This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d3332203d3e20323634393939.roa
File:                     323830343a333133303a3a2f33322d3332203d3e20323634393939.roa (raw, json)
Hash identifier:          T1ZvnheVi7CbxUqZtQdtHJiwLh214+9mEaSdEbIewJ0=
Subject key identifier:   1F:4B:20:0A:61:57:36:ED:F1:45:02:81:AF:93:02:2E:F8:FF:F6:1E
Certificate issuer:       /CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Certificate serial:       59FE3598C7B1BEC34AFE7F8C6174571DEC1C2B34
Authority key identifier: 80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d3332203d3e20323634393939.roa
Signing time:             Tue 09 Dec 2025 16:51:23 +0000
ROA not before:           Tue 09 Dec 2025 16:46:23 +0000
ROA not after:            Tue 08 Dec 2026 16:51:23 +0000
asID:                     264999
IP address blocks:        2804:3130::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 11:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fe:35:98:c7:b1:be:c3:4a:fe:7f:8c:61:74:57:1d:ec:1c:2b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
        Validity
            Not Before: Dec  9 16:46:23 2025 GMT
            Not After : Dec  8 16:51:23 2026 GMT
        Subject: CN=1F4B200A615736EDF1450281AF93022EF8FFF61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:9b:3a:47:86:af:b4:8d:f7:ba:5b:3f:ad:
                    34:a7:17:3d:3f:3e:1a:50:88:89:95:c5:4f:44:16:
                    ef:4f:6c:d6:a5:31:31:a7:07:4b:0d:a6:da:98:8c:
                    5f:9b:ef:4c:34:35:4e:fd:d4:c8:41:44:48:ed:fb:
                    ae:6e:b6:53:c3:87:5b:d3:87:78:5c:99:51:d7:d0:
                    0b:67:9f:15:b7:47:f8:89:b5:92:4e:b1:45:63:ca:
                    b4:07:ac:89:26:3a:ba:e9:fd:09:9e:32:30:ae:75:
                    3e:ba:d6:b9:a5:6a:fc:5a:d7:11:b2:dc:cb:99:49:
                    73:3e:60:7f:ff:68:f8:87:98:9c:74:20:b7:13:b4:
                    6b:40:82:bf:c4:6a:b6:88:23:fd:fe:f9:11:fd:1c:
                    9a:bf:db:18:65:7b:14:ec:f1:0c:ac:b2:d4:1f:f7:
                    4f:8f:a4:f8:83:14:9c:55:86:da:d9:b8:53:0b:30:
                    b7:4b:58:29:6d:fb:e1:7f:2a:8d:45:85:3c:e5:61:
                    71:23:22:8b:aa:8c:1a:f8:ec:fa:af:4d:12:e4:65:
                    41:5a:87:27:c5:0a:ad:e5:1a:c7:13:61:f8:11:2f:
                    d3:30:a1:f3:9a:c8:90:33:e0:21:64:77:ee:0f:d5:
                    46:c8:7b:1a:30:6b:f0:bb:d6:5e:dc:8d:4f:2f:94:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4B:20:0A:61:57:36:ED:F1:45:02:81:AF:93:02:2E:F8:FF:F6:1E
            X509v3 Authority Key Identifier:
                keyid:80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d3332203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3130::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:6b:b9:3a:d4:2f:9f:9a:bb:60:b7:fd:f7:93:4f:2e:3e:da:
         7e:2a:40:ee:7a:99:70:f0:31:98:fd:02:df:28:7a:33:55:59:
         ac:45:c9:38:85:df:c5:6d:99:1b:ef:c1:b1:72:83:04:b3:1a:
         d4:e5:3d:7f:c7:c1:4f:b2:bf:d0:76:51:af:94:69:71:fe:d2:
         aa:1c:e4:16:6c:39:df:17:f0:4f:62:68:3d:af:7e:2a:d7:b5:
         1f:4a:0b:c9:b5:20:01:97:2f:51:77:e5:36:91:1a:eb:68:39:
         30:7b:91:26:8e:47:ad:c2:bf:06:0c:53:22:12:da:ae:dc:45:
         0c:5b:02:84:6f:2a:1c:38:ae:91:e7:9b:ff:d6:ae:94:55:c5:
         9c:aa:98:84:4a:7d:e5:af:5b:79:32:02:3d:ae:59:00:40:cf:
         93:81:a1:0c:db:26:53:28:4f:aa:c6:0a:a0:49:fc:bf:6f:90:
         e4:c0:e0:7b:ae:c3:6d:1c:90:43:15:01:b6:90:eb:54:91:41:
         bd:a9:48:b8:81:36:b3:28:8f:61:0c:9b:3f:7b:a4:1d:0b:d7:
         4a:8a:19:66:d5:ec:81:70:84:f4:76:b7:9e:a9:31:9e:c3:d3:
         e7:cc:e2:f6:ea:42:55:a0:49:99:2a:02:e5:2e:4b:45:4f:2c:
         36:5b:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:09:54 2025 by rpki-client