This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa
File:                     323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa (raw, json)
Hash identifier:          H9CzJw7r4D25KNRW3mdt4AXXDzfCv3xL4fGG1V9wzeE=
Subject key identifier:   29:A6:AB:57:33:C9:DF:98:A7:81:20:69:DA:4E:7F:9C:70:CA:43:22
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       529D6007B3B4C86D328EB7B697744652D84833DE
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa
Signing time:             Mon 15 Dec 2025 12:56:06 +0000
ROA not before:           Mon 15 Dec 2025 12:51:06 +0000
ROA not after:            Mon 14 Dec 2026 12:56:06 +0000
asID:                     268568
IP address blocks:        2804:532c:130::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9d:60:07:b3:b4:c8:6d:32:8e:b7:b6:97:74:46:52:d8:48:33:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:06 2025 GMT
            Not After : Dec 14 12:56:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:a9:43:6d:80:c2:b2:75:5c:6d:1a:8a:91:
                    6e:7f:9f:77:6e:6a:2d:9c:20:3e:bd:87:f7:66:59:
                    6b:29:71:b5:54:1d:24:d3:c2:83:e3:49:b8:38:6b:
                    23:17:b0:11:20:37:9a:2e:45:b0:7a:ac:7b:5d:64:
                    58:62:7e:c4:cb:c1:35:e6:20:5c:2d:55:34:cb:64:
                    3d:0b:00:37:f7:75:4a:a5:36:ae:e1:f5:05:cd:84:
                    c9:fd:69:73:af:02:c2:25:60:46:f8:9d:26:70:00:
                    16:61:9b:48:88:03:1c:42:a2:32:3e:12:d1:8d:40:
                    ee:ed:af:54:22:2b:45:2a:01:76:71:ec:1d:6a:14:
                    04:ac:67:e1:60:89:da:0c:e7:d4:50:41:5c:79:a5:
                    09:e2:94:cf:11:e3:8a:85:78:6f:95:3b:e3:10:9e:
                    43:0c:ce:de:6b:fd:19:8a:cb:86:df:47:a8:6b:74:
                    ee:cd:c2:90:3f:35:93:90:03:c8:8b:f3:13:5b:86:
                    62:9c:c3:d2:da:bd:44:37:da:96:f9:66:ea:e4:7f:
                    78:8e:59:72:a3:4e:c7:70:b1:cb:84:08:17:fd:de:
                    aa:90:fd:c7:05:6f:d1:b7:4d:eb:05:b1:8f:44:c9:
                    97:5c:4a:cf:f0:cd:ac:0f:09:32:0d:92:bc:1e:19:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A6:AB:57:33:C9:DF:98:A7:81:20:69:DA:4E:7F:9C:70:CA:43:22
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133303a3a2f34362d3436203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:130::/46

    Signature Algorithm: sha256WithRSAEncryption
         d9:ac:e2:da:a5:36:07:89:f4:9b:98:df:8c:48:db:6d:4e:a5:
         eb:85:91:f2:37:be:41:09:03:79:3a:5a:66:81:71:28:36:5e:
         49:9d:6c:1d:ef:18:32:60:69:72:be:55:ef:cd:ea:d5:9b:6e:
         b4:dc:4f:84:25:31:b8:c9:2c:62:c6:cb:36:73:74:1f:79:99:
         47:7e:c0:a5:2b:76:e0:f0:4e:61:50:07:cc:cb:2b:71:f4:5d:
         a0:e6:bd:23:60:ea:71:0f:76:f4:41:67:33:28:f5:5a:24:a8:
         71:4c:5c:f8:f5:1c:df:c0:51:c1:c2:c8:50:58:24:f0:39:79:
         9e:d2:a0:ef:38:f0:ea:71:3f:96:24:88:cf:af:93:02:88:bf:
         75:de:3f:71:80:29:6d:ea:ce:bd:cc:3d:a3:72:3a:69:9f:ff:
         dd:27:a7:eb:d8:40:c1:ed:60:6b:58:40:fc:bf:d9:cb:6e:00:
         cc:c5:fa:f8:54:80:1a:f2:5a:d0:58:1d:f3:a4:39:e1:6a:ea:
         5f:04:a8:42:e2:e1:02:95:b2:c4:fd:ac:07:cb:01:28:65:36:
         21:f4:de:5f:06:5b:83:a3:20:6e:12:8f:98:8d:80:8c:02:c4:
         95:46:45:92:5c:71:44:25:4d:26:f4:a0:c3:d1:d1:0f:d7:18:
         40:78:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:51:52 2025 by rpki-client