This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f33322d3334203d3e20323638313434.roa
File:                     323830343a353862303a3a2f33322d3334203d3e20323638313434.roa (raw, json)
Hash identifier:          gxqfqn2nBhG1uzQQcZlq8imbfP7b2E6sFeF9P+2dpaE=
Subject key identifier:   12:8D:A5:97:55:86:88:B5:AC:A9:42:AB:2D:95:1A:17:6C:D8:2A:54
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       437168BB2D8BAC3363AA53D38FD6B3F0767B74D4
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f33322d3334203d3e20323638313434.roa
Signing time:             Mon 15 Dec 2025 13:00:00 +0000
ROA not before:           Mon 15 Dec 2025 12:55:00 +0000
ROA not after:            Mon 14 Dec 2026 13:00:00 +0000
asID:                     268144
IP address blocks:        2804:58b0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 19:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:71:68:bb:2d:8b:ac:33:63:aa:53:d3:8f:d6:b3:f0:76:7b:74:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:55:00 2025 GMT
            Not After : Dec 14 13:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:79:9e:c4:e5:3e:db:76:11:fb:f1:91:7c:
                    92:84:62:4d:fd:47:15:98:a8:26:ff:a2:6c:5e:d1:
                    12:21:e7:c4:36:e6:55:c3:1e:42:de:fc:aa:f0:7b:
                    f3:1a:e8:42:ba:fc:72:40:06:7c:ec:5e:30:67:bd:
                    30:66:70:0a:cd:5c:d1:93:e9:16:88:ed:41:8e:a8:
                    bd:e7:bc:94:bb:de:e0:98:af:0c:55:1e:38:a3:9c:
                    cc:97:cd:58:a9:a5:af:a3:98:78:16:38:f3:fb:37:
                    5b:0c:a3:c6:71:02:0a:51:43:83:69:78:55:0a:ea:
                    31:b4:41:01:fe:29:60:b2:3a:44:4f:78:23:f9:bc:
                    b7:f5:2b:0f:f8:36:70:0f:d3:03:96:33:99:7f:c8:
                    6e:cc:4e:29:4c:46:e8:4a:53:2a:8b:25:d6:b1:c1:
                    3e:41:84:1f:25:ec:4d:61:c3:42:c2:85:26:dd:74:
                    36:94:bf:08:12:6b:bb:19:8f:bf:91:9f:cd:57:0f:
                    48:07:68:38:37:23:49:21:b1:de:cc:1c:b3:11:03:
                    3f:55:3e:2f:ca:bd:af:7f:00:09:e8:ea:74:22:0a:
                    b9:e6:9f:38:14:89:02:88:d9:13:7d:92:b6:f8:ad:
                    74:1f:c1:af:2c:47:92:c2:b1:63:60:72:e0:f4:69:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8D:A5:97:55:86:88:B5:AC:A9:42:AB:2D:95:1A:17:6C:D8:2A:54
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f33322d3334203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:a1:4a:f5:b4:45:20:9a:a5:c9:f3:36:06:bd:cf:a1:f3:68:
         5e:56:ad:a7:32:21:a5:52:86:d4:dd:89:af:02:cb:e6:7c:b6:
         45:5c:70:ab:f9:96:cb:a8:5c:97:50:ba:b8:b3:48:5f:de:d4:
         e3:e6:79:36:1b:32:bf:97:db:21:5c:e6:60:b7:7c:03:2a:cd:
         cd:4c:3e:b9:e1:3c:c2:e6:16:14:09:b0:bd:91:0d:82:84:db:
         4f:42:6c:0b:07:33:f1:9b:70:cf:0b:5e:2c:ee:f0:bb:87:db:
         31:56:ed:b9:d0:b4:a6:d5:6a:c6:8b:a7:99:a6:11:6c:50:8c:
         8d:ca:a2:b7:64:8f:90:c0:60:80:2c:e4:a1:80:23:70:5c:26:
         e1:f1:25:bb:7a:e5:a3:28:aa:15:24:30:91:83:ea:2b:fa:0b:
         5c:3c:da:68:b2:44:75:43:ed:0c:c8:32:9a:e2:68:d0:2f:da:
         ff:6a:bb:ce:a5:b6:e5:ba:2c:d5:0b:3a:be:17:24:0c:1d:52:
         44:f9:aa:d7:19:d0:be:d1:c2:84:27:ea:32:c7:da:14:0f:b6:
         7e:59:22:60:36:8d:ec:c4:65:4a:24:24:07:3e:f2:0d:4a:35:
         9f:d2:bc:3f:1b:be:1e:a8:ee:1e:98:18:76:eb:cc:3c:9a:7b:
         b3:d3:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----