This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/323030313a313261343a3130303a3a2f34302d3438203d3e203238333436.roa
File:                     323030313a313261343a3130303a3a2f34302d3438203d3e203238333436.roa (raw, json)
Hash identifier:          T0U+ICJ1wkVj7SlEByDNPJMqhJawO3/lmSn4Fp5mp3Y=
Subject key identifier:   9C:B0:6F:F9:17:BE:E4:A7:A6:AB:84:9A:E2:26:71:8C:00:CB:CA:02
Certificate issuer:       /CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Certificate serial:       1D6E88D95C6E1FF8D950DB49D10C1D9D87336AE3
Authority key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/323030313a313261343a3130303a3a2f34302d3438203d3e203238333436.roa
Signing time:             Thu 13 Nov 2025 12:20:31 +0000
ROA not before:           Thu 13 Nov 2025 12:15:31 +0000
ROA not after:            Thu 12 Nov 2026 12:20:31 +0000
asID:                     28346
IP address blocks:        2001:12a4:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl
                          rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6e:88:d9:5c:6e:1f:f8:d9:50:db:49:d1:0c:1d:9d:87:33:6a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
        Validity
            Not Before: Nov 13 12:15:31 2025 GMT
            Not After : Nov 12 12:20:31 2026 GMT
        Subject: CN=9CB06FF917BEE4A7A6AB849AE226718C00CBCA02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:e7:d7:6f:fc:96:d9:dd:8d:18:e0:6e:83:
                    22:88:bf:3c:5e:23:0a:be:ff:37:5c:b6:68:f0:d6:
                    c5:67:5c:cf:fc:02:07:a6:79:51:ed:4d:43:53:b5:
                    7d:0c:0d:68:a7:68:fa:cf:b0:d8:9d:c8:3b:83:dd:
                    6c:8d:21:f3:f4:cd:20:98:6e:bb:22:06:ae:47:51:
                    88:0d:66:ae:bd:85:61:fc:3f:f4:4d:f5:b0:ee:bb:
                    da:c6:49:f1:cf:15:3d:f6:d0:3a:28:fc:dd:61:25:
                    7a:4c:02:79:af:78:6c:0e:f5:7c:cd:3d:c0:24:72:
                    34:63:58:7b:bb:f4:f0:ab:75:97:fc:14:af:95:59:
                    5a:5c:0b:65:59:b0:d0:b2:a9:29:c0:0a:23:e7:5b:
                    c5:eb:52:15:7e:b2:b5:b4:8e:57:c7:86:0b:25:94:
                    a3:73:08:51:87:59:f3:e5:2e:f5:c4:7f:aa:45:7e:
                    09:43:ec:8e:bb:54:bd:5e:03:99:bb:c9:9a:91:59:
                    72:62:a0:a7:91:5d:b2:67:3d:fb:fd:d2:02:bd:f4:
                    55:fd:39:1f:e1:40:af:5a:66:54:d5:0a:f5:7f:66:
                    56:36:0b:9d:79:21:a1:13:ae:94:e5:bc:ba:bb:c0:
                    8c:20:ca:66:c6:06:da:a6:b1:6b:33:9b:57:20:67:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B0:6F:F9:17:BE:E4:A7:A6:AB:84:9A:E2:26:71:8C:00:CB:CA:02
            X509v3 Authority Key Identifier:
                keyid:C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/323030313a313261343a3130303a3a2f34302d3438203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a4:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:ae:cf:32:45:f6:ea:b3:7d:4a:a4:0a:78:ca:d4:da:dc:b2:
         50:33:a7:09:0c:72:5a:43:f8:03:23:80:f4:55:7e:f4:e0:2f:
         3b:f3:72:c5:79:e3:66:d3:c4:b2:84:b2:9f:6f:3f:c3:c5:a2:
         0e:f4:56:2c:4f:46:08:a1:19:60:93:e9:d6:df:aa:3f:43:79:
         a9:26:7b:01:bc:7f:d9:47:9e:44:06:1d:a5:7b:f0:82:2c:7e:
         c4:53:3e:e7:be:fd:2d:63:ec:17:d9:d5:72:31:88:7d:f4:da:
         07:1d:ca:1a:dc:12:13:f5:09:0c:10:be:77:f2:50:a4:a9:36:
         74:d2:84:d3:0a:8f:44:1c:55:8d:40:1c:d3:d6:e6:ac:0c:1c:
         75:47:5f:8f:2e:b0:48:52:55:43:f0:eb:7b:53:3a:af:c5:c6:
         3c:11:a4:8f:85:a6:22:ce:8a:dd:fa:ce:35:47:1f:fa:be:67:
         69:a7:c6:fd:7d:4a:8b:43:05:14:1c:a1:33:15:9c:e9:2d:cc:
         db:99:52:32:4d:03:53:f6:f0:99:8d:05:cb:a2:89:d3:53:59:
         1a:12:5e:69:55:c8:f1:c7:3b:94:ed:2b:d7:fa:ea:f1:5d:9f:
         a9:44:68:92:1a:20:19:1f:3b:4e:79:31:44:1c:a0:5d:36:99:
         d3:2a:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:19:59 2025 by rpki-client