This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/323830343a353831343a3a2f33322d3438203d3e20323638313035.roa
File:                     323830343a353831343a3a2f33322d3438203d3e20323638313035.roa (raw, json)
Hash identifier:          NWuRzxXOMGeJX9bFet58bsbVwbdLz0VBUoS5rbr5vK0=
Subject key identifier:   86:58:5E:41:62:7D:EF:94:C3:BA:2D:4D:B5:21:50:56:36:F9:A4:27
Certificate issuer:       /CN=9D66B56B4AFD93AF70B202794EBF969A62E29886
Certificate serial:       565186DDF7B5C8C80C402CDE3C937DE7C86D36F8
Authority key identifier: 9D:66:B5:6B:4A:FD:93:AF:70:B2:02:79:4E:BF:96:9A:62:E2:98:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D66B56B4AFD93AF70B202794EBF969A62E29886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/323830343a353831343a3a2f33322d3438203d3e20323638313035.roa
Signing time:             Thu 13 Nov 2025 15:23:39 +0000
ROA not before:           Thu 13 Nov 2025 15:18:39 +0000
ROA not after:            Thu 12 Nov 2026 15:23:39 +0000
asID:                     268105
IP address blocks:        2804:5814::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/9D66B56B4AFD93AF70B202794EBF969A62E29886.crl
                          rsync://rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/9D66B56B4AFD93AF70B202794EBF969A62E29886.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D66B56B4AFD93AF70B202794EBF969A62E29886.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 18:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:51:86:dd:f7:b5:c8:c8:0c:40:2c:de:3c:93:7d:e7:c8:6d:36:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D66B56B4AFD93AF70B202794EBF969A62E29886
        Validity
            Not Before: Nov 13 15:18:39 2025 GMT
            Not After : Nov 12 15:23:39 2026 GMT
        Subject: CN=86585E41627DEF94C3BA2D4DB521505636F9A427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:4d:90:00:ed:04:71:4c:bb:3a:19:bb:a5:
                    eb:4c:fb:89:79:9f:f5:37:87:0b:ec:17:d4:4c:05:
                    5d:64:25:5a:d0:e9:24:c8:68:b8:28:92:0b:6c:e7:
                    8b:e8:b8:f1:2e:27:2a:f5:26:01:88:98:30:0c:ee:
                    c7:a8:d1:31:21:5f:ac:5f:e8:36:f4:46:50:39:ed:
                    14:06:88:43:0c:a1:c0:05:1c:ef:6b:ff:49:d6:ad:
                    fa:14:2b:1c:30:e5:17:83:54:c6:7c:37:7f:42:58:
                    59:a9:24:c2:36:fa:e8:47:91:25:5b:da:cd:00:85:
                    f5:36:94:35:3a:1f:e7:e7:d4:22:e8:ed:25:f4:39:
                    63:40:a8:17:63:f5:d7:95:b5:a7:aa:59:9e:15:c9:
                    7c:15:72:1b:d8:be:5f:df:47:c2:c0:e8:73:65:a5:
                    cf:0f:fe:f3:cf:9e:e4:0a:fc:e5:54:0e:47:55:4e:
                    2a:c2:c1:10:2c:49:7e:0e:fa:c1:2e:6e:7b:2d:bf:
                    5e:4e:1e:50:ff:9f:19:ae:8e:93:63:0b:6d:42:9c:
                    b7:f7:7d:18:1b:24:89:b4:cf:56:40:e5:ed:90:2b:
                    94:b4:c6:05:43:d5:b5:a7:32:7f:2e:f9:2e:2a:38:
                    45:9f:92:d4:8f:f6:a9:b6:e2:5f:43:28:ea:73:46:
                    ed:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:58:5E:41:62:7D:EF:94:C3:BA:2D:4D:B5:21:50:56:36:F9:A4:27
            X509v3 Authority Key Identifier:
                keyid:9D:66:B5:6B:4A:FD:93:AF:70:B2:02:79:4E:BF:96:9A:62:E2:98:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/9D66B56B4AFD93AF70B202794EBF969A62E29886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D66B56B4AFD93AF70B202794EBF969A62E29886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/323830343a353831343a3a2f33322d3438203d3e20323638313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5814::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:06:5e:40:af:ad:2d:9c:b4:0a:7a:fd:88:f9:5e:e9:6d:
         4d:92:db:73:72:62:c6:a3:18:7e:56:ae:6e:5a:c9:bb:d3:76:
         49:2d:bb:f8:57:1f:79:07:29:8b:fe:12:5b:91:67:bb:67:65:
         09:49:88:2d:f3:ab:a7:1e:95:18:3b:50:52:2c:21:f3:01:a9:
         42:89:db:65:c2:87:a3:6f:d6:18:18:41:96:3a:9a:9e:96:be:
         8c:5b:9d:e5:c3:24:94:b1:c7:df:22:73:55:51:cb:1e:9f:29:
         55:9d:e1:15:10:8b:ea:63:b2:3d:9d:59:1a:e5:7f:87:a9:e3:
         16:2a:e1:d2:0b:17:1e:27:0c:47:d4:c4:22:e9:25:04:96:46:
         c7:77:f6:91:bc:1f:f4:35:07:2b:cf:9d:d9:aa:74:35:00:d7:
         e9:9a:38:97:3a:92:f1:31:0b:15:e0:30:0c:55:6f:d3:61:97:
         64:22:32:67:4c:f4:ff:00:af:c6:5d:41:67:ea:3e:02:b0:82:
         a4:7a:79:01:05:09:da:74:60:30:95:cb:ea:5b:4a:03:36:66:
         e0:61:b4:45:cc:28:1a:f3:29:c4:60:85:3e:7b:2c:6c:e0:91:
         28:ec:92:41:6f:83:ec:89:9a:e1:20:67:08:e2:6f:5a:ca:be:
         ff:9d:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:44:57 2025 by rpki-client