This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa
File:                     323830343a336462383a3a2f33322d3430203d3e20323636353439.roa (raw, json)
Hash identifier:          GG2ekqsPEzHUv1xeSak7VDUr/9ftvbnKdFDUaWHbG9w=
Subject key identifier:   18:5E:0A:C0:C9:A7:0E:FD:58:BA:A3:A5:18:56:59:EE:41:02:3F:7E
Certificate issuer:       /CN=0AA75444C92119507239668F559768FBF95AE208
Certificate serial:       6186BE0DE16EED96A6A41A31AD8EDD7161BF2154
Authority key identifier: 0A:A7:54:44:C9:21:19:50:72:39:66:8F:55:97:68:FB:F9:5A:E2:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa
Signing time:             Tue 23 Dec 2025 12:23:11 +0000
ROA not before:           Tue 23 Dec 2025 12:18:11 +0000
ROA not after:            Tue 22 Dec 2026 12:23:11 +0000
asID:                     266549
IP address blocks:        2804:3db8::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.crl
                          rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 08:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:86:be:0d:e1:6e:ed:96:a6:a4:1a:31:ad:8e:dd:71:61:bf:21:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA75444C92119507239668F559768FBF95AE208
        Validity
            Not Before: Dec 23 12:18:11 2025 GMT
            Not After : Dec 22 12:23:11 2026 GMT
        Subject: CN=185E0AC0C9A70EFD58BAA3A5185659EE41023F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:ea:da:c1:a9:63:e1:cb:2f:99:1d:e9:a1:
                    e3:72:1e:5e:b1:d8:16:a3:de:7a:bb:36:ff:67:7c:
                    d4:dd:08:45:91:24:d4:e8:17:99:03:2c:9a:bd:ac:
                    05:a6:c6:bb:aa:52:63:42:cd:4e:21:e6:db:43:5f:
                    37:12:aa:45:3e:24:d0:1a:a8:e4:24:bb:ae:9d:83:
                    8d:09:4d:1c:37:62:0c:fa:4a:8b:7f:14:d4:f0:78:
                    0a:00:57:6f:26:4a:3e:b7:d0:cf:ef:83:09:f5:b9:
                    ad:af:c6:58:39:fc:df:95:9f:ef:59:b4:73:38:be:
                    b3:16:eb:42:30:f0:71:aa:d6:e2:0f:13:84:98:be:
                    ec:5a:55:b0:73:cb:34:0a:89:8a:67:5c:ee:71:19:
                    d3:8f:f2:eb:eb:40:d9:32:ab:bb:e0:e2:22:a5:fe:
                    40:37:09:0c:f1:b8:ab:ab:29:01:38:d4:bf:2d:c7:
                    4c:6f:62:12:5b:f6:94:be:e1:68:91:68:a9:33:72:
                    00:1a:dd:bc:d8:c5:69:90:41:b6:f5:d5:7a:a9:6d:
                    d3:44:ad:1c:0e:1e:95:31:a3:4a:17:94:a1:0a:83:
                    5d:96:fc:db:b6:4f:f7:1e:86:cd:b2:fa:c8:18:58:
                    00:ce:4a:58:9a:3a:22:52:ca:7f:e5:e8:8f:97:21:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5E:0A:C0:C9:A7:0E:FD:58:BA:A3:A5:18:56:59:EE:41:02:3F:7E
            X509v3 Authority Key Identifier:
                keyid:0A:A7:54:44:C9:21:19:50:72:39:66:8F:55:97:68:FB:F9:5A:E2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/0AA75444C92119507239668F559768FBF95AE208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA75444C92119507239668F559768FBF95AE208.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db8::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:d2:9f:21:8a:28:2e:3d:8b:fd:a5:e2:a4:b6:2d:8a:53:
