This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa
File:                     323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa (raw, json)
Hash identifier:          M/+rPEIvFpgPRoG0g1W2Flno3RgLrCybA79gkgTlzcE=
Subject key identifier:   74:47:00:FD:E2:78:3B:E4:60:29:80:58:CE:3B:01:02:4B:C3:18:F6
Certificate issuer:       /CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E
Certificate serial:       39E024D12A1804F05B8FC17694BD7974608FC516
Authority key identifier: C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa
Signing time:             Sun 23 Nov 2025 03:03:55 +0000
ROA not before:           Sun 23 Nov 2025 02:58:55 +0000
ROA not after:            Sun 22 Nov 2026 03:03:55 +0000
asID:                     272677
IP address blocks:        2804:86f4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 18:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e0:24:d1:2a:18:04:f0:5b:8f:c1:76:94:bd:79:74:60:8f:c5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E
        Validity
            Not Before: Nov 23 02:58:55 2025 GMT
            Not After : Nov 22 03:03:55 2026 GMT
        Subject: CN=744700FDE2783BE460298058CE3B01024BC318F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:b1:37:a6:95:96:06:7a:ce:c0:b9:61:2b:
                    2f:84:91:cf:8e:fb:ce:5d:83:3b:34:bd:f9:b2:18:
                    e9:97:a8:ff:57:ca:9c:9f:0b:d0:32:8a:0e:6b:af:
                    db:61:5b:f3:a7:37:2f:fd:5c:06:84:61:dd:22:43:
                    67:4b:50:0e:7c:45:9e:b8:37:95:33:52:91:df:70:
                    43:bf:84:f4:51:5d:36:7a:b9:5f:f6:57:5c:6e:5f:
                    64:fc:9b:bd:d8:83:1e:43:ae:cb:d2:07:dd:81:56:
                    fc:0d:60:d8:3f:b0:60:ac:75:33:10:71:ac:1e:cb:
                    6e:3e:85:a9:2a:fd:8b:47:36:a0:4e:dd:c2:22:3a:
                    6f:a7:f4:8f:69:01:9f:47:90:2c:8a:f8:1a:93:64:
                    60:c3:28:c0:15:3f:e5:3b:63:08:43:9b:d7:14:80:
                    e0:7f:79:f3:78:25:cf:1b:af:ff:bf:67:b0:d7:fb:
                    03:67:d2:41:65:bf:15:08:f0:5e:8c:d8:82:37:a6:
                    53:25:09:3b:1f:9d:e6:8c:33:8d:d0:ea:1d:9f:38:
                    fb:09:4c:36:3e:d1:2b:ed:29:fc:db:12:29:b2:5c:
                    10:09:7b:f7:71:1d:5a:81:8c:b8:c6:c6:45:eb:9b:
                    49:e3:dc:7e:0a:b0:37:dd:4b:63:1b:34:36:d1:de:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:47:00:FD:E2:78:3B:E4:60:29:80:58:CE:3B:01:02:4B:C3:18:F6
            X509v3 Authority Key Identifier:
                keyid:C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:93:06:a0:7b:a7:18:54:c5:b0:cf:6b:1b:c8:b9:58:08:
         b3:1b:18:70:91:69:72:68:a2:d8:f4:e3:f6:04:ae:b5:ec:c2:
         f9:75:ad:9a:36:2e:72:eb:bc:62:67:e0:3f:12:56:cd:84:d5:
         b2:60:50:4d:61:3d:f5:45:0d:9b:4e:c3:4b:30:c2:33:3a:8d:
         79:ea:49:7e:d9:b2:1b:8b:d1:04:d5:57:1a:7c:d7:c4:80:0a:
         1e:dd:9f:72:36:b4:c5:9b:dd:3b:93:1b:5b:09:01:ca:2a:40:
         f2:62:0a:30:b6:ee:5f:f8:8c:5e:14:e4:d5:6c:10:38:5b:d1:
         f7:95:62:7f:fc:6b:79:60:06:39:36:b1:06:86:48:e3:12:b3:
         25:e6:82:00:a1:fc:bf:9d:60:fd:55:e1:db:84:99:e9:a0:1a:
         3c:55:16:3a:54:1b:97:42:b5:a2:30:33:40:ea:ce:f6:6b:20:
         b7:c2:12:20:da:b6:ad:f4:a3:f6:ad:e7:46:a9:38:3c:eb:59:
         9f:8c:03:5b:60:b1:de:54:a6:5a:42:7f:c8:c3:da:fa:f3:f3:
         73:7a:05:f4:73:55:5e:ca:10:8c:17:89:64:97:73:07:03:b3:
         33:af:90:df:66:9f:22:a8:df:61:30:0a:27:c2:72:09:bc:43:
         ec:9e:42:62
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOeAk0SoYBPBbj8F2lL15dGCPxRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFN0E0NkFFRTU2OTVERUIwMTVGRjQ1QkE2MDIzMjNB
OTNBQTUwRTAeFw0yNTExMjMwMjU4NTVaFw0yNjExMjIwMzAzNTVaMDMxMTAvBgNV
BAMTKDc0NDcwMEZERTI3ODNCRTQ2MDI5ODA1OENFM0IwMTAyNEJDMzE4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKbE3ppWWBnrOwLlhKy+Ekc+O
+85dgzs0vfmyGOmXqP9XypyfC9Ayig5rr9thW/OnNy/9XAaEYd0iQ2dLUA58RZ64
N5UzUpHfcEO/hPRRXTZ6uV/2V1xuX2T8m73Ygx5DrsvSB92BVvwNYNg/sGCsdTMQ
cawey24+hakq/YtHNqBO3cIiOm+n9I9pAZ9HkCyK+BqTZGDDKMAVP+U7YwhDm9cU
gOB/efN4Jc8br/+/Z7DX+wNn0kFlvxUI8F6M2II3plMlCTsfneaMM43Q6h2fOPsJ
TDY+0SvtKfzbEimyXBAJe/dxHVqBjLjGxkXrm0nj3H4KsDfdS2MbNDbR3rerAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUdEcA/eJ4O+RgKYBYzjsBAkvDGPYwHwYDVR0j
BBgwFoAUyeekau5Wld6wFf9FumAjI6k6pQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK
UlQvMC9DOUU3QTQ2QUVFNTY5NURFQjAxNUZGNDVCQTYwMjMyM0E5M0FBNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RTdBNDZBRUU1Njk1REVC
MDE1RkY0NUJBNjAyMzIzQTkzQUE1MEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzAv
MzIzODMwMzQzYTM4MzY2NjM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM2MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhvTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBa8JMGoHunGFTFsM9rG8i5WAizGxhwkWlyaKLY9OP2BK617ML5da2aNi5y
67xiZ+A/ElbNhNWyYFBNYT31RQ2bTsNLMMIzOo156kl+2bIbi9EE1VcafNfEgAoe
3Z9yNrTFm907kxtbCQHKKkDyYgowtu5f+IxeFOTVbBA4W9H3lWJ//Gt5YAY5NrEG
hkjjErMl5oIAofy/nWD9VeHbhJnpoBo8VRY6VBuXQrWiMDNA6s72ayC3whIg2rat
9KP2redGqTg861mfjANbYLHeVKZaQn/Iw9r68/NzegX0c1VeyhCMF4lkl3MHA7Mz
r5DfZp8iqN9hMAonwnIJvEPsnkJi
-----END CERTIFICATE-----
Generated at Mon Dec 8 09:31:39 2025 by rpki-client