This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132383a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3132383a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          xqmpATOoYUx7kKeYKdFwPtoJ13JGzEW/sXsAzhgMLTI=
Subject key identifier:   A9:FD:56:F5:46:36:E7:64:FC:CC:D3:68:32:AC:C5:7E:A4:90:38:A9
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       4D8A0819F7D6F803BB66610F4707D61D7C56E3A5
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132383a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Mon 15 Dec 2025 19:08:00 +0000
ROA not before:           Mon 15 Dec 2025 19:03:00 +0000
ROA not after:            Mon 14 Dec 2026 19:08:00 +0000
asID:                     268144
IP address blocks:        2804:58b0:128::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 19:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8a:08:19:f7:d6:f8:03:bb:66:61:0f:47:07:d6:1d:7c:56:e3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 19:03:00 2025 GMT
            Not After : Dec 14 19:08:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:e0:65:b7:b2:1f:14:eb:c1:3e:8b:37:0a:
                    ae:71:7f:f8:f7:3e:78:97:60:88:38:22:4b:24:d9:
                    1c:59:ed:aa:ef:d7:d0:eb:fb:b4:3e:c7:f0:b7:21:
                    93:35:7b:4e:1d:1d:9e:00:a0:3d:77:b1:bf:17:98:
                    43:20:3c:0c:0b:37:5e:cc:ee:ec:56:78:40:95:73:
                    05:a3:54:e6:6e:6a:07:d1:64:65:e4:84:44:ef:e2:
                    32:8c:0f:36:c8:08:42:2f:29:57:40:26:ac:e2:08:
                    91:45:17:92:0f:53:30:68:47:5e:51:3d:00:23:10:
                    19:3f:01:93:89:bc:60:0d:e3:54:87:c0:3d:bd:b6:
                    ee:a5:2b:41:73:d4:80:4f:9f:5a:3e:94:d1:62:d7:
                    63:de:76:12:39:ad:e2:99:ff:61:09:4d:38:2d:3a:
                    fa:a1:3c:43:c5:91:51:14:c7:15:6d:42:63:15:9e:
                    ec:d0:c7:10:a7:33:e9:66:03:ab:1d:d6:de:5f:c3:
                    f2:68:57:bd:03:05:f1:88:f9:5f:f1:57:8a:11:bd:
                    96:ee:01:2b:87:33:28:4f:70:9f:75:c1:65:38:7c:
                    65:25:61:17:95:cd:47:0c:3d:d5:e7:82:52:b8:c8:
                    cc:1e:0c:60:84:a8:71:09:a4:b7:f4:a7:c1:82:85:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FD:56:F5:46:36:E7:64:FC:CC:D3:68:32:AC:C5:7E:A4:90:38:A9
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132383a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:128::/46

    Signature Algorithm: sha256WithRSAEncryption
         ad:82:b7:5c:52:a3:bd:89:42:d6:77:82:0f:67:f6:44:c0:1c:
         89:1d:82:43:ee:b6:c4:37:39:5a:ff:93:aa:c3:83:62:e7:ad:
         8e:ed:b2:2d:41:f4:b0:4b:3a:fe:d5:5f:8a:2d:f9:b6:29:e3:
         d5:cd:21:78:18:66:3a:86:f0:39:06:00:90:bf:a4:68:54:9f:
         c5:2a:8a:a7:c4:c7:dc:38:6f:87:94:0f:02:fb:a9:0c:04:57:
         97:53:9a:34:8d:4d:4c:ef:10:c6:33:e7:bc:5a:ba:03:2f:81:
         1f:30:d0:8e:16:bd:38:33:85:ee:4c:98:21:18:36:0f:34:ce:
         56:49:6d:46:ef:96:26:27:b7:0b:59:cd:44:b6:e4:24:c1:9c:
         7c:4b:7b:21:2a:d7:d0:44:83:77:26:b9:b3:58:48:fa:51:8f:
         07:fb:e9:be:c7:ae:a6:89:ae:73:60:86:00:6a:34:54:7d:e0:
         1d:f9:24:df:ef:31:b8:ef:c2:05:b8:23:62:94:1c:8f:e4:7a:
         90:f4:41:49:76:77:54:1a:64:a5:6b:2b:ea:dc:60:44:76:01:
         9d:be:6b:da:fa:0f:ce:38:46:7e:11:57:57:79:9b:ec:40:07:
         d3:65:3c:2a:2e:40:57:1b:83:96:4b:6d:a1:1d:ed:70:6e:04:
         ee:fe:e3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:03:25 2025 by rpki-client