This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          ul+i82ubfjZW9v5b9yEiPJLRMkvddCgGwdmdV+td0Z8=
Subject key identifier:   18:01:F1:AE:01:B6:61:E1:4D:29:22:FE:35:06:4E:91:F8:EF:C8:13
Certificate issuer:       /CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
Certificate serial:       6EDF6C489E853405FCAFA228B8A8515BBDD2D657
Authority key identifier: 70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Thu 04 Dec 2025 14:47:46 +0000
ROA not before:           Thu 04 Dec 2025 14:42:46 +0000
ROA not after:            Thu 03 Dec 2026 14:47:46 +0000
asID:                     262687
IP address blocks:        2804:385c:8c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:df:6c:48:9e:85:34:05:fc:af:a2:28:b8:a8:51:5b:bd:d2:d6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
        Validity
            Not Before: Dec  4 14:42:46 2025 GMT
            Not After : Dec  3 14:47:46 2026 GMT
        Subject: CN=1801F1AE01B661E14D2922FE35064E91F8EFC813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:b3:6f:e3:76:cc:a1:5d:ed:59:37:93:2f:
                    ba:8a:c3:32:8b:1f:d3:13:87:6f:94:15:f5:99:4e:
                    d8:53:da:40:a9:70:03:6c:9d:63:a2:20:bd:c6:f0:
                    b4:27:c0:63:79:93:dc:6a:dd:bf:ec:7a:76:59:83:
                    6a:5b:9d:0a:4f:af:fe:46:e0:56:59:73:a0:9a:1b:
                    94:b7:d6:b0:90:14:ef:23:96:63:ca:13:82:f7:bb:
                    3f:33:ea:1d:c5:1b:81:88:8a:37:d7:3a:63:aa:dd:
                    23:d0:5e:22:a1:22:c0:ae:28:d4:d2:f3:77:c9:c1:
                    71:b0:91:0e:f9:44:f1:23:d0:96:e4:e8:da:27:9d:
                    e9:a3:16:d3:52:75:05:e0:b2:7c:13:ed:03:3e:9b:
                    45:a0:95:71:3d:3e:86:ff:cf:b5:9c:95:dd:b7:57:
                    e1:b8:9d:6a:7b:2f:a2:dc:8f:13:54:9d:66:70:c7:
                    cc:23:fb:ad:8b:b4:13:84:4d:6f:78:42:12:f2:ba:
                    07:81:1b:d1:e0:c1:8e:49:a5:8b:2d:04:8f:26:b9:
                    a8:f3:69:d7:0c:29:7e:33:aa:d1:48:4b:02:13:a7:
                    4a:5e:7d:83:3b:6f:61:cd:33:3b:de:1b:7c:e5:16:
                    ec:4e:d1:d4:6f:82:a6:c8:96:cd:5c:a4:b6:18:26:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:01:F1:AE:01:B6:61:E1:4D:29:22:FE:35:06:4E:91:F8:EF:C8:13
            X509v3 Authority Key Identifier:
                keyid:70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:2e:ba:c8:69:27:cb:fb:28:aa:6d:a9:c5:8f:10:ce:43:
         7d:9e:14:c2:8d:fa:14:bc:84:59:8a:d6:23:2b:10:f1:8c:33:
         13:7b:5e:2d:41:ef:a7:22:be:5e:c0:6a:3a:31:61:49:eb:b7:
         96:c1:57:8d:3a:de:6b:98:6b:ac:0d:6e:e8:30:00:7f:c9:a4:
         a8:45:b8:4f:69:9c:45:70:57:ea:54:9d:b0:bb:02:42:6c:91:
         78:d4:cb:a8:cc:d9:4b:c0:bf:04:bb:01:52:a0:e5:42:f5:65:
         09:ec:aa:1d:4d:1c:61:47:f3:a5:0b:c9:20:37:a4:d6:46:83:
         75:b3:ac:86:ea:56:04:e3:7d:a2:0f:01:ae:0b:af:38:ac:bc:
         84:32:ed:93:2a:d1:da:3a:d1:67:d1:c6:6e:17:da:b2:23:93:
         6e:37:1f:fa:ba:a5:1d:93:8c:c1:74:c9:28:48:de:6f:93:29:
         88:36:d8:f5:74:1b:1c:b0:e6:83:44:76:7a:77:3b:b6:e7:4f:
         2c:7b:a2:bd:bf:26:3f:08:85:fc:82:88:83:3c:ff:e6:b9:78:
         e1:f3:28:84:89:0e:b6:a3:28:5f:c3:26:da:46:ca:92:fa:0f:
         42:f4:d5:54:4c:1b:84:b3:22:39:d3:82:46:30:3c:75:94:99:
         f2:a3:9a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:37 2025 by rpki-client