This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa
File:                     323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa (raw, json)
Hash identifier:          zcm+b/QPFbvtsDHQ+Ng8jTzM+QITJzvPUVfFTYgXAWY=
Subject key identifier:   B7:9F:6F:8C:90:1A:17:42:45:D9:DF:BB:A1:7E:A7:C3:6B:22:72:1F
Certificate issuer:       /CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
Certificate serial:       49E36D1A1D7ECCC58448B0C4F68715EE701E0375
Authority key identifier: 70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa
Signing time:             Thu 04 Dec 2025 14:47:47 +0000
ROA not before:           Thu 04 Dec 2025 14:42:47 +0000
ROA not after:            Thu 03 Dec 2026 14:47:47 +0000
asID:                     262687
IP address blocks:        2804:385c:ff00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e3:6d:1a:1d:7e:cc:c5:84:48:b0:c4:f6:87:15:ee:70:1e:03:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7013EB69D6E5883A2C182B1D0AF01360112D23D3
        Validity
            Not Before: Dec  4 14:42:47 2025 GMT
            Not After : Dec  3 14:47:47 2026 GMT
        Subject: CN=B79F6F8C901A174245D9DFBBA17EA7C36B22721F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:3c:2a:37:3a:f6:1a:75:2a:c1:c3:32:eb:
                    69:15:89:66:fd:2b:08:eb:5b:e6:b9:e5:b1:5f:b2:
                    62:3b:ab:79:27:c2:60:3f:d2:46:1b:ae:77:46:97:
                    77:9b:53:ae:9f:0b:5d:8a:15:96:bc:c5:50:ec:c0:
                    0f:80:72:56:22:0e:21:2c:fb:99:ef:9e:ce:62:5c:
                    bd:cd:a5:da:6f:20:45:cb:e8:94:7a:66:95:33:7c:
                    da:4c:62:1a:24:8d:dd:39:0a:b9:9e:91:6d:17:63:
                    ee:28:2d:a1:cf:ee:67:23:bc:5b:8e:53:34:5b:73:
                    bf:ad:87:4f:bf:c5:7c:f0:b0:16:b7:d2:ca:4d:56:
                    60:54:53:bb:8a:98:2b:e2:ba:ff:db:9d:4a:1a:d1:
                    51:21:e0:09:d4:9f:72:6a:ad:8a:42:b3:cd:40:ca:
                    4b:d3:56:65:da:ea:ec:ea:10:b3:c8:c7:77:1a:d4:
                    5c:8f:b4:0e:3a:27:be:af:a7:71:0d:2d:d5:6a:40:
                    9a:4a:0c:6e:ac:b9:75:72:64:85:78:d7:db:d7:15:
                    c7:e1:c2:2d:01:63:dc:24:0f:34:52:e8:7f:3d:99:
                    4f:e9:d4:c4:75:c1:2a:57:d5:5a:8f:70:58:31:33:
                    00:b1:33:ec:94:c6:96:d2:66:67:43:17:6c:48:ad:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9F:6F:8C:90:1A:17:42:45:D9:DF:BB:A1:7E:A7:C3:6B:22:72:1F
            X509v3 Authority Key Identifier:
                keyid:70:13:EB:69:D6:E5:88:3A:2C:18:2B:1D:0A:F0:13:60:11:2D:23:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/7013EB69D6E5883A2C182B1D0AF01360112D23D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7013EB69D6E5883A2C182B1D0AF01360112D23D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34312d3431203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:ff00::/41

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:aa:55:28:c5:3a:bd:3e:7e:06:58:3a:ef:dd:e7:d8:a2:
         40:ee:16:a4:57:2e:16:26:c3:63:d1:2c:a0:57:96:b6:4c:f7:
         f2:a3:4c:01:63:b5:0e:b0:31:2f:3a:45:c7:38:d8:c7:bf:9d:
         08:f7:c3:ac:37:75:54:55:49:80:b1:c1:d4:a6:7c:d4:dd:d9:
         0e:1e:ab:ff:8c:51:a9:2d:1c:a1:40:81:d8:09:45:d5:72:b7:
         90:f3:39:4a:f9:c8:4a:10:85:68:12:5e:e3:17:a5:3d:af:57:
         aa:59:15:70:18:57:6e:27:d5:e2:c9:0b:57:f1:5a:d7:5d:67:
         03:b9:cc:17:2e:c0:a6:87:07:bf:7b:5b:38:92:20:cc:e2:85:
         af:db:6a:a7:81:3a:49:44:82:23:54:cc:37:96:40:75:1c:0c:
         96:35:8c:c5:18:c5:34:64:57:0d:68:72:87:86:bd:91:78:80:
         0a:c6:2c:9a:d6:1b:24:b8:42:30:4c:bf:84:93:33:d6:27:a1:
         54:e6:9e:41:69:b8:a2:5e:7b:53:dd:74:f1:f2:d7:cc:e9:61:
         a8:19:86:c8:89:f9:28:66:72:67:f6:85:7b:4c:7a:20:fc:39:
         76:f4:70:32:19:1d:91:0c:d0:fb:93:40:9e:79:b4:5d:5a:a5:
         fc:33:a9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:06 2025 by rpki-client