This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/323830343a386534633a3a2f33322d3332203d3e20323733343136.roa
File:                     323830343a386534633a3a2f33322d3332203d3e20323733343136.roa (raw, json)
Hash identifier:          jXyfMkJU3ek+1bbL+nu9rLvdbXc6/dJbO/kAaI32Cas=
Subject key identifier:   64:20:F6:67:63:0A:04:14:3A:69:A1:F3:05:9B:AE:2F:2F:2D:F4:98
Certificate issuer:       /CN=1639FF79B1B8746C4C0F98914F5B74DA411A7792
Certificate serial:       17317206C559F36955E3ED4E1D94E7C54861AF41
Authority key identifier: 16:39:FF:79:B1:B8:74:6C:4C:0F:98:91:4F:5B:74:DA:41:1A:77:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1639FF79B1B8746C4C0F98914F5B74DA411A7792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/323830343a386534633a3a2f33322d3332203d3e20323733343136.roa
Signing time:             Wed 17 Dec 2025 20:44:50 +0000
ROA not before:           Wed 17 Dec 2025 20:39:50 +0000
ROA not after:            Wed 16 Dec 2026 20:44:50 +0000
asID:                     273416
IP address blocks:        2804:8e4c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/1639FF79B1B8746C4C0F98914F5B74DA411A7792.crl
                          rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/1639FF79B1B8746C4C0F98914F5B74DA411A7792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1639FF79B1B8746C4C0F98914F5B74DA411A7792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 19:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:31:72:06:c5:59:f3:69:55:e3:ed:4e:1d:94:e7:c5:48:61:af:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639FF79B1B8746C4C0F98914F5B74DA411A7792
        Validity
            Not Before: Dec 17 20:39:50 2025 GMT
            Not After : Dec 16 20:44:50 2026 GMT
        Subject: CN=6420F667630A04143A69A1F3059BAE2F2F2DF498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:cc:c9:a8:2b:e0:f7:04:8d:8d:68:15:df:
                    f2:c4:10:95:0e:bc:08:1c:85:d6:fd:f6:02:a4:95:
                    42:6b:d4:ce:7a:fb:a0:bc:ad:f5:46:fe:89:8a:4d:
                    f2:85:82:e2:38:c3:77:20:0a:39:59:24:ec:70:0f:
                    50:3e:12:e4:22:c7:e1:6f:25:0e:fa:33:7a:2e:01:
                    18:6c:55:8d:b6:bb:0d:fc:82:dc:a6:84:05:e5:c6:
                    9a:7f:92:d0:7c:0a:24:98:a8:98:9b:fb:68:13:65:
                    68:0c:3c:a4:a0:9d:52:e5:fa:75:e5:23:80:d6:89:
                    55:13:b5:dc:2d:63:41:f2:96:12:35:b8:3c:61:dc:
                    33:13:27:7d:c5:55:03:7c:0e:27:34:a7:a5:c0:9a:
                    ac:b7:5b:d4:ee:87:a8:b0:73:33:56:1e:4b:e4:f2:
                    47:b7:8c:79:f6:15:5e:5a:63:62:fc:5c:72:90:71:
                    71:ae:a7:79:56:8e:8d:ae:b2:45:ec:c7:0b:9a:84:
                    01:2d:4c:f3:14:c0:d8:79:88:59:76:80:d8:2a:cf:
                    23:6c:36:d4:b3:ab:34:e8:d1:4e:10:55:b6:2c:28:
                    d7:30:c6:86:57:03:29:f6:5b:83:05:a3:74:a7:d1:
                    d1:af:11:6b:60:7f:50:3a:c1:56:17:8f:31:ef:38:
                    9a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:20:F6:67:63:0A:04:14:3A:69:A1:F3:05:9B:AE:2F:2F:2D:F4:98
            X509v3 Authority Key Identifier:
