This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3438203d3e20323633363334.roa
File:                     323830343a313036383a3a2f33322d3438203d3e20323633363334.roa (raw, json)
Hash identifier:          Tfd55FcbD7zYhoZ6hN7WHlOewF6bRaGrKRCwwsf/pY4=
Subject key identifier:   87:7C:98:AD:A3:44:46:88:A4:0F:8D:0F:5F:7F:E3:C8:EC:24:8F:E0
Certificate issuer:       /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial:       63B13E90DE6EC7A4BED1CBB52DF2311E10E651E5
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3438203d3e20323633363334.roa
Signing time:             Tue 23 Dec 2025 13:19:25 +0000
ROA not before:           Tue 23 Dec 2025 13:14:25 +0000
ROA not after:            Tue 22 Dec 2026 13:19:25 +0000
asID:                     263634
IP address blocks:        2804:1068::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b1:3e:90:de:6e:c7:a4:be:d1:cb:b5:2d:f2:31:1e:10:e6:51:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
        Validity
            Not Before: Dec 23 13:14:25 2025 GMT
            Not After : Dec 22 13:19:25 2026 GMT
        Subject: CN=877C98ADA3444688A40F8D0F5F7FE3C8EC248FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:23:3f:ab:47:4f:98:61:0f:2b:ae:a3:c0:
                    42:80:c9:1d:04:22:d2:9c:bd:81:ad:04:11:be:04:
                    e2:8e:d9:12:74:fe:4c:82:7c:f8:7a:fd:a1:af:74:
                    88:1b:64:0e:3a:73:d0:16:86:8f:61:f7:cd:28:12:
                    4d:66:94:6f:6d:ce:c2:60:43:91:e0:00:fc:c9:25:
                    40:b1:1a:0e:42:23:d2:c2:b3:72:d9:e8:e4:50:97:
                    06:71:fb:b5:2a:dc:e4:23:af:29:79:77:97:84:9f:
                    18:99:f5:f5:29:eb:31:1d:e7:6b:a8:83:17:e5:a3:
                    9d:cf:69:e8:d2:40:58:d9:78:8d:f4:7a:f0:25:1e:
                    99:24:75:b3:78:d9:ec:a3:76:c1:89:15:b4:7f:42:
                    f2:98:d0:c1:e1:38:61:23:a2:d1:ec:11:71:ec:1d:
                    3a:a3:87:82:6d:07:3d:75:51:4d:3f:7f:07:12:cb:
                    00:d1:c7:14:f2:49:ea:48:28:15:2f:45:31:44:56:
                    1f:4b:5c:32:81:22:60:93:af:31:2e:7f:9a:dd:23:
                    d3:55:73:cf:15:87:5e:93:3b:4e:a6:c5:22:b4:d9:
                    80:57:9f:56:34:ae:30:37:6f:f6:79:3f:35:24:62:
                    61:fc:21:0b:00:9e:be:13:59:70:82:20:23:df:95:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:98:AD:A3:44:46:88:A4:0F:8D:0F:5F:7F:E3:C8:EC:24:8F:E0
            X509v3 Authority Key Identifier:
                keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3438203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:67:c7:51:dd:a2:c1:b9:dd:dd:d7:bc:f5:8a:50:a4:10:0f:
         7f:4e:3f:e2:43:24:cd:58:4d:04:fb:36:8b:97:e5:9d:17:f3:
         50:a5:4e:9a:a4:bf:ff:6c:85:7c:f8:33:d5:ab:3d:a3:36:b2:
         0e:7b:9c:c7:e0:84:21:9b:6d:3d:2a:b4:cf:84:41:cc:41:15:
         1f:3f:77:5d:1c:93:a1:d2:94:8a:48:14:48:bb:89:35:0a:2f:
         f4:98:a7:0a:eb:bc:d8:a1:72:02:03:9b:a1:7f:0f:80:d7:85:
         a5:c9:1c:7c:77:41:27:b7:3e:9a:c9:f5:63:4f:f2:d3:c2:7d:
         21:f4:0b:b6:b0:88:fe:21:c5:cc:8b:52:82:96:40:7b:e8:eb:
         58:38:07:ab:e4:69:75:b1:36:78:c9:e7:c1:c8:89:27:ec:43:
         32:72:c3:7e:ba:00:9e:33:a6:66:e5:54:85:e4:71:55:b9:48:
         b0:e4:bf:a9:51:ae:b8:16:15:42:9a:e5:01:a6:1e:e1:e1:55:
         ca:ae:45:ed:bc:59:c4:6f:90:16:88:4c:98:78:d2:d9:ce:e8:
         f5:73:31:95:7f:1a:f1:77:34:8b:68:10:01:49:25:c0:05:64:
         b1:af:c3:e2:36:dd:5f:6c:9b:8d:1c:74:be:fd:db:29:78:49:
         be:06:dc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 11:13:18 2025 by rpki-client