This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d313238203d3e20323733333831.roa
File:                     323830343a386463633a3a2f33322d313238203d3e20323733333831.roa (raw, json)
Hash identifier:          JI/vWwc/giFn3mRUwN+JkKZkG4WQPXnajfwkiPE47nI=
Subject key identifier:   6D:80:21:37:1B:0A:97:D9:57:B2:4B:F9:36:9E:84:55:FB:2C:99:30
Certificate issuer:       /CN=6092F32A3AE1D5E11FF7192321063EC876C94B71
Certificate serial:       2F8C04BB927028B5FB27C5347F1B9B03A9071B49
Authority key identifier: 60:92:F3:2A:3A:E1:D5:E1:1F:F7:19:23:21:06:3E:C8:76:C9:4B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6092F32A3AE1D5E11FF7192321063EC876C94B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d313238203d3e20323733333831.roa
Signing time:             Mon 08 Dec 2025 12:53:25 +0000
ROA not before:           Mon 08 Dec 2025 12:48:25 +0000
ROA not after:            Mon 07 Dec 2026 12:53:25 +0000
asID:                     273381
IP address blocks:        2804:8dcc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/6092F32A3AE1D5E11FF7192321063EC876C94B71.crl
                          rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/6092F32A3AE1D5E11FF7192321063EC876C94B71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6092F32A3AE1D5E11FF7192321063EC876C94B71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8c:04:bb:92:70:28:b5:fb:27:c5:34:7f:1b:9b:03:a9:07:1b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6092F32A3AE1D5E11FF7192321063EC876C94B71
        Validity
            Not Before: Dec  8 12:48:25 2025 GMT
            Not After : Dec  7 12:53:25 2026 GMT
        Subject: CN=6D8021371B0A97D957B24BF9369E8455FB2C9930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:5f:16:a1:c4:51:16:70:e5:2f:c4:23:f0:
                    d9:43:a2:19:a8:43:50:a3:2d:f6:82:30:f2:66:02:
                    e7:9f:5a:b9:77:02:f3:be:48:a1:02:63:8a:6f:27:
                    2a:b5:2b:03:41:83:8c:fd:ff:31:b2:95:eb:1b:a9:
                    bd:a8:dd:51:8f:84:73:76:c8:62:17:ed:37:86:03:
                    1e:bd:7e:b6:37:f9:cb:e0:25:f7:37:74:95:77:54:
                    69:e6:38:fb:53:53:ea:9b:a6:b1:db:55:75:0d:4a:
                    1a:c2:4e:ea:bf:55:54:df:d7:a3:3a:30:79:15:cf:
                    1a:cf:17:ab:ba:08:fd:93:1e:5b:0a:4a:94:9a:15:
                    ba:39:98:d8:12:62:dd:71:09:25:3b:f0:c7:bc:f2:
                    6b:73:05:98:f4:98:9b:18:64:0d:00:b0:bf:be:41:
                    9d:c1:7e:66:48:f4:98:9e:7b:46:e6:ea:33:29:a6:
                    39:7e:f1:10:31:64:f9:e5:d4:d4:9e:3e:39:e3:6e:
                    18:f6:04:78:5b:65:f4:58:76:ff:d5:ee:d0:7f:db:
                    cc:3e:ba:60:48:ad:d6:2c:4b:4a:7b:88:07:7c:c2:
                    70:a9:ec:37:46:e3:d6:4a:af:3f:4d:21:6b:98:a8:
                    dc:a7:38:8a:df:f4:63:4c:bf:23:21:55:49:e5:53:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:80:21:37:1B:0A:97:D9:57:B2:4B:F9:36:9E:84:55:FB:2C:99:30
            X509v3 Authority Key Identifier:
                keyid:60:92:F3:2A:3A:E1:D5:E1:1F:F7:19:23:21:06:3E:C8:76:C9:4B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/6092F32A3AE1D5E11FF7192321063EC876C94B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6092F32A3AE1D5E11FF7192321063EC876C94B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d313238203d3e20323733333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:62:04:52:df:e1:18:5e:ca:12:b3:23:d1:56:40:86:ee:
         9d:2a:0a:d2:3a:4a:2c:62:97:68:3e:f8:42:3f:d4:1f:25:a8:
         2d:c9:89:1a:5b:04:f4:0d:c6:81:1a:e7:c0:80:e8:ee:b6:29:
         47:4e:b3:b4:35:0d:c2:fa:a8:00:f5:31:1f:02:1d:60:a1:c8:
         21:05:77:de:ba:2e:b9:f0:86:12:a8:8c:1e:2f:82:4f:90:ae:
         ac:29:2e:2c:42:db:61:4e:48:b3:21:b5:0c:73:4e:bc:7f:db:
         29:f5:ac:7e:eb:77:76:6e:d4:be:7d:92:e4:36:98:a7:8c:37:
         b4:5e:c1:30:a1:f9:3a:bf:24:b4:62:22:90:dd:5a:1d:75:03:
         81:c5:73:20:70:b0:aa:83:a2:c5:84:5b:87:39:de:8f:bb:04:
         30:5b:2b:b6:14:01:b7:1e:33:73:a9:74:e5:78:70:ea:28:a2:
         23:85:8d:73:91:4f:5a:a0:e1:e0:f0:16:50:f5:72:fc:ce:ec:
         49:3d:ee:fc:dd:ae:2f:b7:88:29:be:89:f8:80:31:87:4b:43:
         eb:6e:cf:bb:81:dc:38:b0:4c:b0:9f:0f:9e:c7:11:73:a6:3c:
         72:03:00:25:d8:03:9d:86:6e:df:79:9c:e8:c3:e1:6a:0a:82:
         75:94:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:27 2026 by rpki-client