         ca:5f:d4:89:80:55:d7:b2:ba:09:28:1e:1e:4d:6f:34:f7:2f:
         f1:29:86:d3:bd:9e:f9:60:46:01:ed:d2:11:72:da:26:11:69:
         a9:a6:a6:35:af:75:c6:35:75:22:f4:d3:ae:c1:2b:3c:0a:c5:
         c1:24:f2:df:96:d6:81:ec:ae:d4:99:fd:3d:21:38:b0:2c:02:
         77:8c:1b:56:a8:12:0f:a9:36:74:df:29:d1:3b:59:20:ac:9c:
         9b:8e:51:55:53:9a:c3:7a:0d:a5:50:d8:72:07:c5:a5:04:46:
         24:f2:1a:ac:38:18:61:76:a6:57:b1:fd:a8:94:5f:7b:8c:37:
         02:51:3f:4e:41:e8:2e:38:ea:71:20:22:13:78:23:e1:57:d4:
         b0:ad:3d:7f:fc:64:8c:b1:2f:29:5f:18:ad:8d:52:27:b8:30:
         5e:68:6a:8f:71:39:1b:91:60:3a:cd:a8:2a:f3:6c:3b:02:03:
         d1:5b:d5:c4:c9:a8:11:47:c4:d1:fc:e7:54:84:62:c2:af:2b:
         0d:6d:63:7c:c3:9f:c1:10:76:2c:a5:db:ec:b5:86:18:cc:69:
         b6:23:89:8f:7b:eb:a3:32:fe:b7:d7:17:e6:d5:ad:d4:a3:22:
         cc:9c:9e:0d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYYa+DeFu7ZampBoxrY7dcWG/IVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBNzU0NDRDOTIxMTk1MDcyMzk2NjhGNTU5NzY4RkJG
OTVBRTIwODAeFw0yNTEyMjMxMjE4MTFaFw0yNjEyMjIxMjIzMTFaMDMxMTAvBgNV
BAMTKDE4NUUwQUMwQzlBNzBFRkQ1OEJBQTNBNTE4NTY1OUVFNDEwMjNGN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLurawalj4csvmR3poeNyHl6x
2Baj3nq7Nv9nfNTdCEWRJNToF5kDLJq9rAWmxruqUmNCzU4h5ttDXzcSqkU+JNAa
qOQku66dg40JTRw3Ygz6Sot/FNTweAoAV28mSj630M/vgwn1ua2vxlg5/N+Vn+9Z
tHM4vrMW60Iw8HGq1uIPE4SYvuxaVbBzyzQKiYpnXO5xGdOP8uvrQNkyq7vg4iKl
/kA3CQzxuKurKQE41L8tx0xvYhJb9pS+4WiRaKkzcgAa3bzYxWmQQbb11XqpbdNE
rRwOHpUxo0oXlKEKg12W/Nu2T/cehs2y+sgYWADOSliaOiJSyn/l6I+XIQaFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGF4KwMmnDv1YuqOlGFZZ7kECP34wHwYDVR0j
BBgwFoAUCqdURMkhGVByOWaPVZdo+/la4ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9taG9RWnVuZUJDcUp0Vk1Od1Y2bUNYQmJjejVkN1lkQTVQYm5ib3ZK
RkMvMC8wQUE3NTQ0NEM5MjExOTUwNzIzOTY2OEY1NTk3NjhGQkY5NUFFMjA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQTc1NDQ0QzkyMTE5NTA3
MjM5NjY4RjU1OTc2OEZCRjk1QUUyMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvbWhvUVp1bmVCQ3FKdFZNTndWNm1DWEJiY3o1ZDdZZEE1UGJuYm92SkZDLzAv
MzIzODMwMzQzYTMzNjQ2MjM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM2
MzUzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ9uDANBgkqhkiG9w0BAQsFAAOCAQEASI/SnyGK
KC49i/2l4qS2LYpTyl/UiYBV17K6CSgeHk1vNPcv8SmG072e+WBGAe3SEXLaJhFp
qaamNa91xjV1IvTTrsErPArFwSTy35bWgeyu1Jn9PSE4sCwCd4wbVqgSD6k2dN8p
0TtZIKycm45RVVOaw3oNpVDYcgfFpQRGJPIarDgYYXamV7H9qJRfe4w3AlE/TkHo
LjjqcSAiE3gj4VfUsK09f/xkjLEvKV8YrY1SJ7gwXmhqj3E5G5FgOs2oKvNsOwID
0VvVxMmoEUfE0fznVIRiwq8rDW1jfMOfwRB2LKXb7LWGGMxptiOJj3vrozL+t9cX
5tWt1KMizJyeDQ==
-----END CERTIFICATE-----
Generated at Wed Jan 7 22:21:49 2026 by rpki-client