This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          LnjU8JMr0JF+SvN1d6IZkJwtVGaqkoZh12OpWE5I6sw=
Subject key identifier:   B1:CD:59:E4:94:5B:1D:26:CE:97:BE:14:D5:C0:50:8C:1A:86:AD:3C
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       1A7E18263D283D742349114AF668AE85B1388FC0
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Mon 15 Dec 2025 12:56:05 +0000
ROA not before:           Mon 15 Dec 2025 12:51:05 +0000
ROA not after:            Mon 14 Dec 2026 12:56:05 +0000
asID:                     268568
IP address blocks:        2804:532c::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7e:18:26:3d:28:3d:74:23:49:11:4a:f6:68:ae:85:b1:38:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:05 2025 GMT
            Not After : Dec 14 12:56:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:2b:4c:c6:4d:ab:29:fc:b7:36:71:bd:80:
                    6f:aa:af:79:3e:e2:99:eb:c3:ec:3b:a6:43:93:bf:
                    98:fa:b2:4c:4e:c0:fd:11:c6:73:c9:aa:b5:f3:95:
                    e9:f8:f0:ed:69:a9:08:16:8c:5b:50:44:9a:1c:79:
                    d9:9f:d0:60:dc:cb:73:6b:e5:a8:23:71:22:0b:d3:
                    c8:31:8b:6d:26:f5:0f:45:39:d4:86:fe:dc:a1:ff:
                    a9:2c:8d:32:45:ae:b8:48:f5:9d:4d:ed:da:c7:77:
                    71:25:30:e7:b6:56:69:f9:35:8c:5e:80:f0:df:71:
                    0c:fb:32:41:51:fd:f0:4c:e5:fc:a2:36:98:d0:0f:
                    69:cf:31:9f:69:52:3a:ed:d7:fa:fa:87:c2:d9:5f:
                    8f:39:cc:3c:74:1a:2d:03:a3:21:f5:dc:1c:43:d5:
                    b1:d2:35:7e:17:a9:be:74:ec:da:b5:50:e0:56:3e:
                    19:df:69:b8:b4:f3:de:7e:a3:06:81:0a:b9:df:bb:
                    ca:c9:a8:e5:90:14:d9:bd:04:92:79:de:6c:3d:06:
                    0d:0c:13:cf:28:48:c8:c8:cc:df:bb:d5:e8:d4:19:
                    03:e1:fb:d4:10:e7:d7:9a:0c:aa:88:d6:1e:8e:24:
                    7c:db:cf:a7:27:38:fe:27:dd:55:1c:60:b2:8e:9e:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CD:59:E4:94:5B:1D:26:CE:97:BE:14:D5:C0:50:8C:1A:86:AD:3C
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c::/45

    Signature Algorithm: sha256WithRSAEncryption
         6e:a8:82:68:25:2b:e9:73:ed:53:8e:5c:2f:ed:54:46:92:02:
         70:62:4f:54:63:f6:05:6f:76:7a:16:f6:c1:0e:70:9e:5f:53:
         95:2a:4e:96:fb:9c:8c:36:f6:d5:7f:2d:30:7c:47:3c:74:b2:
         a2:6f:bc:62:75:31:72:4a:02:e7:a8:56:f0:4d:64:c3:e8:f4:
         8f:33:b7:ad:ff:57:c6:33:68:a0:2e:15:66:8d:5e:3b:a9:b8:
         cd:f3:ef:53:47:5a:ed:cd:95:e6:ec:49:6a:4a:8a:51:1f:ef:
         6c:ef:92:6d:39:71:8d:be:29:27:2a:ae:3a:1d:b8:cd:10:0d:
         17:0f:c9:93:4f:c2:1d:c0:e6:d3:c3:d5:af:b6:7e:cc:71:c7:
         02:27:5b:8d:59:88:c5:28:08:db:08:e6:a5:e9:40:24:fb:65:
