This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa
File:                     323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa (raw, json)
Hash identifier:          47Z0KyQWnyCtL85JGflj0athlyVi9b+0wwTvlVdyMWM=
Subject key identifier:   25:A9:D2:C7:EC:7C:51:A9:E6:97:0F:19:1E:90:5A:2C:60:C5:1A:C4
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       38188C9E2E81F3C362F195149D7E88ACEF70D6E3
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa
Signing time:             Thu 11 Dec 2025 15:43:48 +0000
ROA not before:           Thu 11 Dec 2025 15:38:48 +0000
ROA not after:            Thu 10 Dec 2026 15:43:48 +0000
asID:                     263444
IP address blocks:        2804:11dc:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 17:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:18:8c:9e:2e:81:f3:c3:62:f1:95:14:9d:7e:88:ac:ef:70:d6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Dec 11 15:38:48 2025 GMT
            Not After : Dec 10 15:43:48 2026 GMT
        Subject: CN=25A9D2C7EC7C51A9E6970F191E905A2C60C51AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:d8:8c:59:52:f7:89:f9:d1:f0:26:3f:25:
                    96:ec:2a:69:ca:12:30:0e:44:87:4b:69:97:96:2a:
                    71:41:2b:5d:84:95:de:76:a5:1b:ec:5c:80:8c:97:
                    d1:3e:7b:4d:f1:e7:48:ea:55:24:fc:14:05:b7:8b:
                    ef:de:ab:d4:ff:ce:d3:a6:5b:b1:16:a1:83:6d:b0:
                    d3:62:79:ce:c8:50:74:9c:67:ff:2d:f5:05:45:fb:
                    99:a9:8f:a5:71:91:3a:00:3f:fc:97:c4:9a:40:aa:
                    71:f1:a0:cb:55:bc:52:9d:2d:a4:4b:8d:c6:29:21:
                    64:27:d4:fc:e3:1d:dd:f0:9b:dc:86:37:9e:43:db:
                    c2:48:e6:35:7d:0b:25:4d:ea:df:2f:22:e5:80:fe:
                    d8:89:2d:7f:a7:8d:95:9f:d8:e3:ad:c0:a8:62:c6:
                    b8:5c:39:45:14:0d:9f:56:bb:f2:05:bf:5b:47:03:
                    0b:d7:8e:f3:97:83:5d:d4:18:cd:83:56:50:cf:2c:
                    96:e1:e0:63:71:94:d1:3a:96:24:54:d3:82:d1:36:
                    d7:a8:d8:fe:f2:61:d1:5e:d9:92:68:14:a9:b5:9e:
                    10:df:1f:2d:3f:c1:93:5e:b8:b4:a1:63:e6:84:17:
                    17:19:16:ea:f7:d7:e9:39:b5:0c:18:7e:7b:92:a5:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A9:D2:C7:EC:7C:51:A9:E6:97:0F:19:1E:90:5A:2C:60:C5:1A:C4
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11dc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:55:1f:d6:4c:a5:ec:18:24:75:f9:a4:e8:11:4a:3e:ee:a8:
         e1:e4:49:55:6e:18:48:2a:15:e6:77:70:cc:d1:07:44:f9:c8:
         9e:4a:fd:8b:2e:f6:f5:92:f2:54:dc:e8:27:35:97:c4:43:86:
         72:00:4c:72:cf:f7:96:2f:8b:f6:8b:32:ad:57:e9:34:0a:67:
         30:61:08:5b:54:68:c0:07:ef:61:fd:a6:71:ee:6a:78:a5:64:
         a8:b0:c1:c7:bb:19:ab:53:6c:b2:10:1e:51:f5:5a:d5:dc:74:
         b9:97:eb:2a:c5:a0:27:01:03:d6:5f:27:5b:97:9b:5d:a8:99:
         3a:6e:60:d3:de:85:54:65:e1:76:51:f0:f9:89:ab:57:d1:0e:
         5f:83:76:0f:bb:c2:13:ed:6a:11:71:42:0f:98:d1:0c:38:ff:
         43:e2:d7:7f:f6:c5:9e:a7:1f:dc:f0:6a:d5:f7:6e:3a:f7:d1:
         bd:76:ea:e2:ae:31:11:06:52:55:a7:bf:65:3e:5b:26:84:f3:
         9f:07:ec:d3:cf:3b:2c:71:22:c2:b4:0b:71:92:90:71:6f:88:
         a0:a9:02:eb:e5:16:fd:94:f8:5d:5e:25:39:9b:c5:8c:a9:1e:
         20:17:2b:9d:43:75:e1:f5:ea:eb:90:57:f8:4c:e0:90:4d:4f:
         82:28:9c:ad
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOBiMni6B88Ni8ZUUnX6IrO9w1uMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3
MDE4NDgwRDAeFw0yNTEyMTExNTM4NDhaFw0yNjEyMTAxNTQzNDhaMDMxMTAvBgNV
BAMTKDI1QTlEMkM3RUM3QzUxQTlFNjk3MEYxOTFFOTA1QTJDNjBDNTFBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMNiMWVL3ifnR8CY/JZbsKmnK
EjAORIdLaZeWKnFBK12Eld52pRvsXICMl9E+e03x50jqVST8FAW3i+/eq9T/ztOm
W7EWoYNtsNNiec7IUHScZ/8t9QVF+5mpj6VxkToAP/yXxJpAqnHxoMtVvFKdLaRL
jcYpIWQn1PzjHd3wm9yGN55D28JI5jV9CyVN6t8vIuWA/tiJLX+njZWf2OOtwKhi
xrhcOUUUDZ9Wu/IFv1tHAwvXjvOXg13UGM2DVlDPLJbh4GNxlNE6liRU04LRNteo
2P7yYdFe2ZJoFKm1nhDfHy0/wZNeuLShY+aEFxcZFur31+k5tQwYfnuSpQ+DAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJanSx+x8Uanmlw8ZHpBaLGDFGsQwHwYDVR0j
BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB
QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv
MzIzODMwMzQzYTMxMzE2NDYzM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEdxwMA0GCSqGSIb3DQEBCwUA
A4IBAQATVR/WTKXsGCR1+aToEUo+7qjh5ElVbhhIKhXmd3DM0QdE+cieSv2LLvb1
kvJU3OgnNZfEQ4ZyAExyz/eWL4v2izKtV+k0CmcwYQhbVGjAB+9h/aZx7mp4pWSo
sMHHuxmrU2yyEB5R9VrV3HS5l+sqxaAnAQPWXydbl5tdqJk6bmDT3oVUZeF2UfD5
iatX0Q5fg3YPu8IT7WoRcUIPmNEMOP9D4td/9sWepx/c8GrV924699G9durirjER
BlJVp79lPlsmhPOfB+zTzzsscSLCtAtxkpBxb4igqQLr5Rb9lPhdXiU5m8WMqR4g
FyudQ3Xh9errkFf4TOCQTU+CKJyt
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:50:00 2025 by rpki-client