This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          ptA/CL33fgiJJbj2s/UlmYVRzx2Oq2VUy9kI80gKBhY=
Subject key identifier:   5A:0A:4E:D4:7A:4D:17:6F:C4:DF:E6:80:14:77:F8:E1:B5:9E:82:DB
Certificate issuer:       /CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
Certificate serial:       5BD8E50C88C4BF994044CE278037BA42CD138157
Authority key identifier: 70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Thu 04 Dec 2025 14:47:46 +0000
ROA not before:           Thu 04 Dec 2025 14:42:46 +0000
ROA not after:            Thu 03 Dec 2026 14:47:46 +0000
asID:                     262687
IP address blocks:        2804:385c:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d8:e5:0c:88:c4:bf:99:40:44:ce:27:80:37:ba:42:cd:13:81:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
        Validity
            Not Before: Dec  4 14:42:46 2025 GMT
            Not After : Dec  3 14:47:46 2026 GMT
        Subject: CN=5A0A4ED47A4D176FC4DFE6801477F8E1B59E82DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:c0:45:cf:f1:bd:da:cc:e6:d8:6b:bd:0e:
                    9b:73:ca:a2:bf:a0:22:0a:ce:73:05:cb:28:f7:9a:
                    1e:5a:a3:93:12:26:1d:91:28:8f:1d:eb:6c:8f:ef:
                    e6:43:da:5c:09:44:31:b5:a2:b5:89:15:f3:c8:ea:
                    83:ee:46:90:fd:0f:32:d1:99:af:87:b8:eb:35:d1:
                    37:3a:a8:7b:ba:ab:b1:0d:8a:8b:05:37:7e:6f:93:
                    bc:36:93:79:08:56:f6:81:4e:e4:8e:85:9e:56:83:
                    37:85:5c:6a:2c:69:d0:c4:ed:44:a9:9f:4a:d8:6b:
                    d3:cc:e3:60:83:cf:d3:36:77:27:98:88:07:6a:a2:
                    f7:9c:a8:29:93:17:df:8a:8a:da:0f:9b:53:8a:97:
                    6d:cf:75:98:de:73:a7:93:18:1a:10:d2:d0:c2:ae:
                    4c:83:22:88:ad:91:9e:16:54:6f:e7:7f:96:82:95:
                    83:cc:6f:27:cd:af:85:2a:a9:61:16:34:05:94:9d:
                    a9:b1:ab:d2:73:a2:5c:09:9f:f4:7c:c8:82:f1:7c:
                    8e:f9:2f:d6:14:f4:df:cb:ee:ea:73:59:ff:56:e6:
                    1a:4f:42:61:7b:88:e8:19:a5:b1:0e:32:17:8b:14:
                    7f:70:d9:44:76:52:e7:97:3c:a2:15:82:b2:62:0e:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0A:4E:D4:7A:4D:17:6F:C4:DF:E6:80:14:77:F8:E1:B5:9E:82:DB
            X509v3 Authority Key Identifier:
                keyid:70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:aa:a9:86:77:03:7e:da:46:d1:99:3d:2d:69:b3:b1:80:31:
         43:b3:23:ad:bc:42:64:25:1b:6e:a4:d0:b8:17:f6:3a:3f:c1:
         e1:9f:69:a6:a4:c6:73:97:14:f8:31:5d:6b:59:7d:61:d6:44:
         77:e1:85:d5:92:eb:76:8e:cc:ad:94:14:3d:c2:58:a4:a5:da:
         34:e6:80:f3:92:a9:8a:e1:f6:3f:84:89:1f:77:b2:80:0f:d1:
         07:8d:9d:a7:c8:26:a2:b2:08:5b:88:db:ac:48:68:93:f8:5a:
         51:bc:88:df:09:25:b9:3e:b7:02:84:9d:92:82:b6:5f:bf:ac:
         db:07:d4:f9:cb:28:09:ed:7d:ee:a7:8c:49:01:71:12:c2:e5:
         99:42:66:cb:72:70:c4:88:93:31:e3:0f:27:42:c2:ad:09:e0:
         70:c9:3b:3c:36:cb:24:ac:75:2e:99:8b:f1:29:98:76:bd:64:
         55:b4:47:a1:39:39:62:19:15:58:9a:8f:6f:6f:be:1d:04:07:
         c8:51:12:2c:03:9f:52:72:05:54:32:28:a1:2e:d4:bd:7f:5b:
         69:2d:70:f9:e7:a9:f0:71:7a:20:c1:7d:b7:bf:f6:14:57:27:
         d1:f0:de:58:19:d9:f0:a8:d9:9c:f2:f9:fa:3b:a6:9d:13:c8:
         54:fa:22:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:20 2025 by rpki-client