This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33322d313238203d3e20323733353232.roa
File:                     323830343a386665633a3a2f33322d313238203d3e20323733353232.roa (raw, json)
Hash identifier:          CH0c6KD5vS7JIe2oz9tLcd1EbDYa03o+9DuukSxwopY=
Subject key identifier:   A2:57:15:CB:06:6B:F4:C6:28:3F:9A:3D:BC:64:DE:75:58:39:78:87
Certificate issuer:       /CN=A533BF31ED7FE26A041EB2260858A0F3C9C427A9
Certificate serial:       6E723206B30D761640429EE6B02E86DD813CD16A
Authority key identifier: A5:33:BF:31:ED:7F:E2:6A:04:1E:B2:26:08:58:A0:F3:C9:C4:27:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33322d313238203d3e20323733353232.roa
Signing time:             Mon 01 Dec 2025 23:22:00 +0000
ROA not before:           Mon 01 Dec 2025 23:17:00 +0000
ROA not after:            Mon 30 Nov 2026 23:22:00 +0000
asID:                     273522
IP address blocks:        2804:8fec::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.crl
                          rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:72:32:06:b3:0d:76:16:40:42:9e:e6:b0:2e:86:dd:81:3c:d1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A533BF31ED7FE26A041EB2260858A0F3C9C427A9
        Validity
            Not Before: Dec  1 23:17:00 2025 GMT
            Not After : Nov 30 23:22:00 2026 GMT
        Subject: CN=A25715CB066BF4C6283F9A3DBC64DE7558397887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:fb:07:b3:4f:c6:6f:b7:35:b2:9d:bc:86:
                    23:8b:ec:e2:11:dd:5f:46:b0:96:f1:64:34:81:75:
                    28:1a:cd:fa:dc:a3:bb:48:55:86:f6:8e:81:2e:aa:
                    5c:42:70:d1:9c:61:99:cc:33:be:24:c7:13:c8:33:
                    ad:12:f0:63:02:66:b4:40:df:ca:5c:eb:43:fa:71:
                    d0:83:8b:2e:29:a9:85:81:eb:b1:43:f6:30:65:23:
                    eb:8c:6a:20:ba:26:e5:1d:2e:24:eb:9f:bf:25:11:
                    f6:dd:ac:bf:d2:bf:68:26:e2:82:c1:e2:e4:c0:da:
                    f1:16:45:28:d2:60:b4:a5:6e:f6:f4:b1:70:fc:f3:
                    9e:c3:47:27:7e:0a:86:1d:c5:ba:b5:b5:cc:82:d5:
                    1d:35:05:26:25:df:93:5d:fe:17:76:ce:ee:41:85:
                    21:70:f5:03:30:46:45:f5:3e:c7:25:91:01:fe:92:
                    2e:b0:53:e0:2a:b1:d2:48:a9:fd:99:97:8f:06:fc:
                    de:e6:2e:5b:c5:d4:85:fb:01:6f:e0:62:c0:99:e2:
                    12:6d:52:55:be:52:d0:53:5b:31:a2:ee:09:20:b4:
                    ac:bc:05:ca:aa:3e:25:43:9c:26:cb:42:59:08:a0:
                    e3:f3:b8:c1:e9:2b:27:35:c2:2c:8d:35:68:66:6b:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:57:15:CB:06:6B:F4:C6:28:3F:9A:3D:BC:64:DE:75:58:39:78:87
            X509v3 Authority Key Identifier:
                keyid:A5:33:BF:31:ED:7F:E2:6A:04:1E:B2:26:08:58:A0:F3:C9:C4:27:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A533BF31ED7FE26A041EB2260858A0F3C9C427A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33322d313238203d3e20323733353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fec::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:38:dd:e0:21:23:cd:49:4c:af:e4:94:a5:da:af:ef:17:
         48:19:9d:77:a0:a0:34:4f:b4:99:e4:4e:92:21:ee:df:75:79:
         aa:c0:48:b2:10:d2:47:5d:19:2d:63:a4:a8:53:6d:f4:30:14:
         7a:f7:7d:1c:e9:0a:a7:13:f3:c2:42:e8:0d:3a:55:1a:42:a1:
         54:cb:41:cf:a5:45:e2:76:5a:40:3c:60:4b:02:3b:22:b6:da:
         62:0b:de:f8:5d:3b:e6:50:6b:53:f0:02:8a:93:52:b5:61:2a:
         b8:48:55:a2:13:1e:ae:02:a6:3b:69:af:5e:09:00:46:10:aa:
         0e:c4:6c:c6:98:fe:ce:aa:f9:29:74:76:e2:00:f5:73:f2:a2:
         aa:cf:53:94:4e:40:72:53:27:02:2c:0e:23:11:d7:01:cc:ad:
         a8:f0:26:21:61:3a:66:69:df:be:fe:94:3a:fe:e5:eb:b4:ed:
         9b:e1:dc:66:9c:ef:f3:a6:ab:ea:c1:7f:af:21:c5:4b:5b:b4:
         b6:48:8a:3c:93:fb:8a:fa:03:e0:c0:1e:ae:6d:19:d6:1b:33:
         1f:b8:46:df:f1:8e:d3:83:e7:8a:9d:00:ac:61:81:fb:62:bc:
         3a:88:94:49:c2:ac:7f:18:62:4c:7c:a4:2f:8d:ad:d5:f9:4a:
         c7:89:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:45:19 2025 by rpki-client