         cb:48:b7:44:6a:2a:ee:4b:c8:9e:7b:ab:7d:da:50:f1:0a:84:
         9e:ff:99:40:31:6f:df:31:be:b9:0d:08:cd:2f:70:30:8a:c8:
         70:0d:3c:3b:94:62:f5:78:6d:ec:fc:76:95:b2:80:31:27:aa:
         b5:58:96:26:72:47:dc:6f:18:b6:4f:04:ed:b4:30:ae:83:96:
         5e:b1:ba:c4:5f:40:f0:17:e0:69:ff:9b:45:50:52:ae:ff:84:
         48:b0:38:df
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIUGn4YJj0oPXQjSRFK9miuhbE4j8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4OTVDODJGNTczQkUwRTRERjM4NDlBMTIxRDg3ODNB
QzZBRTIyQzAeFw0yNTEyMTUxMjUxMDVaFw0yNjEyMTQxMjU2MDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE4MDJCNENDNjREQUIyOUZD
QjczNjcxQkQ4MDZGQUFBRjc5M0VFMjk5RUJDM0VDM0JBNjQzOTNCRjk4RkFCMjRD
NEVDMEZEMTFDNjczQzlBQUI1RjM5NUU5RjhGMEVENjlBOTA4MTY4QzVCNTA0NDlB
MUM3OUQ5OUZEMDYwRENDQjczNkJFNUE4MjM3MTIyMEJEM0M4MzE4QjZEMjZGNTBG
NDUzOUQ0ODZGRURDQTFGRkE5MkM4RDMyNDVBRUI4NDhGNTlENERFRERBQzc3Nzcx
MjUzMEU3QjY1NjY5RjkzNThDNUU4MEYwREY3MTBDRkIzMjQxNTFGREYwNENFNUZD
QTIzNjk4RDAwRjY5Q0YzMTlGNjk1MjNBRUREN0ZBRkE4N0MyRDk1RjhGMzlDQzND
NzQxQTJEMDNBMzIxRjVEQzFDNDNENUIxRDIzNTdFMTdBOUJFNzRFQ0RBQjU1MEUw
NTYzRTE5REY2OUI4QjRGM0RFN0VBMzA2ODEwQUI5REZCQkNBQzlBOEU1OTAxNEQ5
QkQwNDkyNzlERTZDM0QwNjBEMEMxM0NGMjg0OEM4QzhDQ0RGQkJENUU4RDQxOTAz
RTFGQkQ0MTBFN0Q3OUEwQ0FBODhENjFFOEUyNDdDREJDRkE3MjczOEZFMjdERDU1
MUM2MEIyOEU5RUFDQzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0YArTMZNqyn8tzZxvYBvqq95PuKZ68PsO6ZDk7+Y+rJMTsD9EcZz
yaq185Xp+PDtaakIFoxbUESaHHnZn9Bg3Mtza+WoI3EiC9PIMYttJvUPRTnUhv7c
of+pLI0yRa64SPWdTe3ax3dxJTDntlZp+TWMXoDw33EM+zJBUf3wTOX8ojaY0A9p
zzGfaVI67df6+ofC2V+POcw8dBotA6Mh9dwcQ9Wx0jV+F6m+dOzatVDgVj4Z32m4
tPPefqMGgQq537vKyajlkBTZvQSSed5sPQYNDBPPKEjIyMzfu9Xo1BkD4fvUEOfX
mgyqiNYejiR828+nJzj+J91VHGCyjp6sxQIDAQABo4ICUjCCAk4wHQYDVR0OBBYE
FLHNWeSUWx0mzpe+FNXAUIwahq08MB8GA1UdIwQYMBaAFP+JXIL1c74OTfOEmhId
h4OsauIsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlIanRnOWR2RFU3U0hS
aUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzEvRkY4OTVDODJGNTczQkUw
RTRERjM4NDlBMTIxRDg3ODNBQzZBRTIyQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GRjg5NUM4MkY1NzNCRTBFNERGMzg0OUExMjFEODc4M0FDNkFF
MjJDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SGp0ZzlkdkRVN1NIUmlLdG91
N3M4czl5YkNWTk5pM0p0Q3hXQ0d6QVl6bi8xLzMyMzgzMDM0M2EzNTMzMzI2MzNh
M2EyZjM0MzUyZDM0MzUyMDNkM2UyMDMyMzYzODM1MzYzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygE
UywAADANBgkqhkiG9w0BAQsFAAOCAQEAbqiCaCUr6XPtU45cL+1URpICcGJPVGP2
BW92ehb2wQ5wnl9TlSpOlvucjDb21X8tMHxHPHSyom+8YnUxckoC56hW8E1kw+j0
jzO3rf9XxjNooC4VZo1eO6m4zfPvU0da7c2V5uxJakqKUR/vbO+SbTlxjb4pJyqu
Oh24zRANFw/Jk0/CHcDm08PVr7Z+zHHHAidbjVmIxSgI2wjmpelAJPtly0i3RGoq
7kvInnurfdpQ8QqEnv+ZQDFv3zG+uQ0IzS9wMIrIcA08O5Ri9Xht7Px2lbKAMSeq
tViWJnJH3G8Ytk8E7bQwroOWXrG6xF9A8Bfgaf+bRVBSrv+ESLA43w==
-----END CERTIFICATE-----