This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/323830343a363134343a3a2f33322d3438203d3e20323639323235.roa
File:                     323830343a363134343a3a2f33322d3438203d3e20323639323235.roa (raw, json)
Hash identifier:          0fsqfWs/r01pgD36fpR5CNuymk9+vk4jQSr4BtF78I4=
Subject key identifier:   84:10:57:B6:D3:6D:1C:4B:47:6B:B6:BC:EC:B8:B6:A7:8B:97:5A:72
Certificate issuer:       /CN=9B631A7BE6FE9041D41421E649466C47C99A3F14
Certificate serial:       57AAEEE9BBDEEEF94CD255DD54B755BA6AE92359
Authority key identifier: 9B:63:1A:7B:E6:FE:90:41:D4:14:21:E6:49:46:6C:47:C9:9A:3F:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B631A7BE6FE9041D41421E649466C47C99A3F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/323830343a363134343a3a2f33322d3438203d3e20323639323235.roa
Signing time:             Fri 19 Dec 2025 20:28:50 +0000
ROA not before:           Fri 19 Dec 2025 20:23:50 +0000
ROA not after:            Fri 18 Dec 2026 20:28:50 +0000
asID:                     269225
IP address blocks:        2804:6144::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.crl
                          rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B631A7BE6FE9041D41421E649466C47C99A3F14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 10:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:aa:ee:e9:bb:de:ee:f9:4c:d2:55:dd:54:b7:55:ba:6a:e9:23:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B631A7BE6FE9041D41421E649466C47C99A3F14
        Validity
            Not Before: Dec 19 20:23:50 2025 GMT
            Not After : Dec 18 20:28:50 2026 GMT
        Subject: CN=841057B6D36D1C4B476BB6BCECB8B6A78B975A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:61:52:8b:c4:55:1d:d4:ea:e7:74:31:33:
                    c8:b0:6e:bc:1a:da:a9:77:03:1a:e9:19:4f:ec:bd:
                    12:c8:38:72:99:c8:50:a1:84:20:7a:38:d4:f2:e4:
                    e1:f7:b3:50:a7:ea:b0:fa:15:f6:0f:f2:43:ab:55:
                    73:6a:02:19:06:38:ea:05:0b:ca:e2:85:50:5c:6d:
                    b4:aa:27:c4:45:31:c9:1a:01:ad:81:08:91:b3:7c:
                    ce:86:00:c3:d2:ff:4c:5d:59:0c:53:85:37:dd:25:
                    55:e0:b4:fa:b9:fd:83:cc:97:84:dc:0a:a6:6e:7d:
                    f8:4b:c0:8a:b4:5d:1c:fd:f0:71:8b:05:c7:d5:5f:
                    7b:c6:df:6c:c0:ca:c5:00:1e:63:b2:9b:7b:89:1d:
                    92:ac:d5:57:a7:2b:0c:01:d3:b2:d4:79:9c:2d:3a:
                    24:ab:1d:b2:f2:e9:e4:ed:ea:01:5f:f0:1e:24:19:
                    39:16:8d:ad:b4:d1:6f:df:75:f1:f5:b2:dc:a2:40:
                    81:c7:a0:29:d0:a1:21:ca:c2:3f:33:bc:64:ac:01:
                    44:49:ed:2e:4c:b9:fd:3d:32:96:2a:8f:6b:9f:ff:
                    ca:47:b7:1d:73:d2:10:ae:f5:bf:a5:5e:f3:0f:74:
                    af:48:13:60:ee:2d:76:2d:a0:c1:17:e1:3c:92:73:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:10:57:B6:D3:6D:1C:4B:47:6B:B6:BC:EC:B8:B6:A7:8B:97:5A:72
            X509v3 Authority Key Identifier:
                keyid:9B:63:1A:7B:E6:FE:90:41:D4:14:21:E6:49:46:6C:47:C9:9A:3F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B631A7BE6FE9041D41421E649466C47C99A3F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/323830343a363134343a3a2f33322d3438203d3e20323639323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6144::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:18:14:8b:b3:af:69:e3:ed:07:1b:a5:42:65:b6:8b:bf:b8:
         e6:cc:be:f8:9f:5a:b3:ac:6e:e5:e3:7f:55:08:0e:f6:a0:83:
         f5:99:52:df:85:3b:28:5c:05:0d:76:07:61:62:9a:c5:5a:5d:
         07:ca:ee:d6:68:d0:50:0d:06:d0:e3:78:e6:02:0f:ff:4d:36:
         b9:86:4c:be:68:a1:1f:00:a3:bd:e0:96:78:15:2b:5d:0d:55:
         40:a0:e5:8f:fe:19:37:84:47:49:0a:74:c4:de:97:d8:a3:a7:
         58:63:20:4b:40:28:e3:0f:cb:09:fc:32:01:a7:f2:c8:65:92:
         ab:89:02:f5:6e:4f:92:ef:6e:56:fc:4d:13:c9:c8:61:e2:dd:
         ce:d4:59:ce:e8:b4:d1:64:d6:57:1c:92:f0:36:e2:a8:ad:7a:
         43:0a:b0:e9:0f:05:24:0b:60:ad:de:af:5a:7a:c0:7f:56:ca:
         fb:4e:80:ff:e8:78:24:cf:21:e6:0c:37:f0:3f:a0:c9:65:fd:
         ab:5f:af:0d:97:3a:de:30:6e:b7:0c:96:4d:3a:98:4b:67:ef:
         a9:ee:c9:04:09:ec:ad:18:80:b3:0a:a7:0d:11:0e:89:6c:c6:
         95:08:56:67:ea:fb:6e:59:5c:a6:bb:6e:27:4b:4a:35:fa:1a:
         56:58:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:58:29 2025 by rpki-client