                keyid:16:39:FF:79:B1:B8:74:6C:4C:0F:98:91:4F:5B:74:DA:41:1A:77:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/1639FF79B1B8746C4C0F98914F5B74DA411A7792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1639FF79B1B8746C4C0F98914F5B74DA411A7792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcwtmnceTAHP9UPnnvuvPZYPok6J4xz6R9ss7fZhuSfi/0/323830343a386534633a3a2f33322d3332203d3e20323733343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:fd:91:a2:c8:9f:69:a7:db:45:96:1f:0e:d5:32:e1:9b:00:
         26:53:96:77:21:91:b2:66:49:65:4a:a1:f0:5f:c2:2d:b9:87:
         e3:b2:23:18:66:f8:37:6f:c2:11:61:75:c9:7e:2b:71:5b:70:
         00:d9:7a:6a:c8:bc:8b:05:94:c5:9a:77:94:12:b9:ac:44:5f:
         1a:df:6d:08:ca:12:f8:76:5a:4a:ae:87:62:a1:45:98:59:fb:
         3b:d8:8c:99:13:07:7d:34:0a:76:4c:16:cd:8a:9d:48:ff:f7:
         3a:06:30:be:9a:56:72:de:2e:73:1e:3b:81:f4:d0:4c:b0:8c:
         91:fd:57:ed:13:63:9a:d3:48:4f:c6:90:05:dc:10:44:9c:b7:
         43:f8:3c:31:fe:b2:73:ac:3c:0d:79:cd:ce:e7:8c:9f:51:7b:
         62:fa:58:f7:4e:49:2e:cc:eb:09:2d:5f:d2:ec:09:f5:3e:b6:
         24:f2:e0:cb:93:17:f8:30:e5:bb:e0:ad:3e:c6:87:2a:2f:7e:
         9b:26:8e:a4:2d:86:d9:5b:26:d1:17:66:6b:14:1c:53:be:c4:
         c7:61:48:0d:21:82:bf:40:07:dd:7c:de:97:10:a8:30:7a:3e:
         fb:3c:9c:7c:e2:61:7b:ac:18:53:26:40:af:64:ea:f3:71:3f:
         3c:50:4a:a7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFzFyBsVZ82lV4+1OHZTnxUhhr0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYzOUZGNzlCMUI4NzQ2QzRDMEY5ODkxNEY1Qjc0REE0
MTFBNzc5MjAeFw0yNTEyMTcyMDM5NTBaFw0yNjEyMTYyMDQ0NTBaMDMxMTAvBgNV
BAMTKDY0MjBGNjY3NjMwQTA0MTQzQTY5QTFGMzA1OUJBRTJGMkYyREY0OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXczJqCvg9wSNjWgV3/LEEJUO
vAgchdb99gKklUJr1M56+6C8rfVG/omKTfKFguI4w3cgCjlZJOxwD1A+EuQix+Fv
JQ76M3ouARhsVY22uw38gtymhAXlxpp/ktB8CiSYqJib+2gTZWgMPKSgnVLl+nXl
I4DWiVUTtdwtY0HylhI1uDxh3DMTJ33FVQN8Dic0p6XAmqy3W9Tuh6iwczNWHkvk
8ke3jHn2FV5aY2L8XHKQcXGup3lWjo2uskXsxwuahAEtTPMUwNh5iFl2gNgqzyNs
NtSzqzTo0U4QVbYsKNcwxoZXAyn2W4MFo3Sn0dGvEWtgf1A6wVYXjzHvOJrbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZCD2Z2MKBBQ6aaHzBZuuLy8t9JgwHwYDVR0j
BBgwFoAUFjn/ebG4dGxMD5iRT1t02kEad5IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2N3dG1uY2VUQUhQOVVQbm52dXZQWllQb2s2SjR4ejZSOXNzN2ZaaHVT
ZmkvMC8xNjM5RkY3OUIxQjg3NDZDNEMwRjk4OTE0RjVCNzREQTQxMUE3NzkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2MzlGRjc5QjFCODc0NkM0
QzBGOTg5MTRGNUI3NERBNDExQTc3OTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Njd3RtbmNlVEFIUDlVUG5udnV2UFpZUG9rNko0eHo2UjlzczdmWmh1U2ZpLzAv
MzIzODMwMzQzYTM4NjUzNDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASOTDANBgkqhkiG9w0BAQsFAAOCAQEAHv2Rosif
aafbRZYfDtUy4ZsAJlOWdyGRsmZJZUqh8F/CLbmH47IjGGb4N2/CEWF1yX4rcVtw
ANl6asi8iwWUxZp3lBK5rERfGt9tCMoS+HZaSq6HYqFFmFn7O9iMmRMHfTQKdkwW
zYqdSP/3OgYwvppWct4ucx47gfTQTLCMkf1X7RNjmtNIT8aQBdwQRJy3Q/g8Mf6y
c6w8DXnNzueMn1F7YvpY905JLszrCS1f0uwJ9T62JPLgy5MX+DDlu+CtPsaHKi9+
myaOpC2G2Vsm0RdmaxQcU77Ex2FIDSGCv0AH3XzelxCoMHo++zycfOJhe6wYUyZA
r2Tq83E/PFBKpw==
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:24:44 2025 by rpki-client