This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/323830343a323733343a3a2f33322d3333203d3e20323633383834.roa
File:                     323830343a323733343a3a2f33322d3333203d3e20323633383834.roa (raw, json)
Hash identifier:          hg/WkbXW4fAYA65c78yWuAgguQFNShr2DbOeRdEE1/k=
Subject key identifier:   9F:BE:EC:1F:F5:58:FF:8D:11:BD:E3:BE:8B:1A:A3:94:D4:4E:A4:F6
Certificate issuer:       /CN=037FAB82E7054F360259EC96E1964A90506F6093
Certificate serial:       1FB7DA3E1E883E826FBA1818578A06805954736B
Authority key identifier: 03:7F:AB:82:E7:05:4F:36:02:59:EC:96:E1:96:4A:90:50:6F:60:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/037FAB82E7054F360259EC96E1964A90506F6093.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/323830343a323733343a3a2f33322d3333203d3e20323633383834.roa
Signing time:             Fri 26 Dec 2025 19:59:23 +0000
ROA not before:           Fri 26 Dec 2025 19:54:23 +0000
ROA not after:            Fri 25 Dec 2026 19:59:23 +0000
asID:                     263884
IP address blocks:        2804:2734::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/037FAB82E7054F360259EC96E1964A90506F6093.crl
                          rsync://rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/037FAB82E7054F360259EC96E1964A90506F6093.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/037FAB82E7054F360259EC96E1964A90506F6093.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 16:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b7:da:3e:1e:88:3e:82:6f:ba:18:18:57:8a:06:80:59:54:73:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037FAB82E7054F360259EC96E1964A90506F6093
        Validity
            Not Before: Dec 26 19:54:23 2025 GMT
            Not After : Dec 25 19:59:23 2026 GMT
        Subject: CN=9FBEEC1FF558FF8D11BDE3BE8B1AA394D44EA4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:56:2f:f0:3a:4f:7a:0b:20:08:fc:da:74:
                    84:f7:86:f5:89:31:33:64:59:6b:8b:ac:c8:fd:73:
                    10:0d:34:72:2d:94:66:b0:a0:3f:44:89:20:9a:1a:
                    08:1d:77:a3:1e:5d:e2:74:1f:0b:2e:00:36:33:fe:
                    85:b3:19:44:65:76:4f:21:b9:a3:95:4c:23:00:f6:
                    d1:bc:0c:cc:69:07:37:7c:ff:32:0a:cc:6d:5c:df:
                    da:bb:bf:6c:34:df:91:05:b9:e7:a0:7d:bb:15:2a:
                    10:13:d0:10:32:98:fe:21:6c:a0:bb:6f:cd:a7:e5:
                    34:c6:1b:5c:e3:0f:de:16:b5:dd:27:cb:b6:88:10:
                    99:d2:16:b4:83:11:47:fb:ac:03:82:d1:41:86:a4:
                    3f:be:83:6e:02:56:34:a0:60:c8:04:14:a3:3d:22:
                    51:f5:e7:91:10:3f:e8:d7:75:a3:33:82:9c:89:93:
                    0c:a2:43:4d:c3:8b:88:02:b8:5e:a3:dd:e2:8c:de:
                    c0:98:03:d0:68:92:5f:ba:83:a2:e6:68:44:d7:07:
                    0a:40:93:29:e2:c0:9c:b4:81:84:cc:0c:ad:2b:42:
                    da:69:f9:c3:bc:31:a7:7b:0b:04:f6:fc:68:cd:1a:
                    fd:ed:ab:9f:f0:24:7a:28:07:a5:2c:b5:d1:c2:1a:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BE:EC:1F:F5:58:FF:8D:11:BD:E3:BE:8B:1A:A3:94:D4:4E:A4:F6
            X509v3 Authority Key Identifier:
                keyid:03:7F:AB:82:E7:05:4F:36:02:59:EC:96:E1:96:4A:90:50:6F:60:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/037FAB82E7054F360259EC96E1964A90506F6093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/037FAB82E7054F360259EC96E1964A90506F6093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZY1J9AATGxHJDTTEJRgnngeB9DpuJuQFs2iccdTJo5y/0/323830343a323733343a3a2f33322d3333203d3e20323633383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2734::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:a9:fe:d8:1b:34:7c:d9:e0:7a:fd:8a:a1:8f:89:9d:2f:fa:
         55:ce:c5:87:57:0e:4f:43:a2:7b:3c:7c:58:aa:b0:0c:37:17:
         31:39:8b:55:08:c6:f3:72:5c:74:50:7d:2a:d9:0f:2a:6d:f8:
         cd:59:91:68:4b:b6:c9:5a:6a:db:8d:a2:c8:b7:f1:0a:40:de:
         67:e6:4d:d8:d5:39:d4:35:4e:90:5c:56:87:fc:f6:73:b3:cb:
         7e:3c:7f:dd:b5:39:aa:c2:cb:74:41:b0:68:18:c6:54:b3:a2:
         7f:60:0b:2b:a6:56:08:27:d7:37:66:34:5b:1a:1c:44:58:54:
         8b:d0:4d:47:80:b7:0a:bd:d0:57:ae:c6:91:e0:fb:5c:9f:9b:
         20:ba:38:5a:56:c7:3b:71:68:7c:b7:f8:eb:ca:b5:43:cb:71:
         09:55:61:d1:4b:a1:14:da:5c:0e:d6:95:0f:43:b8:0c:3f:5e:
         2c:bb:3c:fb:4e:d8:ca:03:74:dd:d3:e1:2c:35:21:de:f8:79:
         c3:4d:1d:d8:01:29:38:a0:09:f5:f6:68:4d:0a:ee:2d:40:3f:
         12:3e:17:32:b9:cc:f3:ce:07:91:54:8e:da:67:7c:5c:37:c4:
         77:a5:fb:ef:66:a1:05:23:cf:7d:5f:94:05:42:be:cc:3c:61:
         64:73:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:01:54 2025 by rpki-client