This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa
File:                     323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa (raw, json)
Hash identifier:          TAU70BXBoDnlw/Hue86oNpp8n9RnxPN48wPkRw3QMYA=
Subject key identifier:   3E:3C:34:A2:F1:03:FF:D1:09:8C:95:D8:F6:80:5E:69:B5:70:EE:CC
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       4A639176C9B1BCEFB7EF48CECCA94C22B8D60039
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa
Signing time:             Mon 15 Dec 2025 12:56:06 +0000
ROA not before:           Mon 15 Dec 2025 12:51:06 +0000
ROA not after:            Mon 14 Dec 2026 12:56:06 +0000
asID:                     268144
IP address blocks:        2804:58b0:138::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 19:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:63:91:76:c9:b1:bc:ef:b7:ef:48:ce:cc:a9:4c:22:b8:d6:00:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:06 2025 GMT
            Not After : Dec 14 12:56:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:bb:fe:ac:71:20:fa:7c:0e:1d:8a:a0:80:
                    ca:9b:91:2e:57:53:4a:77:3a:1a:36:92:dc:74:24:
                    6d:09:fb:14:64:f6:be:02:18:45:2b:68:f5:43:de:
                    0c:74:38:fe:5f:b6:9a:cf:a4:8a:21:4f:8a:12:e6:
                    ba:a7:e5:7e:6b:4f:ba:38:7c:31:76:f2:98:57:20:
                    92:47:ee:cc:5f:28:31:ea:f4:f0:83:8f:bb:53:be:
                    9e:e9:51:d7:ba:f9:0e:7f:a7:97:22:32:fb:75:11:
                    f7:19:02:a6:f7:d7:2e:1d:d9:a6:6c:42:76:7f:ec:
                    09:48:7c:25:42:3b:2a:b6:da:69:37:51:aa:49:a3:
                    5b:a9:8f:92:fe:e0:d3:ce:db:40:59:32:89:4f:0c:
                    ca:8a:a7:b9:2f:d9:71:51:2a:28:00:59:eb:ba:f1:
                    d1:b7:92:17:89:1d:80:df:f2:ae:48:09:ff:39:95:
                    5d:aa:70:b6:e6:68:25:db:60:ab:fd:df:93:32:9c:
                    10:c9:6a:45:24:b4:ef:97:a0:fd:37:9a:fc:35:d3:
                    36:c9:41:84:f6:c4:9c:5c:dd:36:6b:eb:84:50:f8:
                    12:93:64:90:47:a5:04:c3:03:70:25:22:3f:6a:26:
                    13:1d:a3:70:d0:95:5f:df:23:82:a1:fa:57:ed:a2:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3C:34:A2:F1:03:FF:D1:09:8C:95:D8:F6:80:5E:69:B5:70:EE:CC
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:138::/45

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:8b:02:5b:d9:1d:a7:be:8f:2f:01:44:e4:60:3a:18:a5:
         5e:ca:40:54:6f:0c:e8:5d:55:61:38:7f:ef:05:e7:b4:4c:c7:
         72:57:d6:9a:b6:92:79:a2:10:e0:0b:01:c9:81:45:7a:f6:ae:
         b0:60:5d:9b:2b:69:91:9c:ae:3f:28:4e:0a:97:03:3e:a0:88:
         ac:99:5f:59:4a:6b:06:71:53:90:bc:02:e0:35:b6:67:b2:18:
         6e:fc:77:3c:03:68:35:46:d6:15:1b:da:42:26:aa:1e:94:ea:
         63:f1:86:e7:f4:3d:2b:32:aa:10:3d:14:8d:4a:65:99:fd:9b:
         44:af:e8:19:39:0c:8d:be:9c:9b:e4:33:d2:6b:46:a9:3b:c2:
         4d:37:05:dd:30:97:0d:1d:e9:e7:fe:12:ef:10:9c:d8:a5:36:
         4a:45:14:5b:89:72:d4:53:df:a2:a8:c7:7d:8e:6c:84:ff:ea:
         8f:dd:53:1c:4c:5b:34:7d:6e:9a:e8:70:30:ca:b5:40:51:17:
         31:b1:37:9a:08:7e:07:b3:eb:2f:7e:28:46:44:ad:f9:0f:d6:
         67:ff:ba:e5:e8:cb:91:37:47:f8:ff:5c:06:45:c3:46:7e:d6:
         0b:6d:12:34:83:22:5f:bd:62:9e:77:79:5d:28:44:dc:64:7d:
         89:53:49:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:32:15 2025 by rpki-client