This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          WLXuEJGr1ugqpus0jOpfg6CVCKLuVSt4kuNKv1Ya9gU=
Subject key identifier:   B6:6E:EB:39:D2:D4:C7:30:19:1B:A5:80:1E:3B:EB:BE:0E:76:B1:57
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       696799F70D3A2A7DA756DCE5EAE5E71CBFC4EFBD
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Mon 15 Dec 2025 12:56:02 +0000
ROA not before:           Mon 15 Dec 2025 12:51:02 +0000
ROA not after:            Mon 14 Dec 2026 12:56:02 +0000
asID:                     268568
IP address blocks:        2804:532c:128::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:67:99:f7:0d:3a:2a:7d:a7:56:dc:e5:ea:e5:e7:1c:bf:c4:ef:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:02 2025 GMT
            Not After : Dec 14 12:56:02 2026 GMT
        Subject: CN=3082010A0282010100B9003E724135B2865FF066E05EE4D9937C66C6E7EEC22B90496FCC2989F58F2B9E92540C18BA78B536C718B43316AB1F6F0A6161E40D13BF8F8DA09B3AC0F7112F36196DAF54F4E6FDD264FE20B56465EC5AC65005831CBE39E7CC99D5970AC51F97D20B47ED2B8B075996C92654CCA1F16536200ED963BF8A241D67751D792AF395C636CB411759BCBD20F6EA35CC64A709CEC4932AD0307C1B1C7298E765CD444338D2C17AA26CB817D676B5217DC66AE8CFD5B52F6E199FFD128EB6AC65D3B0FD0D1BD53F083C80F4DD9B652AA287F638652E57E6F9FF973CF1569E1FCC7D2FE8A00DAEA13ECD14462C8412BF0246667C4EF8F5D036A5943C021688CCF3130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:3e:72:41:35:b2:86:5f:f0:66:e0:5e:e4:
                    d9:93:7c:66:c6:e7:ee:c2:2b:90:49:6f:cc:29:89:
                    f5:8f:2b:9e:92:54:0c:18:ba:78:b5:36:c7:18:b4:
                    33:16:ab:1f:6f:0a:61:61:e4:0d:13:bf:8f:8d:a0:
                    9b:3a:c0:f7:11:2f:36:19:6d:af:54:f4:e6:fd:d2:
                    64:fe:20:b5:64:65:ec:5a:c6:50:05:83:1c:be:39:
                    e7:cc:99:d5:97:0a:c5:1f:97:d2:0b:47:ed:2b:8b:
                    07:59:96:c9:26:54:cc:a1:f1:65:36:20:0e:d9:63:
                    bf:8a:24:1d:67:75:1d:79:2a:f3:95:c6:36:cb:41:
                    17:59:bc:bd:20:f6:ea:35:cc:64:a7:09:ce:c4:93:
                    2a:d0:30:7c:1b:1c:72:98:e7:65:cd:44:43:38:d2:
                    c1:7a:a2:6c:b8:17:d6:76:b5:21:7d:c6:6a:e8:cf:
                    d5:b5:2f:6e:19:9f:fd:12:8e:b6:ac:65:d3:b0:fd:
                    0d:1b:d5:3f:08:3c:80:f4:dd:9b:65:2a:a2:87:f6:
                    38:65:2e:57:e6:f9:ff:97:3c:f1:56:9e:1f:cc:7d:
                    2f:e8:a0:0d:ae:a1:3e:cd:14:46:2c:84:12:bf:02:
                    46:66:7c:4e:f8:f5:d0:36:a5:94:3c:02:16:88:cc:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:EB:39:D2:D4:C7:30:19:1B:A5:80:1E:3B:EB:BE:0E:76:B1:57
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:128::/45

    Signature Algorithm: sha256WithRSAEncryption
         d7:80:9a:6c:67:60:c3:ff:19:cd:b8:e0:9e:ab:e3:02:ba:fc:
         24:44:a7:cd:1c:b8:ce:0a:c3:10:29:aa:a6:39:77:47:39:82:
         16:62:f3:25:c1:9f:8e:51:23:89:50:ce:77:61:c7:c1:ec:11:
         07:71:04:d0:d1:cd:0b:06:2b:b8:cf:90:72:41:39:a1:48:c5:
         f6:29:d3:82:8e:75:c1:4a:56:d7:f4:49:53:fb:53:fb:26:74:
         a7:5e:ff:2c:01:89:c0:ce:8d:d8:a8:18:f4:1f:d8:26:a0:39:
         94:5a:4f:59:53:7b:84:57:d1:01:17:94:7b:99:ab:e6:7c:44:
         e9:81:bd:6a:f2:5a:95:83:00:94:ed:86:f3:5f:30:04:65:8c:
         cb:df:27:63:82:87:1c:19:fa:42:28:d8:65:d3:28:25:f6:ed:
         7b:25:a0:1a:72:40:8b:ba:c9:96:21:8d:1e:86:1d:f8:ba:1a:
         4f:9e:f1:9f:de:3c:68:d9:5c:09:34:a9:77:e1:5d:ce:30:a8:
         4e:c8:b3:5e:8f:ed:ab:dc:ed:79:54:5d:ce:c1:26:cc:02:43:
         4c:bd:2a:38:0b:39:35:11:8b:63:3c:47:41:bd:ce:3a:75:68:
         d8:a4:b7:e9:16:a6:d4:7a:43:97:ff:f9:47:82:17:e9:58:bb:
         13:4c:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:52:51 2025 by rpki-client