This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/323830343a366231343a3a2f33322d3336203d3e20323730333736.roa
File:                     323830343a366231343a3a2f33322d3336203d3e20323730333736.roa (raw, json)
Hash identifier:          O0m2ZsP+IZAqzOn0bvTFlmtbkhBFPzFeCfTgjrdiJ7A=
Subject key identifier:   BD:47:37:E7:66:17:7F:58:E5:D1:5E:0C:3E:F8:DB:E1:BB:66:3A:A6
Certificate issuer:       /CN=9D24A534785E862FF2DAC70BF06847337A2816FB
Certificate serial:       2FBD3A43E412B578A4A99CDB585E300AA4D11AE2
Authority key identifier: 9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/323830343a366231343a3a2f33322d3336203d3e20323730333736.roa
Signing time:             Tue 18 Nov 2025 18:49:23 +0000
ROA not before:           Tue 18 Nov 2025 18:44:23 +0000
ROA not after:            Tue 17 Nov 2026 18:49:23 +0000
asID:                     270376
IP address blocks:        2804:6b14::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl
                          rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 04:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bd:3a:43:e4:12:b5:78:a4:a9:9c:db:58:5e:30:0a:a4:d1:1a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D24A534785E862FF2DAC70BF06847337A2816FB
        Validity
            Not Before: Nov 18 18:44:23 2025 GMT
            Not After : Nov 17 18:49:23 2026 GMT
        Subject: CN=BD4737E766177F58E5D15E0C3EF8DBE1BB663AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:dc:fe:17:4c:07:a1:36:bf:8a:ec:ec:ae:
                    0f:6b:ba:73:ca:e6:f5:75:37:dd:23:22:33:07:59:
                    83:cd:a7:95:bd:ad:79:53:fb:c8:07:cc:57:8f:4e:
                    ae:fd:70:58:b7:b6:1f:ab:8b:da:4e:5f:21:5a:f7:
                    85:36:7a:d9:38:c7:49:f1:45:51:34:f5:50:b2:ad:
                    ab:40:d5:64:16:35:a0:7a:97:02:24:30:e3:26:3c:
                    06:74:3f:4c:44:b6:49:c4:5e:e2:d3:d5:d7:a0:93:
                    97:f3:48:e4:93:1d:61:b1:e0:12:3d:19:09:fb:4b:
                    04:f4:64:81:48:6b:5b:bd:34:7e:f4:56:e0:69:91:
                    f7:ff:99:39:8f:d6:44:f7:52:3d:7a:69:f9:b8:44:
                    1d:43:ef:9e:19:e1:d2:ef:86:b3:d0:b6:06:b8:4c:
                    a5:f7:bb:53:46:87:ed:89:e6:fc:11:db:45:5e:3c:
                    e5:d4:7a:55:55:5a:41:e3:28:0b:f5:72:27:62:42:
                    46:82:9f:03:27:01:56:3a:4c:44:53:39:9f:49:97:
                    1c:7d:18:80:c5:ca:b1:99:93:06:69:80:5f:2f:5b:
                    0c:5c:19:1a:05:cc:c5:f2:e0:79:6b:22:b0:2e:66:
                    04:94:2b:03:ef:4b:b8:cc:00:22:04:1a:13:35:72:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:47:37:E7:66:17:7F:58:E5:D1:5E:0C:3E:F8:DB:E1:BB:66:3A:A6
            X509v3 Authority Key Identifier:
                keyid:9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/323830343a366231343a3a2f33322d3336203d3e20323730333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b14::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:36:51:92:52:9f:c3:9a:ff:58:33:5f:1d:f0:7c:ac:9b:42:
         6c:0f:db:e8:0c:23:5f:1d:d2:f4:6c:1a:3c:23:39:76:ca:b6:
         8f:8e:6a:34:15:11:1f:92:01:b3:b0:9e:2d:f1:ee:d6:a7:57:
         eb:a5:b7:80:47:f6:5f:30:28:90:c4:a9:56:d4:ae:80:b2:9e:
         d9:b6:8d:a6:88:b7:3d:c3:b1:b4:de:5c:0e:6b:c8:d2:90:79:
         0f:d5:f9:68:47:92:e7:24:ea:f0:76:1f:90:61:4c:a5:f6:75:
         9b:7a:6f:6e:19:fa:c2:39:32:61:29:98:ef:88:57:8e:09:90:
         11:24:03:6d:f8:5a:72:85:47:28:3e:af:8b:d7:b6:4b:e4:41:
         48:8e:12:d7:31:56:fb:41:64:a6:9e:a2:5c:59:c6:6e:46:43:
         f9:5b:39:02:ba:bb:b7:68:92:1b:45:07:3b:16:ff:21:79:54:
         51:e3:3d:66:ff:f8:23:38:e8:dc:df:75:9d:a7:9c:86:7c:84:
         bd:fa:cd:92:12:cf:41:d6:06:c8:ff:99:cb:18:ee:75:a9:52:
         43:d2:ac:9c:df:60:73:e0:3c:32:f9:78:86:1b:6d:b4:48:2f:
         5b:4c:54:44:c4:06:3d:07:42:40:96:b4:ef:7c:ad:1d:a3:89:
         fc:ac:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:18:56 2025 by rpki-client