This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/323830343a313334383a3a2f33322d3334203d3e20323633353236.roa
File:                     323830343a313334383a3a2f33322d3334203d3e20323633353236.roa (raw, json)
Hash identifier:          C8bnC2zehqQdvmICnmR4pIAdUF6Qj8FkzdfSh0yGvY0=
Subject key identifier:   B8:DB:17:B8:3C:75:14:7B:49:17:99:44:09:1D:67:F3:38:8A:F7:82
Certificate issuer:       /CN=9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244
Certificate serial:       1FA8E8E281D7FB8E1E784066CF27A84157475CF0
Authority key identifier: 9B:E6:EE:B5:B2:3D:DE:07:CD:98:C8:E0:E8:4C:9F:F0:A1:9D:42:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/323830343a313334383a3a2f33322d3334203d3e20323633353236.roa
Signing time:             Thu 20 Nov 2025 17:12:41 +0000
ROA not before:           Thu 20 Nov 2025 17:07:41 +0000
ROA not after:            Thu 19 Nov 2026 17:12:41 +0000
asID:                     263526
IP address blocks:        2804:1348::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.crl
                          rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a8:e8:e2:81:d7:fb:8e:1e:78:40:66:cf:27:a8:41:57:47:5c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244
        Validity
            Not Before: Nov 20 17:07:41 2025 GMT
            Not After : Nov 19 17:12:41 2026 GMT
        Subject: CN=B8DB17B83C75147B49179944091D67F3388AF782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0b:ca:30:d6:b5:14:2b:91:6a:d0:c3:81:41:
                    50:d5:ea:a6:d7:c7:6c:02:8d:30:3d:2a:2a:de:a3:
                    17:24:5a:a6:20:08:e3:07:ec:c7:1c:8e:8b:b5:f3:
                    8f:89:ec:be:56:79:bf:f9:42:11:00:a6:e0:74:b8:
                    65:d1:c1:df:67:c3:89:ea:69:d2:73:c9:41:80:1f:
                    be:f2:dd:43:ff:03:86:da:51:62:e6:c0:b6:59:f9:
                    ae:64:47:b0:99:bc:6e:f2:09:e9:36:cd:b4:52:d7:
                    28:c9:b1:f8:a5:8d:34:04:54:e8:40:32:1f:2f:eb:
                    a2:ed:22:67:27:db:f5:b5:8b:56:37:7f:a9:09:4b:
                    d2:85:00:e0:c2:0d:e0:30:40:0f:c2:af:b0:94:8e:
                    c1:25:ff:f9:ff:e4:44:6a:0b:02:7a:3d:40:41:2d:
                    89:0b:3f:c1:11:a4:8f:99:15:c9:35:ee:ec:5f:82:
                    2c:2c:02:a5:ad:b8:a7:35:6a:27:16:6f:01:1c:80:
                    d6:f1:16:c8:42:0c:8d:9b:ab:5d:71:dd:e7:7c:fc:
                    38:e1:96:57:53:7d:ea:c5:03:bb:ba:19:4d:d1:29:
                    13:78:2c:15:94:5c:f9:1d:ea:86:e7:92:8e:9e:89:
                    cf:80:15:f0:f2:44:25:22:df:d2:60:d0:41:df:f3:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DB:17:B8:3C:75:14:7B:49:17:99:44:09:1D:67:F3:38:8A:F7:82
            X509v3 Authority Key Identifier:
                keyid:9B:E6:EE:B5:B2:3D:DE:07:CD:98:C8:E0:E8:4C:9F:F0:A1:9D:42:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE6EEB5B23DDE07CD98C8E0E84C9FF0A19D4244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/323830343a313334383a3a2f33322d3334203d3e20323633353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1348::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:12:b3:db:2f:41:3b:c6:f0:4f:90:fe:7b:05:04:0d:87:34:
         10:26:8c:1f:48:83:b7:47:ed:99:b3:42:87:f0:6d:9f:91:16:
         91:62:b8:6d:af:97:9b:9d:54:f0:b0:c4:c2:6a:75:82:36:ca:
         67:75:4b:e2:a4:bf:dc:6b:bf:be:2e:ae:8f:a1:86:bc:02:2d:
         0c:ff:ab:35:e1:5e:5a:d5:68:73:f9:b0:ef:84:fd:f7:0e:0c:
         8d:83:dd:28:15:b7:55:0f:21:59:64:e4:48:2b:80:32:2c:ef:
         1b:ae:58:13:68:e5:1a:ff:40:ed:34:3d:d6:02:e7:b5:e8:ba:
         2d:d6:b6:e5:69:ac:78:25:c8:20:19:25:7a:ac:af:f0:d7:4f:
         d6:27:d2:c5:bf:18:42:cc:3a:1c:32:6e:73:03:0c:e5:c2:26:
         b2:02:51:5f:01:00:94:23:f9:e2:8f:9a:67:7b:7c:6a:97:14:
         19:93:60:94:63:b0:81:d6:c7:8f:33:0d:68:35:7a:35:24:35:
         80:ac:6a:12:78:b4:dc:a5:36:5a:40:b2:f9:51:db:e1:0c:84:
         a2:7e:6f:70:0a:61:0e:a4:bf:92:4a:e3:74:0a:26:34:7e:26:
         b6:66:7d:4c:49:a1:9b:b8:bd:83:46:87:cf:c8:9e:a9:bf:a5:
         dd:64:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:21:56 2025 by rpki-client