This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323638363035.roa
File:                     323830343a366264633a3a2f33322d3332203d3e20323638363035.roa (raw, json)
Hash identifier:          I4KkWhBNV15smFKwMY8Wq0C2ah+9IxAndo/TGdCJKDo=
Subject key identifier:   72:B1:4F:00:90:73:9B:3E:2D:73:4B:2E:80:33:2F:A0:FE:AA:71:B6
Certificate issuer:       /CN=E9D70132186E718BADCF6045080D069DC88D24AB
Certificate serial:       458152228DFE7E61BE77267F74AD9FDE52807756
Authority key identifier: E9:D7:01:32:18:6E:71:8B:AD:CF:60:45:08:0D:06:9D:C8:8D:24:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D70132186E718BADCF6045080D069DC88D24AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323638363035.roa
Signing time:             Fri 12 Dec 2025 12:41:11 +0000
ROA not before:           Fri 12 Dec 2025 12:36:11 +0000
ROA not after:            Fri 11 Dec 2026 12:41:11 +0000
asID:                     268605
IP address blocks:        2804:6bdc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E9D70132186E718BADCF6045080D069DC88D24AB.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E9D70132186E718BADCF6045080D069DC88D24AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D70132186E718BADCF6045080D069DC88D24AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 13:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:81:52:22:8d:fe:7e:61:be:77:26:7f:74:ad:9f:de:52:80:77:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D70132186E718BADCF6045080D069DC88D24AB
        Validity
            Not Before: Dec 12 12:36:11 2025 GMT
            Not After : Dec 11 12:41:11 2026 GMT
        Subject: CN=72B14F0090739B3E2D734B2E80332FA0FEAA71B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ee:d4:46:da:4b:03:9f:d4:c2:32:05:79:06:
                    56:03:b3:cc:77:6c:87:e5:8a:f2:d8:82:a2:7e:4c:
                    b1:dd:fd:71:ed:5e:64:92:61:c7:f2:4b:bc:a9:c9:
                    a7:1b:c4:26:d6:7d:e3:49:58:81:e7:18:67:be:5d:
                    dd:13:e9:ab:b2:c5:c0:36:a6:fd:63:f4:82:d6:e3:
                    58:a6:de:60:7d:29:ba:5d:9f:e0:a4:be:98:ec:17:
                    13:45:0b:68:b5:a6:5c:2e:10:88:c6:a4:c9:5a:d1:
                    4b:fa:44:c7:90:71:bb:84:8b:21:de:71:0d:2e:fb:
                    b6:47:b2:50:ea:59:8a:c5:64:2d:25:78:67:8e:74:
                    8f:24:60:27:08:d9:8a:e0:60:e2:1e:b0:52:68:2d:
                    17:be:54:ad:43:8e:f9:88:25:33:e3:27:57:ec:71:
                    07:fa:ab:b9:e7:b0:4d:8d:0b:3e:b1:3f:5c:53:8f:
                    00:c3:e3:c7:76:be:87:c9:19:f0:20:44:08:71:a4:
                    28:b1:93:89:28:42:b1:e1:ec:56:3a:4b:74:ff:34:
                    f4:22:c6:f4:87:cf:f2:1b:8c:41:8c:d7:be:e2:ef:
                    04:56:97:43:58:31:d4:64:09:69:f4:37:8d:28:af:
                    7e:50:0a:ae:1c:16:35:2f:c2:49:78:fe:dd:f7:1b:
                    b3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B1:4F:00:90:73:9B:3E:2D:73:4B:2E:80:33:2F:A0:FE:AA:71:B6
            X509v3 Authority Key Identifier:
                keyid:E9:D7:01:32:18:6E:71:8B:AD:CF:60:45:08:0D:06:9D:C8:8D:24:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E9D70132186E718BADCF6045080D069DC88D24AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D70132186E718BADCF6045080D069DC88D24AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:48:5a:95:9f:49:7b:cf:a2:62:f0:87:c7:39:fe:74:6b:2b:
         e6:6e:de:e5:24:81:22:bf:36:a8:b9:71:7a:3c:79:64:f5:0c:
         07:aa:00:ae:dc:44:90:11:56:99:33:1b:d7:67:b2:44:69:d6:
         32:ef:e9:72:05:30:c4:21:8b:57:80:68:48:ef:cf:06:d6:91:
         97:79:fc:5c:7f:15:3d:70:9c:bb:e6:15:66:9d:40:00:fe:97:
         03:d0:55:6b:fe:3e:07:03:f4:4c:de:4b:58:47:be:0b:e7:0b:
         89:92:58:40:33:de:5a:e9:27:d4:33:ff:44:1f:d0:0f:01:43:
         26:70:6a:20:cc:64:ae:1c:54:59:37:47:de:ae:8b:b8:a4:9a:
         92:b3:9e:2f:86:88:9b:d8:1d:4a:13:36:db:e4:37:26:d4:d4:
         6d:08:5d:60:f6:0c:97:7d:96:96:a4:b7:2f:a3:a1:b3:b7:24:
         96:d9:1c:58:30:1c:04:fb:75:70:93:15:ac:aa:ce:10:ce:ec:
         9c:b1:a0:f1:b6:3b:20:fa:ce:0f:91:31:36:26:06:56:51:82:
         70:42:4f:8d:67:f3:f9:0c:53:c6:d1:f2:04:f9:a1:f4:ff:c4:
         5a:c6:32:6c:e5:b5:be:f3:c8:32:e6:41:59:04:35:16:b1:ed:
         36:9f:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:52:33 2025 by rpki-client