This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f33322d3332203d3e20323638353638.roa
File:                     323830343a353332633a3a2f33322d3332203d3e20323638353638.roa (raw, json)
Hash identifier:          Vvgbr8/69vhkOZr2g+gS7IJuzsIovOgiHSBgx1vSDWM=
Subject key identifier:   B5:FD:17:F5:84:72:89:77:F7:98:15:D1:8A:8B:71:A9:74:97:B1:CD
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       65FCF06AF636E1B12B369ADCA8028F1C7A0CAB71
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f33322d3332203d3e20323638353638.roa
Signing time:             Mon 15 Dec 2025 12:56:02 +0000
ROA not before:           Mon 15 Dec 2025 12:51:02 +0000
ROA not after:            Mon 14 Dec 2026 12:56:02 +0000
asID:                     268568
IP address blocks:        2804:532c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fc:f0:6a:f6:36:e1:b1:2b:36:9a:dc:a8:02:8f:1c:7a:0c:ab:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:02 2025 GMT
            Not After : Dec 14 12:56:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:0c:7e:82:92:a3:2c:a7:de:55:6e:de:46:
                    29:47:57:c3:e2:0a:48:bd:d2:43:6f:00:c2:fa:9b:
                    10:29:2c:ca:f9:5d:86:35:34:0d:5b:1a:a3:62:11:
                    b4:d5:76:82:af:ed:a3:e7:32:40:f3:a2:ea:16:e5:
                    25:27:44:79:19:c9:81:a7:04:81:b8:15:ac:49:05:
                    fa:3c:43:a4:83:7a:6c:ae:4d:dd:8c:72:e4:f5:5d:
                    7f:7f:7b:5e:0f:b6:c3:95:4b:7b:27:35:2c:c1:dd:
                    27:37:47:6a:94:df:fb:57:d2:7a:fc:4a:1a:b8:0d:
                    bd:0f:06:93:68:26:25:62:1d:d0:e6:71:99:69:d6:
                    d8:d1:6f:0d:c4:27:43:96:75:5b:f1:e4:6d:14:c1:
                    e9:95:7f:a0:c3:3a:76:33:83:2e:a3:ae:57:cf:70:
                    9e:75:bf:df:7b:21:af:8f:60:a3:3a:ec:89:97:df:
                    7d:48:6c:05:18:94:8e:63:66:de:8a:19:28:bf:7d:
                    70:8b:98:34:94:89:d6:26:0b:da:b1:43:00:01:ad:
                    3c:bd:37:74:c3:e5:86:44:30:71:ea:24:0b:24:53:
                    0c:54:d1:b7:e6:1c:9c:f2:1a:b1:f3:7f:cb:3f:42:
                    67:9b:be:78:0d:a8:58:74:45:9c:6e:f6:a2:a4:fa:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:17:F5:84:72:89:77:F7:98:15:D1:8A:8B:71:A9:74:97:B1:CD
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f33322d3332203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:9a:c6:5c:68:93:42:d3:22:75:38:62:84:a3:56:ee:b1:af:
         4c:52:41:1f:67:a9:0b:b5:7e:d4:88:e6:fe:95:92:0d:4b:66:
         09:87:d3:60:30:e1:24:db:a7:4a:f8:f0:43:f0:d3:26:78:61:
         1c:a8:51:6c:3d:39:6e:3b:1f:07:13:43:c8:48:99:1e:43:e1:
         f2:d9:81:2c:9a:f3:12:13:4c:42:e2:1d:c3:59:02:b1:dc:a2:
         5c:24:50:d7:ea:3f:da:cd:9d:0f:48:5b:53:6d:4a:9c:e4:b1:
         77:b9:fa:89:88:85:61:ec:f3:3e:ed:e9:69:7f:7a:ed:b7:c4:
         f1:8a:35:4c:52:1d:25:e7:9b:af:65:15:86:87:52:48:59:45:
         9b:b7:d2:e7:fc:0c:1e:76:7d:e1:26:ee:6c:91:d3:bc:eb:e5:
         02:0a:45:c5:d3:6a:9c:07:d2:7d:ec:aa:c7:1f:08:27:ac:e1:
         a7:d6:c6:2d:14:82:d8:db:37:9d:c0:0c:9c:f2:cf:59:c6:65:
         e3:85:92:8d:d2:c9:16:fa:eb:fd:27:82:17:4b:d4:49:19:a8:
         4b:1d:34:81:8f:14:70:87:ec:8b:b7:cd:87:ca:90:f4:40:2a:
         4a:05:33:c1:6f:0f:37:d6:94:ba:fe:3d:a2:ff:e3:1d:5e:44:
         a0:c7:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----