This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132322e302f32332d3233203d3e20323730343938.roa
File:                     32342e3135322e3132322e302f32332d3233203d3e20323730343938.roa (raw, json)
Hash identifier:          SldFoQq6oZXXsE8Gxfhr8Y/qwEKSA54iCUDoFqj3NyI=
Subject key identifier:   DF:A6:B8:E0:69:EC:4D:FC:D6:4F:2B:23:03:4A:A0:F7:7D:78:73:12
Certificate issuer:       /CN=B487F45E78D59DF1F45590F19639DB670B31088D
Certificate serial:       786A88F263EEAD0DC49A476C2ED98BA582B63A95
Authority key identifier: B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132322e302f32332d3233203d3e20323730343938.roa
Signing time:             Mon 05 Jan 2026 13:53:37 +0000
ROA not before:           Mon 05 Jan 2026 13:48:37 +0000
ROA not after:            Mon 04 Jan 2027 13:53:37 +0000
asID:                     270498
IP address blocks:        24.152.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl
                          rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 09:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6a:88:f2:63:ee:ad:0d:c4:9a:47:6c:2e:d9:8b:a5:82:b6:3a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B487F45E78D59DF1F45590F19639DB670B31088D
        Validity
            Not Before: Jan  5 13:48:37 2026 GMT
            Not After : Jan  4 13:53:37 2027 GMT
        Subject: CN=DFA6B8E069EC4DFCD64F2B23034AA0F77D787312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:65:b5:4c:95:64:43:a7:84:0e:56:0b:ab:
                    f9:c5:79:c6:25:36:fc:51:b0:7b:5f:9a:e1:f6:4f:
                    99:ed:57:88:dd:6b:35:ee:d2:b3:10:31:9c:47:91:
                    02:16:31:f4:f5:4e:9f:79:4f:19:d6:f6:10:f8:42:
                    e3:47:95:fc:4f:5b:f8:15:5b:26:fb:70:29:87:a2:
                    6a:80:86:df:78:5a:6e:28:f7:fd:bd:5b:a3:8e:a0:
                    2c:52:79:80:d5:4a:8b:63:f2:3a:ad:e2:9d:8e:1d:
                    d1:53:1b:fa:6b:df:13:66:d9:aa:d5:f6:33:f0:59:
                    d0:f4:f4:fd:0a:cc:30:99:4e:d8:50:d1:d2:70:cb:
                    6d:4f:4d:17:60:86:f2:a2:03:54:9a:3a:ba:23:dc:
                    c9:a8:bc:65:c3:a1:aa:43:2d:0f:1b:df:cb:2e:f5:
                    f2:e4:26:76:44:c1:ec:0c:0d:03:e3:f4:0a:58:f9:
                    18:ae:50:b8:40:8e:e9:bf:36:c5:46:4c:c9:05:57:
                    15:d3:3d:fd:32:fc:26:af:01:ce:ef:73:59:7e:16:
                    b3:c3:74:f2:01:e7:a6:1c:02:b8:5f:12:cf:ee:bb:
                    c8:1b:67:7a:a4:7f:ac:55:45:05:85:c1:cb:2a:7d:
                    6f:b6:47:c2:8a:79:6c:48:08:d6:29:68:e1:ea:11:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:B8:E0:69:EC:4D:FC:D6:4F:2B:23:03:4A:A0:F7:7D:78:73:12
            X509v3 Authority Key Identifier:
                keyid:B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/32342e3135322e3132322e302f32332d3233203d3e20323730343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:18:09:a7:1d:7f:40:47:8c:36:1d:9e:1f:bc:6a:1f:fa:
         da:25:cc:fc:81:f1:0d:83:fd:48:9e:06:b8:8f:f7:65:ca:fe:
         9f:fc:54:7d:2b:a7:1f:51:49:95:c9:8a:c3:81:1c:3b:3f:10:
         cf:90:e4:9b:97:a3:5d:c9:3b:f0:9e:96:54:16:fc:6a:25:d5:
         e0:91:c0:8b:ff:61:e8:7a:ba:96:0c:cf:2b:b2:b7:cf:57:b4:
         da:90:ad:7e:d3:50:93:b9:d8:68:07:b1:82:fe:49:ac:48:e5:
         1a:3e:8b:73:38:74:55:f4:9b:6c:c1:cf:24:41:0a:91:4d:f9:
         21:8c:ca:f0:d1:75:4b:87:77:24:77:a9:a3:f7:78:70:b0:55:
         81:d1:ca:1e:29:73:34:11:94:01:01:50:be:10:fc:d5:3a:ff:
         a4:b1:f9:f9:73:41:e4:6c:19:95:c0:3a:66:7d:15:92:d2:2b:
         c3:d0:67:e2:7e:d2:64:74:11:b1:74:a4:ff:73:20:d8:f7:cb:
         b7:9f:70:7c:52:80:ea:cc:3e:3a:f0:30:f4:64:d2:46:ef:4a:
         5e:98:00:8e:38:e5:51:b2:9f:7d:aa:34:ca:01:10:c7:ac:9c:
         d6:af:c4:3e:cd:d4:e3:10:8a:88:8c:52:7b:1c:4f:30:1c:7b:
         9a:b9:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:10:18 2026 by rpki-client