This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3333203d3e20323732373037.roa
File:                     323830343a383736383a3a2f33322d3333203d3e20323732373037.roa (raw, json)
Hash identifier:          SpQSYKMjSaypWhxBKBhV8/H2h6x0L6o7zW/ELBHnZTw=
Subject key identifier:   B1:B3:13:5F:D5:0E:FD:76:D6:2A:74:76:D4:20:27:0D:B5:1B:8F:05
Certificate issuer:       /CN=3161B0A075EC6E7B73FE808EE1E4F77D656C1A72
Certificate serial:       72E7AFA5C361A3B8D3FB86572B375A1443E9BEE2
Authority key identifier: 31:61:B0:A0:75:EC:6E:7B:73:FE:80:8E:E1:E4:F7:7D:65:6C:1A:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3333203d3e20323732373037.roa
Signing time:             Fri 28 Nov 2025 16:55:36 +0000
ROA not before:           Fri 28 Nov 2025 16:50:36 +0000
ROA not after:            Fri 27 Nov 2026 16:55:36 +0000
asID:                     272707
IP address blocks:        2804:8768::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.crl
                          rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e7:af:a5:c3:61:a3:b8:d3:fb:86:57:2b:37:5a:14:43:e9:be:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3161B0A075EC6E7B73FE808EE1E4F77D656C1A72
        Validity
            Not Before: Nov 28 16:50:36 2025 GMT
            Not After : Nov 27 16:55:36 2026 GMT
        Subject: CN=B1B3135FD50EFD76D62A7476D420270DB51B8F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:95:ab:1f:6c:59:75:81:6b:83:89:12:eb:
                    69:23:90:3a:86:fe:3b:cd:8f:17:98:30:11:1b:64:
                    7b:fe:dc:88:c6:4f:f1:fc:b3:9f:6b:7a:9c:9f:79:
                    bf:2d:11:fd:f4:dc:27:0e:2d:d9:85:b9:31:75:b4:
                    f8:e8:99:4a:14:93:64:04:fb:09:71:7b:d0:af:ac:
                    29:bf:5e:1e:a5:66:e0:a7:86:99:91:2c:fe:ba:6b:
                    21:9c:05:0c:ef:e7:35:94:d2:28:74:d3:6b:86:ea:
                    0b:3e:2d:a9:71:37:6b:cd:fd:aa:6c:56:b4:17:21:
                    0b:3b:04:9c:6f:be:03:59:94:55:b6:2a:32:3f:d0:
                    ef:46:f8:46:3c:5e:5a:c0:1a:e8:58:ae:31:81:99:
                    05:74:28:da:67:d8:f9:c2:cb:92:ea:f6:d5:c6:52:
                    3b:b9:8c:2d:aa:35:ec:86:8e:53:d5:e0:2e:a9:d3:
                    ac:cd:1a:99:f8:11:bf:55:23:09:06:20:67:6b:07:
                    f3:83:37:77:35:35:22:d9:b1:41:38:2c:3d:d7:ad:
                    b9:7d:b6:37:ec:9d:a8:f1:6c:3d:c7:a5:d8:b2:f4:
                    2d:c7:04:e8:b7:a2:b0:4b:80:e3:c3:c5:11:70:fd:
                    90:5e:d2:e1:1f:4b:af:49:28:20:5a:c2:a9:43:0d:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B3:13:5F:D5:0E:FD:76:D6:2A:74:76:D4:20:27:0D:B5:1B:8F:05
            X509v3 Authority Key Identifier:
                keyid:31:61:B0:A0:75:EC:6E:7B:73:FE:80:8E:E1:E4:F7:7D:65:6C:1A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3333203d3e20323732373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:54:c6:7d:0e:4a:4d:31:d5:35:f1:91:16:af:79:98:9b:38:
         6a:73:b5:a2:f8:fb:c5:4e:74:ec:bc:7b:d7:7a:cf:4d:f0:2b:
         09:87:a0:16:6b:e2:fa:7c:3e:fc:92:fc:cc:a2:37:b5:de:45:
         8c:1b:4e:29:d0:b6:92:bc:0c:75:6c:fd:7f:df:ee:84:7c:16:
         71:38:8f:0d:b0:d8:74:f9:bf:bb:e1:01:e3:43:05:a1:d0:d5:
         52:18:67:ab:6e:b6:41:05:35:8e:c0:7d:2d:08:ba:77:33:2e:
         e9:9d:ec:04:48:7c:00:f8:e7:0c:20:7b:ff:d1:b3:41:37:8c:
         da:bd:d6:73:d4:e9:a6:6a:a8:b5:2c:da:71:37:8f:e0:0e:e7:
         09:82:09:f2:a8:36:65:75:e4:db:65:47:13:26:f9:ed:00:fd:
         cb:cb:eb:67:14:3d:6a:2d:47:6d:be:1a:bf:15:0c:de:41:2b:
         88:ec:53:ef:b3:dc:17:40:06:cc:df:10:37:d0:d0:41:53:b7:
         01:b8:39:73:19:72:6f:bb:4f:52:b7:cc:15:64:54:e1:7b:79:
         1f:24:53:25:1d:57:8a:5c:e2:aa:dd:e7:13:48:d9:12:24:89:
         5e:50:46:47:f4:26:ad:69:82:de:41:39:89:9a:db:1c:fd:d1:
         08:be:ad:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:43 2025 by rpki-client