This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          XIXI3m33xsUczxDwHlYQ+vPRU2J6GNByFoHM6TCAHi0=
Subject key identifier:   B9:6F:C7:AB:33:7A:29:84:91:55:DA:D1:85:91:B5:C2:B5:82:28:5D
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       0F90F2F98CB8403BFB62D562ADDA0B2E9565D530
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Fri 12 Dec 2025 15:27:42 +0000
ROA not before:           Fri 12 Dec 2025 15:22:42 +0000
ROA not after:            Fri 11 Dec 2026 15:27:42 +0000
asID:                     265300
IP address blocks:        2804:2dbc:a800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 02:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:90:f2:f9:8c:b8:40:3b:fb:62:d5:62:ad:da:0b:2e:95:65:d5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Dec 12 15:22:42 2025 GMT
            Not After : Dec 11 15:27:42 2026 GMT
        Subject: CN=B96FC7AB337A29849155DAD18591B5C2B582285D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:1e:e5:ce:6d:fe:03:ec:7d:94:bb:91:cd:
                    96:d2:fa:77:24:f6:dc:3f:59:95:d8:7d:bc:b2:72:
                    6e:e9:5d:b4:53:46:a5:6f:55:24:d9:68:6c:34:fe:
                    61:94:1a:34:2b:72:63:fd:19:aa:a4:ab:25:23:73:
                    e2:65:4b:f3:59:c8:10:ca:e8:f7:3a:f4:52:3b:4e:
                    a1:ba:c3:5a:8e:d9:44:51:fe:65:3d:b5:ad:fd:0d:
                    5e:39:8a:62:85:d3:24:8a:b8:a9:ff:92:81:b8:c9:
                    a2:3e:4f:f8:28:9a:bc:c2:f1:8f:39:e2:ac:82:75:
                    fa:e9:5c:38:59:80:ed:4b:58:45:77:9e:a7:95:3a:
                    5f:19:f0:9b:15:83:e3:e0:de:87:aa:21:15:e8:6b:
                    c9:ff:09:01:15:f1:9d:e0:7a:cc:01:a4:65:20:1c:
                    81:c7:72:35:1e:43:a0:94:68:5e:83:de:6e:3b:ee:
                    d3:ce:73:37:21:c6:55:e5:a1:ff:6f:53:22:92:7d:
                    dd:6e:d8:d0:ee:ec:72:6d:4b:91:b0:f1:24:fb:3b:
                    3a:cc:85:47:47:0e:ff:72:d0:47:9c:2a:2a:c8:98:
                    1a:50:39:48:fc:13:a2:c6:e0:20:40:ab:43:6c:ee:
                    a4:67:f7:2b:ed:e5:95:43:20:72:f5:ea:86:49:be:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6F:C7:AB:33:7A:29:84:91:55:DA:D1:85:91:B5:C2:B5:82:28:5D
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:a800::/38

    Signature Algorithm: sha256WithRSAEncryption
         c6:c7:bc:4f:b9:b8:9f:72:a6:f8:bc:70:73:65:41:2a:05:be:
         91:ae:bb:8c:59:91:eb:0e:4b:15:bb:9c:f3:2b:2d:02:f7:9a:
         93:5c:00:fe:88:97:b9:0f:ea:f8:b4:86:b2:26:6f:36:82:fd:
         c4:43:3d:37:3a:74:75:68:7d:9e:68:7e:4f:93:47:ab:6b:3c:
         29:e6:a8:ee:0a:a6:80:a1:b7:43:3b:fd:47:6f:58:20:83:7c:
         39:cc:28:53:df:33:3f:44:c5:a9:93:b7:7b:99:97:3e:6d:4b:
         dc:1f:80:e4:18:a1:2b:c7:24:c3:b0:8f:9e:2e:7f:25:09:47:
         a3:2b:05:35:de:37:67:98:ce:96:10:ef:b6:67:c5:c9:db:8d:
         b0:7f:9f:6c:c1:fc:aa:05:e0:9c:c6:dd:d6:cc:ff:05:a2:4a:
         1f:18:a3:ab:f8:ad:07:3a:7c:6d:41:9d:09:ed:f8:fa:7b:8b:
         36:85:8e:a0:cb:46:6e:29:85:63:69:62:0c:a1:f7:1a:00:c1:
         e1:4c:17:ff:f8:a1:01:77:0c:ed:8c:fb:b9:c6:66:52:7b:61:
         86:21:e4:fd:5a:c9:d0:66:57:c1:c2:66:f1:9f:ca:00:4b:09:
         3f:e7:e7:3b:61:2a:89:2b:da:cc:73:07:de:d2:be:14:14:b4:
         3a:90:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:41:52 2025 by rpki-client