59:b7:11:cc:
         ab:1c:84:af:70:67:f0:09:79:47:d8:fe:45:a2:16:4d:13:30:
         fd:ae:be:9c:45:8a:88:9c:e7:d8:27:cb:40:07:2a:37:44:0b:
         d6:af:94:1b:31:0f:ca:3d:ec:4e:eb:df:97:7d:db:6e:f6:82:
         19:41:f8:fe:4e:ac:71:c6:e1:ea:06:16:a0:53:b5:df:b4:77:
         7b:75:49:71:f5:78:18:d0:44:6b:8d:40:be:fc:d4:42:29:1e:
         bb:df:59:84:35:71:03:a2:b7:71:4a:e2:a6:84:01:8d:35:03:
         80:9d:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----