This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          76IrB6Bm4t6rKGvSR3dHkBBpYv+/jUOxBIJLCuDkdJo=
Subject key identifier:   EB:51:FB:87:A3:EE:86:0F:13:1F:38:2E:DC:FF:79:2A:9F:96:4A:E6
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       444FD667E6D6CEA6E613346DB8BDFD7E8143DD7B
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Mon 15 Dec 2025 12:56:06 +0000
ROA not before:           Mon 15 Dec 2025 12:51:06 +0000
ROA not after:            Mon 14 Dec 2026 12:56:06 +0000
asID:                     268144
IP address blocks:        2804:58b0:138::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 03:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4f:d6:67:e6:d6:ce:a6:e6:13:34:6d:b8:bd:fd:7e:81:43:dd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Dec 15 12:51:06 2025 GMT
            Not After : Dec 14 12:56:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:01:79:97:33:46:29:2d:8f:db:bf:59:16:
                    b0:1f:7b:a9:5e:ac:f3:72:4a:85:13:d6:fe:c4:00:
                    a0:e4:67:ce:a0:02:50:50:e0:3a:e7:f1:28:57:7e:
                    9d:b6:c2:d7:92:c9:cd:82:c3:9c:17:7b:f1:25:96:
                    c4:78:d3:b5:90:1b:05:b0:29:61:c5:aa:81:38:4a:
                    cf:0f:00:11:94:d6:34:05:5d:16:53:c6:c7:20:27:
                    0a:e4:71:76:8e:10:d9:c3:97:9a:c2:12:5c:a7:e7:
                    32:ac:b1:35:53:77:b8:ea:45:6d:1e:5d:db:5a:5a:
                    93:6e:97:5a:82:a4:7f:c5:8b:ad:82:5f:bf:56:7a:
                    8b:5e:cf:4d:0f:1e:81:d5:7c:23:8e:a0:1e:d8:52:
                    66:38:1d:21:0b:97:63:e4:77:cd:5b:1d:60:c8:12:
                    ad:eb:3c:eb:b6:f0:87:92:63:de:e4:60:4f:52:73:
                    2e:c2:e4:41:20:99:7b:84:29:35:18:05:60:4c:5f:
                    b1:2d:55:9d:73:b1:65:db:cb:a6:75:3b:b7:1b:e0:
                    dc:07:cf:df:97:a1:f7:1c:84:09:0c:8c:6f:86:6c:
                    8e:a1:14:5e:e4:f8:22:c2:91:80:69:40:ae:41:85:
                    6e:82:1c:ca:cf:e9:e8:b7:68:02:e4:78:ca:f5:a6:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:FB:87:A3:EE:86:0F:13:1F:38:2E:DC:FF:79:2A:9F:96:4A:E6
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:138::/46

    Signature Algorithm: sha256WithRSAEncryption
         63:c0:56:39:95:81:22:fd:01:a8:ca:d8:12:60:56:c4:a6:7e:
         08:ec:d1:fd:0d:a5:b3:10:d7:b0:fc:f7:8c:9a:02:63:cd:c8:
         cd:f2:9b:05:75:21:cf:0c:af:16:da:14:fd:f2:1c:a4:e9:71:
         23:67:e0:20:2c:5e:05:e8:85:34:e7:c2:e7:5d:3d:87:0e:d9:
         b3:df:86:22:d8:1b:4a:f3:24:ab:bd:0c:9a:cc:2e:dc:1e:4e:
         bd:b3:c6:3a:f2:e1:29:65:55:4d:1d:67:de:76:65:bd:5e:0c:
         68:2b:00:4a:e2:5e:99:d4:c1:50:ed:09:a1:97:60:48:58:da:
         41:aa:06:df:27:0c:83:92:ca:13:13:3d:04:36:91:f4:f5:a8:
         a9:49:f6:d8:72:bf:0a:90:9c:ac:4e:ec:69:2c:d3:fd:50:f5:
         71:c6:8a:35:88:9d:e2:bb:ca:56:43:0d:9c:87:16:b5:c7:7d:
         ce:6a:ee:ca:82:f1:c8:4a:df:8e:b9:42:fb:54:c0:f2:da:57:
         a4:2b:8c:a5:4d:2a:55:9f:04:2a:c2:8d:76:4a:fb:f2:bf:ed:
         00:29:27:2a:77:e9:54:b8:5a:22:73:05:3d:06:ac:bb:64:43:
         ac:f4:e3:4d:a9:96:f8:ca:8a:ec:10:3f:8e:1b:44:3f:86:54:
         be:fd:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:58:30 2025 by rpki-client