This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/323830343a393636343a3a2f33322d3334203d3e20323734333334.roa
File:                     323830343a393636343a3a2f33322d3334203d3e20323734333334.roa (raw, json)
Hash identifier:          XIGTCoQg/BSob8oqo96n3uBMyrck0rCAY0jz87O7OUY=
Subject key identifier:   0A:48:01:5B:66:98:C2:95:B8:09:04:E5:C1:BA:54:8F:08:09:19:06
Certificate issuer:       /CN=987C49173148EC0A164D79BE3F0B7F94AF367573
Certificate serial:       4C29EC489C7A82C9D91D0D9EB4EE6F0E13E30154
Authority key identifier: 98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/323830343a393636343a3a2f33322d3334203d3e20323734333334.roa
Signing time:             Mon 17 Nov 2025 13:08:43 +0000
ROA not before:           Mon 17 Nov 2025 13:03:43 +0000
ROA not after:            Mon 16 Nov 2026 13:08:43 +0000
asID:                     274334
IP address blocks:        2804:9664::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl
                          rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:29:ec:48:9c:7a:82:c9:d9:1d:0d:9e:b4:ee:6f:0e:13:e3:01:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987C49173148EC0A164D79BE3F0B7F94AF367573
        Validity
            Not Before: Nov 17 13:03:43 2025 GMT
            Not After : Nov 16 13:08:43 2026 GMT
        Subject: CN=0A48015B6698C295B80904E5C1BA548F08091906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:42:86:dc:a9:ee:30:fc:4d:31:e9:7d:55:
                    8d:90:cd:e2:2c:78:52:5a:7e:c6:1f:6d:9c:d9:99:
                    54:f5:62:cb:e6:e7:c9:ff:e5:43:05:95:42:c8:95:
                    42:89:5a:50:52:9d:38:7c:7c:be:95:62:06:c1:50:
                    8f:00:60:23:4f:2c:fd:da:3f:cf:ca:46:17:fa:f0:
                    cd:fa:2a:d2:84:1c:d8:35:8a:d4:fb:2a:3f:ec:67:
                    1b:e0:24:28:38:4c:f8:47:ec:5d:fc:5f:8f:99:81:
                    f6:4e:85:bc:5c:bb:c3:b9:d2:7e:3f:c2:e1:d6:e0:
                    0e:a8:e9:f5:77:b0:17:46:f1:e7:ca:1e:8d:7a:54:
                    69:c6:dd:c6:0d:a1:e1:5c:72:13:70:3f:f4:79:83:
                    b8:18:3e:73:40:7e:24:33:a7:0c:87:96:3e:c4:a2:
                    cb:00:3d:f5:fb:6a:9a:af:2d:4c:af:02:0a:f9:67:
                    2c:96:d4:d5:fc:3b:51:0f:5c:84:dc:3e:1e:8b:9a:
                    66:a5:06:a4:64:8a:34:7e:48:61:e4:46:ea:1c:74:
                    ab:a1:a1:37:0f:5b:f2:59:f5:5b:d2:72:a7:ff:fa:
                    75:88:ed:7e:dd:26:99:93:7a:b7:39:5e:ce:13:d0:
                    15:ec:c3:d5:f2:5b:c5:59:f7:6b:38:23:88:2c:59:
                    e6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:48:01:5B:66:98:C2:95:B8:09:04:E5:C1:BA:54:8F:08:09:19:06
            X509v3 Authority Key Identifier:
                keyid:98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/323830343a393636343a3a2f33322d3334203d3e20323734333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9664::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:46:db:17:39:42:7b:7c:ae:8f:3a:eb:85:67:4f:ed:b9:39:
         9b:5e:b6:ba:36:54:ee:9f:7c:59:8a:78:a2:c0:1d:f9:11:df:
         9b:4f:60:05:9d:af:2b:1a:a7:61:93:cf:98:fd:56:44:d0:b3:
         8e:df:bb:99:8b:7c:29:af:bc:cd:93:89:61:0e:35:1a:54:f9:
         10:04:46:38:e9:4e:39:fa:19:9e:47:a2:84:46:fc:13:1a:92:
         89:70:8c:53:5b:47:af:3c:fb:3a:77:62:5f:7c:00:c3:07:5d:
         b8:a0:c8:ce:17:a4:c6:b4:cf:1e:f8:e1:0f:38:b1:b9:85:fc:
         df:93:46:23:78:30:f5:1d:39:54:30:47:d0:bf:f3:f7:8f:b1:
         12:14:0b:b7:bf:f7:6b:86:cb:e8:54:49:24:52:85:dd:dc:ac:
         49:32:4c:b0:18:78:2c:79:67:7f:53:04:ba:93:4a:89:cf:40:
         9c:09:62:30:17:a5:c3:34:7c:63:4e:15:a6:fe:df:9f:eb:87:
         dc:6f:73:94:d3:51:4a:11:2f:a9:0d:91:44:74:e9:3e:75:ad:
         ff:8b:f0:36:08:62:e1:90:26:b9:be:31:39:64:07:80:48:99:
         9f:b2:09:84:59:e5:20:b4:11:ad:8b:7b:3f:ce:d9:81:96:d3:
         cc:7a:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:13 2025 by rpki-client