This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a383030303a3a2f33332d3333203d3e20323637343236.roa
File:                     323830343a343135303a383030303a3a2f33332d3333203d3e20323637343236.roa (raw, json)
Hash identifier:          E7QxCKHs9Egtbr8ADewkiQT4uZDhYLxcymFDhx/m5bo=
Subject key identifier:   33:81:39:68:B6:EC:C3:66:A1:91:CA:66:D8:3A:4C:D0:52:DE:CF:FC
Certificate issuer:       /CN=260EE392369BDD887A63357EE7B7AD430F10C170
Certificate serial:       32600E60BF6AA5535A741406144565136883C74C
Authority key identifier: 26:0E:E3:92:36:9B:DD:88:7A:63:35:7E:E7:B7:AD:43:0F:10:C1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/260EE392369BDD887A63357EE7B7AD430F10C170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a383030303a3a2f33332d3333203d3e20323637343236.roa
Signing time:             Tue 16 Dec 2025 17:29:37 +0000
ROA not before:           Tue 16 Dec 2025 17:24:37 +0000
ROA not after:            Tue 15 Dec 2026 17:29:37 +0000
asID:                     267426
IP address blocks:        2804:4150:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/260EE392369BDD887A63357EE7B7AD430F10C170.crl
                          rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/260EE392369BDD887A63357EE7B7AD430F10C170.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/260EE392369BDD887A63357EE7B7AD430F10C170.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:60:0e:60:bf:6a:a5:53:5a:74:14:06:14:45:65:13:68:83:c7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260EE392369BDD887A63357EE7B7AD430F10C170
        Validity
            Not Before: Dec 16 17:24:37 2025 GMT
            Not After : Dec 15 17:29:37 2026 GMT
        Subject: CN=33813968B6ECC366A191CA66D83A4CD052DECFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:93:2a:a2:a6:56:d6:d5:5f:f7:4f:24:53:
                    31:27:f3:a6:73:ef:60:4b:e0:53:a6:3b:97:d7:75:
                    1b:9e:c8:92:d9:4f:8f:bd:05:7c:8a:68:3c:16:4e:
                    75:61:23:17:0a:d6:2b:63:97:b3:96:72:d3:b9:06:
                    dc:f1:ac:ae:8b:b9:8f:3c:96:a7:ee:00:23:2c:4f:
                    95:96:7b:82:d4:01:9f:87:51:c7:a2:f2:a8:eb:77:
                    37:4f:43:41:8d:8d:c4:b4:c8:c0:0f:24:2e:0f:e5:
                    7f:a0:1f:fe:79:34:ad:00:ac:28:05:bd:47:72:54:
                    81:a4:75:28:3a:08:3b:33:dd:43:c6:83:d0:64:7d:
                    78:54:da:6d:5b:92:3b:83:67:9d:e2:1c:85:c7:11:
                    63:d5:ae:3d:6e:6d:6b:20:fd:df:eb:34:b1:ed:f9:
                    1e:86:c1:10:1a:68:94:8f:41:24:35:21:c6:92:a8:
                    d1:5b:1b:44:44:3f:cf:7a:f2:93:02:29:45:a8:bf:
                    bb:12:6c:fe:89:04:0e:ed:b6:b7:19:43:8c:0f:d5:
                    e9:85:91:a2:ed:7e:f2:b4:b8:0e:6b:11:c4:9d:54:
                    38:21:0c:82:3c:75:77:28:af:97:b8:71:63:67:da:
                    c9:ab:30:28:c2:36:38:3e:33:38:3b:23:c8:c5:e4:
                    a4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:81:39:68:B6:EC:C3:66:A1:91:CA:66:D8:3A:4C:D0:52:DE:CF:FC
            X509v3 Authority Key Identifier:
                keyid:26:0E:E3:92:36:9B:DD:88:7A:63:35:7E:E7:B7:AD:43:0F:10:C1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/260EE392369BDD887A63357EE7B7AD430F10C170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/260EE392369BDD887A63357EE7B7AD430F10C170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a383030303a3a2f33332d3333203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4150:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ab:95:e8:0a:90:6d:f4:ca:db:9e:e5:b6:86:fa:0a:23:42:6c:
         c6:bf:83:6e:0b:2b:86:7f:e3:d2:21:68:41:c3:c4:ce:64:0f:
         16:37:41:ed:8a:c6:d0:cb:3c:bf:fb:a0:a9:33:d4:6b:91:38:
         36:b4:f2:2b:1c:27:64:a7:9c:43:73:da:3c:7c:b0:b4:67:7e:
         8d:a1:23:8d:fb:ae:f9:64:a0:f3:3d:b7:84:cd:db:95:b5:87:
         8d:68:dd:82:64:e8:c8:b7:bb:6c:a6:5c:4e:95:20:85:98:42:
         ce:76:2e:85:68:26:e5:76:7b:bc:76:f0:a4:c1:da:6f:1b:99:
         ce:28:54:10:44:c7:da:07:9c:3e:69:cf:99:0d:3c:ae:ca:58:
         66:b2:78:fa:a9:a6:cc:cf:32:2c:b1:4a:98:49:35:9e:dc:b5:
         46:09:39:45:17:18:d2:63:61:0c:68:fe:e5:03:3e:39:1b:cc:
         a7:00:71:ab:08:65:8f:e0:93:4d:19:c1:a7:74:7d:52:a5:8d:
         6b:0d:dd:f6:ac:eb:49:0d:71:0a:95:37:a3:56:c8:0c:cf:b0:
         fe:d1:f0:b2:c5:04:18:ae:d5:3a:2f:25:c0:65:1f:9a:1f:d0:
         a7:05:7d:60:8e:75:bc:34:c4:f0:47:22:18:a4:74:ad:64:2f:
         df:fc:03:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:47:01 2025 by rpki-client