This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e20323730353634.roa
File:                     32342e3135322e33392e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          out6gvoDcVP3tDfO22PLmcKaqL1rNjaO18t6vbNJcBI=
Subject key identifier:   31:88:A1:F9:7C:08:C8:DC:9C:D3:27:1E:3A:2A:46:6F:1B:9E:84:10
Certificate issuer:       /CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
Certificate serial:       6B7ACAB8533A99B2C3B1733FB9BD9BC9E9A43B64
Authority key identifier: 6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e20323730353634.roa
Signing time:             Fri 09 Jan 2026 14:35:40 +0000
ROA not before:           Fri 09 Jan 2026 14:30:40 +0000
ROA not after:            Fri 08 Jan 2027 14:35:40 +0000
asID:                     270564
IP address blocks:        24.152.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 17:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7a:ca:b8:53:3a:99:b2:c3:b1:73:3f:b9:bd:9b:c9:e9:a4:3b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
        Validity
            Not Before: Jan  9 14:30:40 2026 GMT
            Not After : Jan  8 14:35:40 2027 GMT
        Subject: CN=3188A1F97C08C8DC9CD3271E3A2A466F1B9E8410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:b8:a7:d1:83:69:f9:ff:9d:a7:82:11:64:
                    62:61:ed:48:dd:7d:d6:b8:01:fa:c6:41:cd:eb:23:
                    23:57:09:68:09:93:2e:cc:5d:5f:41:f4:65:0c:af:
                    18:ab:a7:c5:01:3b:dc:5b:e0:d0:a5:6c:cc:cd:05:
                    a0:76:0a:af:01:c4:85:ae:90:d5:5a:96:b0:d5:7f:
                    2f:2a:46:a8:12:59:40:68:f8:92:f0:37:d0:a0:a3:
                    13:41:15:cc:1a:9e:7d:73:19:09:3c:27:fb:9b:2e:
                    5b:c5:a3:54:07:a6:8e:e1:0c:a5:55:53:90:e0:b0:
                    33:07:3d:90:d0:3c:6c:26:57:98:e0:7a:c1:b1:87:
                    ed:4d:31:3a:d7:d5:cc:82:b1:5a:04:0f:76:bf:a2:
                    f9:73:fb:2b:d9:c0:ff:4f:02:98:22:9d:51:2d:14:
                    46:97:79:b4:dd:d5:84:e4:51:c5:9b:af:b8:6b:42:
                    6a:91:20:96:b7:77:af:f4:9b:da:2d:fb:39:35:4e:
                    1a:d4:6e:d4:83:7d:6e:71:90:cb:2c:dc:c9:cb:61:
                    b8:6a:83:6e:32:21:74:da:a7:86:46:5a:c8:34:de:
                    72:01:3b:69:5c:c4:3b:11:c2:08:dd:ea:12:70:20:
                    52:98:9b:ef:6f:01:1c:fb:d1:b7:0e:7d:10:5c:73:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:88:A1:F9:7C:08:C8:DC:9C:D3:27:1E:3A:2A:46:6F:1B:9E:84:10
            X509v3 Authority Key Identifier:
                keyid:6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:3f:d0:d4:30:6b:35:65:d7:fa:ac:ca:97:d7:ff:84:b3:
         cd:13:3e:9d:26:5d:59:cb:5c:08:77:43:2d:75:60:07:d6:8d:
         cc:03:48:63:4e:74:27:51:27:7c:2e:74:c5:7b:06:d4:54:4b:
         f0:84:a3:7f:0a:ca:e6:d6:ad:cb:87:74:6b:f6:57:1e:7f:4f:
         b6:47:57:b8:1b:fa:ce:4a:50:4a:8d:0b:f0:23:bb:6d:27:1a:
         e5:ac:83:ee:d8:ee:7c:e5:ed:01:34:d8:dd:72:56:07:cc:72:
         2b:7e:e9:2d:21:15:4b:a6:12:b5:8f:d9:93:15:20:b9:24:4e:
         a3:d0:70:01:b2:7a:62:39:92:e8:0d:88:2f:ff:a6:20:1f:5f:
         63:19:cf:9f:c8:3b:54:a1:55:74:1f:34:e6:e6:25:ac:26:c4:
         18:c7:65:fb:32:a6:77:ac:af:f0:32:f0:45:1e:bb:f1:34:65:
         fc:ae:13:5d:c6:8b:f2:b9:08:38:65:86:fb:80:f5:07:5d:b6:
         14:dc:36:0a:3c:a7:10:c2:4c:85:ed:e5:9e:38:87:ed:88:52:
         70:10:a7:56:a3:16:aa:e0:16:1d:a4:a0:e7:59:69:c5:d5:4d:
         cd:88:b9:b9:c1:c4:f4:50:30:00:c6:da:ef:6c:05:2a:12:52:
         71:46:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:33:08 2026 by rpki-client