This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a646464653a3a2f34382d3438203d3e20323633363039.roa
File:                     323830343a6666303a646464653a3a2f34382d3438203d3e20323633363039.roa (raw, json)
Hash identifier:          iDs7HUrdJPWhDXmGowX6jU6/8QP0GZRV+a+dljuMzzg=
Subject key identifier:   8F:6F:F4:6A:66:DC:21:BA:60:EC:6E:44:6F:C1:DB:B3:83:98:70:4F
Certificate issuer:       /CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
Certificate serial:       62FF1CC535676D252D201DD48DE213C6B070D45E
Authority key identifier: B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a646464653a3a2f34382d3438203d3e20323633363039.roa
Signing time:             Mon 08 Dec 2025 14:52:31 +0000
ROA not before:           Mon 08 Dec 2025 14:47:31 +0000
ROA not after:            Mon 07 Dec 2026 14:52:31 +0000
asID:                     263609
IP address blocks:        2804:ff0:ddde::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl
                          rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ff:1c:c5:35:67:6d:25:2d:20:1d:d4:8d:e2:13:c6:b0:70:d4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B
        Validity
            Not Before: Dec  8 14:47:31 2025 GMT
            Not After : Dec  7 14:52:31 2026 GMT
        Subject: CN=8F6FF46A66DC21BA60EC6E446FC1DBB38398704F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:65:26:c4:48:58:85:ac:74:b9:af:06:c4:
                    57:08:0b:3e:ef:7a:bd:c9:f6:c3:e9:c5:a4:0f:f2:
                    b2:91:90:a6:d7:dc:2c:37:dc:e3:c3:cd:4a:f4:62:
                    54:f4:c5:cc:7b:45:65:12:98:17:c0:03:be:52:0d:
                    43:32:14:a1:cf:7f:3f:49:35:92:bc:7a:55:ea:8a:
                    8e:13:24:11:09:16:39:96:a5:b4:c3:8c:f3:2b:06:
                    1b:ad:a7:94:32:35:39:c0:f5:c3:bd:e7:d3:c2:d9:
                    43:c1:09:8e:de:5f:e3:ec:36:95:05:c8:51:33:b9:
                    45:1f:3c:ee:2a:3a:44:cd:06:9a:b1:97:a1:06:78:
                    fd:06:3a:3e:17:e0:f0:5e:13:da:aa:81:7a:0d:db:
                    b7:e9:30:4e:56:77:1d:fe:9b:ed:5d:44:c6:e8:1f:
                    69:54:a3:0e:f6:34:28:1e:fd:0b:37:af:d1:1f:1e:
                    dc:0e:6f:9a:ee:aa:37:6a:02:cb:e7:e8:b5:10:44:
                    10:98:55:ea:17:c2:9d:a0:9e:3e:da:c9:76:c6:5c:
                    74:0f:8b:5f:ea:8f:b0:e8:67:47:8f:0e:81:a5:29:
                    5a:c0:9c:fb:e0:07:76:5e:d8:78:76:ff:ab:ad:b9:
                    41:ff:20:25:48:2f:37:f8:a1:6c:14:29:00:1d:87:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6F:F4:6A:66:DC:21:BA:60:EC:6E:44:6F:C1:DB:B3:83:98:70:4F
            X509v3 Authority Key Identifier:
                keyid:B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a646464653a3a2f34382d3438203d3e20323633363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff0:ddde::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:17:8b:7b:d7:67:de:a2:2d:fb:58:9e:f7:4f:4f:81:3b:2a:
         d0:95:64:bb:06:6e:43:de:c6:49:c1:93:62:1f:7a:09:02:6e:
         b5:7f:b6:ec:6f:33:d4:5c:d8:24:66:fa:f7:43:f9:b5:ae:50:
         d9:0d:3a:12:a3:c2:57:1b:63:53:97:1a:2a:8f:33:84:b1:7a:
         9e:97:12:af:41:b7:6d:c5:5e:92:58:a3:a2:a4:c1:91:d6:0f:
         34:1b:68:0e:30:9e:1d:7e:db:00:0e:21:e6:92:a4:b4:d0:aa:
         3c:e5:db:40:84:bc:42:03:09:b6:a8:b0:82:d4:07:71:a1:cf:
         9c:69:84:b4:1e:a6:66:cb:79:ea:9b:56:c3:08:ea:f6:9f:b5:
         54:ff:6e:7b:ac:34:eb:d0:71:e1:b6:f1:44:06:60:61:41:35:
         73:c3:21:14:5d:bf:a5:d7:76:ae:9a:d7:d4:1d:69:ab:46:03:
         af:25:db:9d:8f:df:c0:b8:1f:03:57:92:b7:8c:b2:2e:15:6f:
         59:00:6b:30:19:33:e0:84:c8:e7:1c:1b:9f:ef:90:17:84:ad:
         9e:d4:0f:5c:bf:71:1d:a3:27:47:9a:df:ea:4e:9b:de:7b:e2:
         30:b3:f9:3e:60:0c:6e:80:24:33:06:59:4a:a3:74:62:02:78:
         d6:5f:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:43:38 2025 by rpki-client