This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33382e302f32342d3234203d3e20323730353634.roa
File:                     32342e3135322e33382e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          WgBtWxN+OdHcQw6O7ieT88IF9Q5osf3ELZqPVKCgwjg=
Subject key identifier:   30:1A:35:3D:6F:55:F9:EF:CC:9A:05:B9:67:5F:0A:B4:E2:E3:80:0A
Certificate issuer:       /CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
Certificate serial:       5EB33735286D6A13D77A58C9EFF2388FE874FB8C
Authority key identifier: 6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33382e302f32342d3234203d3e20323730353634.roa
Signing time:             Fri 09 Jan 2026 14:35:40 +0000
ROA not before:           Fri 09 Jan 2026 14:30:40 +0000
ROA not after:            Fri 08 Jan 2027 14:35:40 +0000
asID:                     270564
IP address blocks:        24.152.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 17:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b3:37:35:28:6d:6a:13:d7:7a:58:c9:ef:f2:38:8f:e8:74:fb:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
        Validity
            Not Before: Jan  9 14:30:40 2026 GMT
            Not After : Jan  8 14:35:40 2027 GMT
        Subject: CN=301A353D6F55F9EFCC9A05B9675F0AB4E2E3800A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:0e:9e:a0:c7:13:c0:65:26:af:e1:26:5a:
                    c9:d3:5e:e0:dc:df:f2:b7:4b:38:af:e1:92:82:4d:
                    22:5b:1e:6e:a1:5d:f9:3a:ca:de:44:78:a9:5a:7f:
                    e5:8f:39:39:a9:1e:66:bc:84:a2:4b:d3:f3:ca:21:
                    7a:57:99:48:24:62:cc:69:97:93:4c:2b:91:5c:69:
                    27:58:50:36:ee:36:9e:21:2a:b2:e4:5e:45:bf:39:
                    bb:bd:f8:df:a2:32:a9:cc:da:ad:67:f2:41:f7:2f:
                    e9:5b:94:af:68:54:b5:1c:38:91:b9:15:fe:c2:34:
                    4a:1c:87:82:bd:7f:54:73:fb:af:27:19:c3:38:b5:
                    ae:0d:38:6b:1f:0f:1e:ac:6f:ee:e1:ca:e5:f0:f1:
                    2c:16:b1:bb:6a:96:52:80:e7:71:1f:b9:2c:fa:e0:
                    ac:33:21:74:3d:96:b9:a8:47:85:4e:36:12:55:75:
                    38:10:9f:d9:07:b4:ba:8f:a9:f5:bd:b2:90:af:e8:
                    c0:d7:a7:cb:0a:fe:9a:55:9e:26:f9:f5:d5:fe:56:
                    73:ad:ed:9d:8f:3e:55:91:2d:db:b6:6e:cf:b7:bd:
                    90:91:7c:45:0d:85:96:55:c7:7d:1b:91:50:06:7d:
                    66:4c:63:f1:a8:03:a7:f9:b5:b7:ba:e1:6c:ac:c1:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1A:35:3D:6F:55:F9:EF:CC:9A:05:B9:67:5F:0A:B4:E2:E3:80:0A
            X509v3 Authority Key Identifier:
                keyid:6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33382e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:43:34:b4:14:71:36:bb:78:ba:16:2f:09:1e:12:62:a5:28:
         3f:9f:1e:81:0a:95:bf:9d:ef:15:26:67:f6:4a:78:31:b9:82:
         c4:84:8c:ff:1a:1a:3c:d8:8e:5a:63:04:5a:1f:36:b7:44:bd:
         2e:61:c7:af:b5:a3:cb:30:6d:8c:31:f1:19:c5:1b:3b:5d:44:
         ca:74:27:92:22:6a:c2:e3:e4:7c:db:7d:f0:d9:d0:aa:d2:7c:
         af:ad:44:f7:4d:aa:8d:13:3c:b7:9a:2c:82:38:19:b6:ce:85:
         fc:a1:8d:8c:a3:0b:8a:be:bb:6b:e9:ac:29:35:74:04:79:86:
         c2:6e:10:86:f7:3a:64:39:4c:46:ba:93:97:79:d7:7e:cf:7c:
         29:f5:7e:2f:cf:f8:53:66:d8:0b:97:a3:43:60:a5:d4:28:a8:
         92:9b:e6:00:84:c6:69:ee:ce:96:4b:b9:bc:53:94:16:18:e9:
         a3:09:b5:d5:a0:93:af:d4:2c:03:53:42:7a:38:fb:82:b3:57:
         20:8d:6b:1c:81:ce:49:0d:33:92:9a:47:aa:01:8f:fe:09:53:
         ce:71:ff:fe:04:a4:43:12:a0:a6:5d:5d:9a:80:a7:fa:2b:dd:
         95:ab:81:e2:e6:7c:e4:00:cf:81:78:e9:8f:80:1c:63:05:dd:
         24:e7:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:00:21 2026 by rpki-client