This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a343164653a3a2f34382d3438203d3e20323633363039.roa
File:                     323830343a6666303a343164653a3a2f34382d3438203d3e20323633363039.roa (raw, json)
Hash identifier:          WHAWdWtRUDpkYEUzR0/M13e7jmWtdMhuHdFJCmDz9hQ=
Subject key identifier:   3B:5D:F1:DC:3B:D0:22:AE:3B:73:65:31:B5:B9:39:56:CC:C0:AB:95
Certificate issuer:       /CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
Certificate serial:       589384BD1D41E65EC6DF5ABBDC6BF261C83B4D2E
Authority key identifier: B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a343164653a3a2f34382d3438203d3e20323633363039.roa
Signing time:             Mon 08 Dec 2025 14:45:40 +0000
ROA not before:           Mon 08 Dec 2025 14:40:40 +0000
ROA not after:            Mon 07 Dec 2026 14:45:40 +0000
asID:                     263609
IP address blocks:        2804:ff0:41de::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl
                          rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:93:84:bd:1d:41:e6:5e:c6:df:5a:bb:dc:6b:f2:61:c8:3b:4d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
        Validity
            Not Before: Dec  8 14:40:40 2025 GMT
            Not After : Dec  7 14:45:40 2026 GMT
        Subject: CN=3B5DF1DC3BD022AE3B736531B5B93956CCC0AB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:ec:b7:ad:50:95:6a:70:97:a5:cb:5e:e9:
                    77:22:2e:09:d6:6a:a9:d6:e7:4d:39:46:4a:0b:80:
                    65:c3:15:31:79:5e:78:a3:dd:9d:92:f3:8d:fe:92:
                    a5:17:a2:65:a1:ce:a8:d8:68:62:c8:bc:b0:d4:c8:
                    cd:da:b2:e3:8e:58:4c:5c:bd:28:e9:da:45:40:ee:
                    a1:cb:9d:06:f3:57:23:92:4f:59:5f:9c:4f:42:ec:
                    6f:fe:fd:46:47:34:f8:63:f9:d4:d0:cb:07:11:63:
                    5d:24:72:4c:b3:1b:6f:a3:f4:f6:03:12:8c:68:3e:
                    b3:da:b4:3a:f2:0f:62:6e:11:d3:99:e4:09:ca:76:
                    5f:15:c8:2c:1a:ca:2b:33:fe:f3:df:38:e9:ea:ec:
                    48:92:50:e8:e8:40:e7:30:ef:f4:d0:62:d3:87:55:
                    b1:35:2c:0a:0d:d7:b3:af:d1:aa:7b:e0:f9:c0:2a:
                    18:be:e0:a4:cf:f9:3c:f9:29:d2:fa:9e:77:17:98:
                    5b:bf:f4:79:82:c4:a6:41:e3:9c:d7:e6:68:68:70:
                    da:b7:5b:85:49:09:85:31:af:35:4e:92:d9:3c:94:
                    a7:b7:08:cd:58:2d:a2:ab:69:39:db:8f:94:2f:29:
                    17:82:a9:b9:eb:c6:66:28:40:fd:75:85:a9:93:7d:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5D:F1:DC:3B:D0:22:AE:3B:73:65:31:B5:B9:39:56:CC:C0:AB:95
            X509v3 Authority Key Identifier:
                keyid:B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a343164653a3a2f34382d3438203d3e20323633363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff0:41de::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:ad:4c:a5:74:51:b1:3f:e5:ac:8d:e1:4a:b7:04:36:7c:
         04:de:5a:0c:f4:4e:8c:ab:66:b3:7f:01:eb:4a:b4:84:6e:b2:
         6b:25:94:43:95:8c:20:1f:b5:68:f4:fe:58:a8:f6:42:6e:14:
         cb:7f:50:e6:dd:04:45:46:cd:c4:a6:88:51:15:c5:a2:fe:8b:
         4c:b3:0c:55:92:63:d7:30:d4:54:fe:d6:39:d9:87:19:b9:d8:
         46:4b:14:4f:97:43:c5:48:c8:05:7b:80:ef:12:77:f6:71:dd:
         66:45:44:c0:cd:3c:14:69:41:4c:51:89:0d:0c:7b:ce:64:e8:
         02:9f:3f:f0:7b:26:78:61:21:97:a6:e1:54:a0:f8:de:7e:18:
         31:01:dd:10:12:c5:15:1f:10:ec:75:b2:51:39:53:14:89:5b:
         82:5f:5d:33:bd:1c:03:8c:31:5a:4f:7f:6e:7a:7f:0e:03:aa:
         18:50:e4:7f:f9:2c:56:de:9a:30:4e:18:f5:88:ec:79:13:14:
         27:73:10:18:b9:6a:48:7e:92:57:32:85:d8:ac:38:e0:f0:69:
         70:a6:9b:bb:32:c2:7c:88:a5:09:56:53:4e:60:0c:22:81:dd:
         90:f1:ff:d1:4a:bb:7c:fc:cc:7d:75:04:b7:5e:fc:bf:71:c5:
         cb:08:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:43:40 2025 by rpki-client