This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/3134382e3232342e36332e302f32342d3234203d3e20323730353634.roa
File:                     3134382e3232342e36332e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          gYuI9Vd+VXi8fkbiBkxNSkcV/yoPMGcABgz0Nq1fVIg=
Subject key identifier:   4C:33:CB:2B:A7:F7:C5:68:B4:85:CA:1D:07:47:2B:D8:E5:03:2E:07
Certificate issuer:       /CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
Certificate serial:       7A4C6F01C26A4D58B2F0F5E68DD012E804E214CB
Authority key identifier: 6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/3134382e3232342e36332e302f32342d3234203d3e20323730353634.roa
Signing time:             Fri 09 Jan 2026 14:37:38 +0000
ROA not before:           Fri 09 Jan 2026 14:32:38 +0000
ROA not after:            Fri 08 Jan 2027 14:37:38 +0000
asID:                     270564
IP address blocks:        148.224.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 17:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4c:6f:01:c2:6a:4d:58:b2:f0:f5:e6:8d:d0:12:e8:04:e2:14:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
        Validity
            Not Before: Jan  9 14:32:38 2026 GMT
            Not After : Jan  8 14:37:38 2027 GMT
        Subject: CN=4C33CB2BA7F7C568B485CA1D07472BD8E5032E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:10:26:08:ad:82:ca:ee:5a:a1:0c:76:15:
                    a1:18:79:aa:1b:46:61:35:15:90:80:36:61:67:ed:
                    b4:09:aa:bf:38:db:92:94:4c:be:97:45:de:78:c4:
                    fc:04:b1:2f:d3:13:8b:8f:ab:82:ef:74:e9:ea:e5:
                    fb:45:28:4f:43:94:a2:91:c4:d2:fa:6b:2f:fd:3e:
                    c6:cb:ea:9c:6a:6e:22:17:23:5d:ba:97:84:4f:82:
                    76:af:e1:b4:b9:b7:ae:71:d0:dc:ef:3e:b6:8a:1c:
                    28:1c:8f:d6:2f:9b:13:ad:ad:a1:3a:c2:64:65:67:
                    aa:b5:2f:b1:21:ce:02:90:bd:a5:9f:ba:07:f7:ab:
                    cf:c3:6c:e8:c5:db:18:ed:76:35:01:57:f1:30:00:
                    e3:97:60:fd:2f:75:46:52:46:fa:60:08:9b:0f:f6:
                    0c:97:45:a6:96:40:e6:27:91:91:8f:3f:4f:9e:0f:
                    ce:58:f6:12:a3:cb:5c:58:6a:5e:4f:4e:b9:1e:44:
                    6f:f9:92:e2:e5:02:b8:0b:06:27:93:06:3f:a1:ac:
                    f2:94:69:68:79:33:a8:4c:e3:3c:5a:cb:4e:90:83:
                    29:53:09:06:53:68:a0:e0:29:b6:ca:4b:8d:cf:f4:
                    63:45:95:03:a1:bf:01:22:22:f8:70:0f:0c:ff:66:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:33:CB:2B:A7:F7:C5:68:B4:85:CA:1D:07:47:2B:D8:E5:03:2E:07
            X509v3 Authority Key Identifier:
                keyid:6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/3134382e3232342e36332e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:61:1a:3b:3c:56:a9:c9:74:63:e8:db:e1:9d:61:b5:9f:bd:
         6d:10:a9:26:a5:9c:93:5a:1e:d6:e0:3b:b0:77:ce:b5:12:af:
         bd:d7:32:b2:a1:b8:d9:8e:3d:86:26:05:39:be:f7:55:8b:d0:
         05:14:43:34:8c:8e:43:0a:ad:5d:cd:58:55:e2:fc:c1:72:94:
         ac:44:21:02:50:6e:19:3d:30:58:28:19:37:82:08:e0:57:66:
         d1:09:71:06:d8:56:5a:05:ab:7e:b7:c8:ed:29:ec:2e:ab:35:
         e1:aa:90:8d:cb:b0:a8:07:22:e6:98:9b:96:e4:45:83:8b:aa:
         57:c2:50:13:84:5a:72:84:e8:44:da:9f:78:3b:e3:e9:87:0d:
         96:ba:be:cd:e7:d6:19:c9:9e:3c:8d:05:d2:29:28:40:22:be:
         da:a0:c4:55:e2:c7:34:e4:e8:2d:6d:4e:0a:de:51:47:e9:13:
         61:34:67:31:d5:0b:33:1a:63:29:7a:79:d8:99:4b:86:4e:00:
         c9:30:df:41:6a:40:d3:7f:96:71:ab:8e:e0:68:b0:da:e7:3a:
         49:27:55:b1:01:65:21:2d:79:53:e9:f9:4a:26:c1:dd:0d:fe:
         a8:d0:18:ec:35:64:1e:7d:68:a1:1b:71:9c:4f:d3:e9:47:4f:
         61:ae:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:40:19 2026 by rpki-client