This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3438203d3e20323730363131.roa
File:                     323830343a366561383a3a2f33322d3438203d3e20323730363131.roa (raw, json)
Hash identifier:          wz8TGnxv2/qOskSYTn0i3OS+47RSWT4cKKWw2ATTDCs=
Subject key identifier:   0A:EB:A5:BB:3D:BD:D6:D3:09:C2:58:22:3D:96:78:2D:AA:83:69:25
Certificate issuer:       /CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
Certificate serial:       3677F143E4665A1B3B348EA5EB3C636BB43C992E
Authority key identifier: 0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3438203d3e20323730363131.roa
Signing time:             Mon 22 Dec 2025 13:11:47 +0000
ROA not before:           Mon 22 Dec 2025 13:06:47 +0000
ROA not after:            Mon 21 Dec 2026 13:11:47 +0000
asID:                     270611
IP address blocks:        2804:6ea8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl
                          rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 13:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:77:f1:43:e4:66:5a:1b:3b:34:8e:a5:eb:3c:63:6b:b4:3c:99:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
        Validity
            Not Before: Dec 22 13:06:47 2025 GMT
            Not After : Dec 21 13:11:47 2026 GMT
        Subject: CN=0AEBA5BB3DBDD6D309C258223D96782DAA836925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:c9:3d:14:1c:99:b3:e8:e0:2e:08:e3:05:
                    d9:d6:ba:1b:32:34:2d:9f:56:27:17:d7:a3:e3:88:
                    73:9f:ab:3c:3e:ff:f8:36:00:cf:b1:54:68:b0:95:
                    b6:cb:d8:c9:c0:5e:a9:aa:b9:fc:1e:9a:8e:82:74:
                    68:84:1a:dd:e8:56:61:a7:a9:3d:6e:55:36:d9:09:
                    ce:08:a0:fb:50:64:8b:92:21:b2:0c:46:77:9b:2d:
                    37:98:ca:5c:89:0e:f7:aa:bd:6b:79:57:10:7d:6a:
                    73:74:ee:6d:90:46:ae:39:27:df:74:87:f5:61:fb:
                    21:81:55:52:ce:01:f0:19:15:5c:62:1c:51:7c:33:
                    be:06:96:66:c2:53:10:d1:8e:44:57:a4:30:e9:a9:
                    c0:fc:ac:ee:64:83:29:de:54:bc:19:d0:0c:57:7b:
                    7f:50:71:7a:f4:99:ad:78:fc:71:7d:17:40:5c:ca:
                    2c:4d:79:f3:ee:60:ae:ea:4a:74:f0:1d:fe:42:59:
                    45:c8:59:58:90:98:ca:ad:9b:12:d6:94:32:e7:15:
                    0a:d9:a2:d7:3b:e4:93:8d:92:04:a4:9d:86:72:9b:
                    a9:a9:14:68:94:ec:25:f4:aa:d4:76:67:21:9c:df:
                    45:c1:29:6f:0f:2f:2e:c6:8f:0d:8c:6b:be:ef:3a:
                    93:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EB:A5:BB:3D:BD:D6:D3:09:C2:58:22:3D:96:78:2D:AA:83:69:25
            X509v3 Authority Key Identifier:
                keyid:0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3438203d3e20323730363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:a8:14:07:57:72:78:df:1a:1d:a3:37:27:90:e4:17:c0:bd:
         26:b7:e0:d8:7b:e2:f4:7e:e4:79:55:37:20:cb:c9:66:0e:a1:
         ae:25:70:ff:eb:09:8b:c8:0f:bc:4d:e5:be:69:42:78:76:f9:
         ad:f8:67:ff:32:cc:05:36:07:a4:c0:c4:b9:15:dc:e7:66:6f:
         88:6f:0d:18:2f:3c:f3:ee:88:83:96:7b:5f:bd:2d:bc:af:10:
         09:7c:42:fe:42:56:b6:3f:7c:79:a2:2b:8c:c5:2b:ae:88:f8:
         c0:73:fa:4b:46:98:ec:eb:31:1c:82:d7:00:16:29:4a:03:60:
         e1:5f:3a:4a:21:de:1e:c2:62:cb:57:a6:a9:34:d9:19:e5:79:
         75:9f:f2:9f:9f:30:1b:b0:27:02:50:b1:dc:81:30:7e:dc:3f:
         a6:09:4d:b6:7b:4b:07:75:ee:c5:d9:19:8b:f0:83:07:e1:e8:
         dd:35:f3:11:7e:69:51:8d:c5:b1:53:ad:29:f9:8d:eb:20:ca:
         a1:10:cc:a9:d5:0b:87:17:79:fc:fe:6d:fe:a8:c7:f0:bc:76:
         d0:d7:2e:eb:ed:38:1d:e5:a4:37:3a:57:44:76:7b:c2:74:e9:
         2d:b5:65:19:fe:48:2d:6d:e6:ec:b1:c7:dd:cc:0b:ba:8b:43:
         6b:b9:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:49:21 2025 by rpki-client