This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33332d3333203d3e203631383736.roa
File:                     323830343a316162303a3a2f33332d3333203d3e203631383736.roa (raw, json)
Hash identifier:          p/CtnkwIUYThVJyrU4OpVh30BwBADwRUwFzzPgx6hQI=
Subject key identifier:   82:D9:C7:FE:1C:1A:27:BC:7A:B2:ED:9E:4A:76:44:34:F7:CC:BF:2A
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       1553AF571E54E951865A252E863E85B43C7A22C6
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33332d3333203d3e203631383736.roa
Signing time:             Tue 23 Dec 2025 17:48:08 +0000
ROA not before:           Tue 23 Dec 2025 17:43:08 +0000
ROA not after:            Tue 22 Dec 2026 17:48:08 +0000
asID:                     61876
IP address blocks:        2804:1ab0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 11:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:53:af:57:1e:54:e9:51:86:5a:25:2e:86:3e:85:b4:3c:7a:22:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Dec 23 17:43:08 2025 GMT
            Not After : Dec 22 17:48:08 2026 GMT
        Subject: CN=82D9C7FE1C1A27BC7AB2ED9E4A764434F7CCBF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:d3:e8:ae:ed:6c:f3:cf:13:da:27:8b:68:
                    a4:77:a3:05:45:48:b5:f7:5c:8c:a9:44:4a:20:68:
                    21:38:9f:43:e1:33:08:5f:f2:a3:90:c8:41:50:4f:
                    df:05:6f:d7:4d:be:60:06:4e:85:c7:ba:0f:df:72:
                    fc:b3:ca:c7:c8:90:98:ce:04:5d:e5:99:20:5e:0f:
                    24:32:8c:39:b2:cd:db:63:0c:7a:06:2b:db:86:fb:
                    79:4d:26:78:c5:ef:f0:99:27:6f:6b:24:34:11:ec:
                    1f:af:34:db:d3:0c:c2:5e:1b:49:a8:0e:05:35:13:
                    75:5e:fa:61:4e:af:92:aa:3c:5e:6f:41:ed:ff:9d:
                    6c:9f:c1:07:c2:74:1a:ed:47:3e:4d:70:be:eb:47:
                    2b:83:b1:d6:5e:a7:22:08:df:a9:0c:c8:a3:74:ed:
                    53:34:76:8e:2c:22:33:f6:c3:c1:71:24:58:3f:e4:
                    83:d0:c0:24:bf:27:29:64:b5:d7:70:2e:d3:8c:1f:
                    77:31:75:75:7f:cd:5e:d7:0c:6c:d0:83:59:89:23:
                    9e:69:4b:bd:1c:ab:3f:c9:a9:55:c0:36:39:e6:95:
                    8e:b6:da:22:e3:a6:f7:89:92:52:35:5e:ad:98:78:
                    1a:cf:95:f8:ec:de:a5:73:54:53:ed:c6:c3:ba:bb:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D9:C7:FE:1C:1A:27:BC:7A:B2:ED:9E:4A:76:44:34:F7:CC:BF:2A
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33332d3333203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ab0::/33

    Signature Algorithm: sha256WithRSAEncryption
         cc:9e:12:e7:a5:0e:e1:47:1c:27:aa:40:a8:52:4e:68:28:09:
         28:6b:3f:c3:82:a1:a7:62:65:1f:13:07:5d:91:09:73:25:48:
         56:01:d0:0f:7d:fc:3a:d2:1d:93:10:33:55:66:51:89:48:8b:
         45:ea:36:ac:25:10:0f:81:2a:a7:ec:2f:cd:4e:e3:b6:0c:25:
         cb:2b:d4:6c:36:bd:e4:97:e4:fd:4c:c6:65:f7:2a:40:dc:66:
         35:ab:38:c1:36:b9:d8:f1:b8:62:4b:d5:1d:55:de:bf:f3:76:
         6c:0e:61:07:c3:19:62:93:c8:ca:ec:1c:6d:f0:a8:17:34:0a:
         81:8b:54:86:16:32:2e:d7:01:ae:52:11:eb:4a:77:f9:e5:bf:
         b7:f2:26:ec:de:7c:55:1d:68:77:35:ea:de:23:b8:03:25:47:
         51:2d:1a:e7:8f:ba:00:79:fe:e8:48:2a:77:da:2f:82:bf:c5:
         16:4b:7d:89:da:6b:d3:ab:8a:b5:bc:e0:ad:a0:90:83:ef:d4:
         27:d4:52:c9:b3:d6:3f:83:a9:1e:cc:d6:f5:2e:e5:47:37:9a:
         13:66:7d:99:29:71:27:05:dc:cb:fe:01:ae:31:15:52:ad:31:
         d7:5d:00:9a:b2:ce:c2:c3:6d:55:4f:27:78:70:12:96:5d:0f:
         df:2a:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:00:48 2026 by rpki-client