This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f33362d3336203d3e20323632363837.roa
File:                     323830343a333835633a383030303a3a2f33362d3336203d3e20323632363837.roa (raw, json)
Hash identifier:          oa1iQvOJjLrQJTWZME8Wyk/tx+oO2Vq4zNGEpuzP+EM=
Subject key identifier:   CD:88:1C:7E:D3:3E:78:06:F5:FE:4B:B3:09:27:72:51:E9:FE:99:90
Certificate issuer:       /CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
Certificate serial:       15EA1B2904FC2D0C5E3EED0DAA027A329070581C
Authority key identifier: 70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f33362d3336203d3e20323632363837.roa
Signing time:             Thu 04 Dec 2025 14:47:46 +0000
ROA not before:           Thu 04 Dec 2025 14:42:46 +0000
ROA not after:            Thu 03 Dec 2026 14:47:46 +0000
asID:                     262687
IP address blocks:        2804:385c:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ea:1b:29:04:fc:2d:0c:5e:3e:ed:0d:aa:02:7a:32:90:70:58:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
        Validity
            Not Before: Dec  4 14:42:46 2025 GMT
            Not After : Dec  3 14:47:46 2026 GMT
        Subject: CN=CD881C7ED33E7806F5FE4BB309277251E9FE9990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:58:49:eb:cf:0f:b9:d5:c5:02:e2:79:b3:
                    51:e6:83:2a:1e:6c:8d:ec:58:f4:99:7b:ec:f8:22:
                    b8:d7:b3:60:54:d6:95:e6:03:c8:00:5a:d0:ea:42:
                    e1:18:92:76:a7:66:9f:f6:38:de:0c:5d:03:fe:83:
                    dc:67:c0:b8:30:2f:75:9b:08:48:a7:8d:f8:21:3e:
                    8c:ec:de:74:33:4d:5c:6a:3d:9d:72:07:8e:96:d0:
                    ee:26:03:f3:da:73:a5:d0:ba:0b:2f:fd:f4:f4:05:
                    d1:d1:03:3c:4d:96:a7:40:76:aa:f4:b7:4f:f1:cd:
                    cc:33:d7:c2:9e:1a:8b:03:e7:d7:15:79:0a:01:1d:
                    85:83:03:6e:47:e1:af:1a:fb:ab:d7:6f:b1:13:46:
                    c8:ce:46:2d:cc:63:ce:84:32:30:10:c9:8e:3c:57:
                    b8:cf:74:0f:22:a5:fe:70:41:18:08:02:67:81:22:
                    9a:04:5f:d1:02:c4:df:78:d6:ce:79:0c:61:b4:54:
                    76:4c:ad:6f:01:00:6f:5a:30:37:f2:23:dc:66:c8:
                    b5:cc:af:33:4d:6e:bb:92:03:2e:64:8b:3a:5c:70:
                    cb:d4:1e:af:13:41:f6:c3:cc:66:9d:ac:d3:38:a0:
                    2b:7e:56:28:0f:96:0f:51:27:5a:4f:18:ea:01:c5:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:88:1C:7E:D3:3E:78:06:F5:FE:4B:B3:09:27:72:51:E9:FE:99:90
            X509v3 Authority Key Identifier:
                keyid:70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f33362d3336203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:f2:df:fd:1c:31:3a:73:96:e2:de:b5:8e:4e:87:d2:24:
         b7:4a:ff:bb:6c:44:4f:ef:0e:fe:10:3e:66:1b:11:25:fe:ca:
         75:5d:b9:7e:60:d3:8d:c3:ba:b3:34:de:d8:13:48:4a:7f:fb:
         84:16:f2:9d:c5:9c:76:b6:94:1b:fc:0e:f4:0e:f1:da:02:b7:
         f3:08:cc:10:69:12:6b:0a:25:8f:5e:ad:42:5d:14:1b:8c:48:
         b4:21:4c:c2:01:8c:96:77:fc:9d:e3:4a:e2:f5:91:98:b6:6d:
         b4:f9:93:e2:40:94:3b:23:6f:9a:eb:df:6d:cf:d0:f5:e2:e4:
         97:5f:7f:da:4e:09:85:3c:87:40:82:33:97:98:9e:18:f5:37:
         78:1e:c0:b0:43:7d:e0:b1:49:98:f0:a4:17:18:4c:c6:0d:5c:
         88:55:1e:b7:7d:07:fc:a9:cb:65:23:d8:1e:4f:d8:15:99:3a:
         c4:9f:5c:71:d0:90:29:66:e1:f2:7c:0a:95:b7:3e:f3:85:65:
         5f:c8:bb:a2:f6:4d:cd:a9:32:ec:ff:24:b3:f1:71:35:23:35:
         bc:fd:a1:33:47:87:e3:1f:f9:e1:64:b7:8a:21:f7:53:a9:e6:
         58:8d:18:01:7f:ab:ad:06:f6:64:9c:8b:57:37:aa:00:be:e0:
         ba:b7:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:26 2025 by rpki-client