This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/3137302e38322e3138342e302f32322d3332203d3e203631373431.roa
File:                     3137302e38322e3138342e302f32322d3332203d3e203631373431.roa (raw, json)
Hash identifier:          9Cjcl7Q8XrBVl1qt6UMgKTkPI1tp0r/OoMLRq4jqb1s=
Subject key identifier:   3E:F3:47:42:23:51:CB:10:0F:3D:76:29:A5:EE:2A:FD:F6:31:54:6D
Certificate issuer:       /CN=6344AF440766B9E900B42D4B50C20DDBA639DA4E
Certificate serial:       2AE2DF672B899FE8863DA28993DE8912A8FB1065
Authority key identifier: 63:44:AF:44:07:66:B9:E9:00:B4:2D:4B:50:C2:0D:DB:A6:39:DA:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/3137302e38322e3138342e302f32322d3332203d3e203631373431.roa
Signing time:             Fri 21 Nov 2025 20:39:25 +0000
ROA not before:           Fri 21 Nov 2025 20:34:25 +0000
ROA not after:            Fri 20 Nov 2026 20:39:25 +0000
asID:                     61741
IP address blocks:        170.82.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.crl
                          rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e2:df:67:2b:89:9f:e8:86:3d:a2:89:93:de:89:12:a8:fb:10:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6344AF440766B9E900B42D4B50C20DDBA639DA4E
        Validity
            Not Before: Nov 21 20:34:25 2025 GMT
            Not After : Nov 20 20:39:25 2026 GMT
        Subject: CN=3EF347422351CB100F3D7629A5EE2AFDF631546D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:b5:ad:db:11:65:42:5e:d6:1b:9b:cb:80:
                    0e:6e:c8:5a:72:34:04:27:22:2f:d8:2a:29:4e:ae:
                    5d:19:eb:00:88:c7:29:0f:e8:7a:64:57:2d:97:c4:
                    e0:d0:85:75:be:8e:35:a8:ad:a7:10:54:53:55:4b:
                    b7:98:2d:7e:b9:be:a9:df:0a:32:67:35:f8:8b:1e:
                    03:9f:e8:c8:4d:36:fc:56:75:0a:60:4d:3d:11:89:
                    f6:3c:60:b7:62:be:de:69:aa:a0:ed:32:44:7a:b2:
                    e5:71:37:2d:4c:c7:3a:93:4e:27:63:f2:28:ac:6b:
                    0a:48:18:c3:7a:e2:32:97:f2:c6:83:a8:d4:6f:a6:
                    ff:4f:05:ce:4a:5a:42:71:4c:e2:f6:2d:81:0d:81:
                    d0:dd:c5:9a:50:12:e3:d1:0d:8b:fc:cd:43:6c:7e:
                    04:91:82:cd:9c:77:85:2c:1d:bf:d3:78:9e:1d:11:
                    ea:0f:ee:12:db:5b:ee:b1:c9:3a:ef:5e:b4:78:ec:
                    c1:fa:9c:aa:7a:88:eb:93:1c:35:b7:eb:d2:9a:59:
                    5e:37:fd:12:02:0f:0c:f1:a5:ac:4d:2f:a8:23:86:
                    7b:7b:81:3e:86:c5:af:ed:a3:0d:97:06:41:d2:8c:
                    85:71:69:d9:de:1c:f2:91:0c:98:a9:94:40:a3:d0:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F3:47:42:23:51:CB:10:0F:3D:76:29:A5:EE:2A:FD:F6:31:54:6D
            X509v3 Authority Key Identifier:
                keyid:63:44:AF:44:07:66:B9:E9:00:B4:2D:4B:50:C2:0D:DB:A6:39:DA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/3137302e38322e3138342e302f32322d3332203d3e203631373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:9c:8b:7e:4d:ce:b4:2c:05:9c:c2:95:0d:60:55:2a:69:
         c5:94:66:00:ca:87:ba:5b:44:8f:a8:3c:a2:3b:37:fc:ef:78:
         63:b9:19:50:00:ba:d6:5a:f4:5c:75:c5:97:13:ab:83:19:f9:
         59:16:1d:8a:31:39:20:74:56:0c:05:c2:0d:bf:9e:0a:22:42:
         c6:ba:ab:b4:40:44:c0:ec:99:06:c0:27:0b:c0:ae:e4:7b:53:
         b6:8b:2b:90:30:97:23:21:58:10:da:7c:5d:76:e9:2a:2b:2b:
         58:a5:37:e3:91:ed:62:b3:b5:a6:82:1d:a9:b1:98:2d:09:03:
         3d:fd:7b:be:ae:ed:8a:bf:18:28:bc:89:3f:21:05:85:ba:6a:
         2c:b1:4e:4d:32:3b:ba:7a:d2:6a:ef:b1:b5:db:a0:61:40:46:
         3d:09:61:67:5e:9e:7d:5d:b7:e2:9b:79:7b:44:b6:ed:43:db:
         8e:b2:16:67:00:18:54:e5:0f:e1:7a:e5:6e:5f:13:64:1d:ff:
         89:5c:f8:8b:ce:30:3d:aa:76:1b:d3:b8:c1:72:9e:b1:59:9a:
         19:38:16:bc:7e:54:04:67:b7:df:42:7c:d2:76:21:47:de:f0:
         1d:2c:e2:3d:b9:b1:59:0a:5d:f6:e8:46:6f:8a:cd:03:b2:21:
         9d:a7:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:08:25 2025 by rpki-client