This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a333162383a3a2f33322d3333203d3e20323635303333.roa
File:                     323830343a333162383a3a2f33322d3333203d3e20323635303333.roa (raw, json)
Hash identifier:          +SEp/WRitTdNLnM4b1i+9Lpx6Bd3+rRVT3CxEBfWngY=
Subject key identifier:   32:9F:65:6F:63:98:50:E3:06:35:88:46:6E:84:F6:20:81:8E:04:03
Certificate issuer:       /CN=6BB5D47779C998D7924924980F54C2E604962CE9
Certificate serial:       07003DB1B98A0A6CB5049494CECFB2D40C20396F
Authority key identifier: 6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a333162383a3a2f33322d3333203d3e20323635303333.roa
Signing time:             Wed 24 Dec 2025 20:59:22 +0000
ROA not before:           Wed 24 Dec 2025 20:54:22 +0000
ROA not after:            Wed 23 Dec 2026 20:59:22 +0000
asID:                     265033
IP address blocks:        2804:31b8::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.crl
                          rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:00:3d:b1:b9:8a:0a:6c:b5:04:94:94:ce:cf:b2:d4:0c:20:39:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB5D47779C998D7924924980F54C2E604962CE9
        Validity
            Not Before: Dec 24 20:54:22 2025 GMT
            Not After : Dec 23 20:59:22 2026 GMT
        Subject: CN=329F656F639850E3063588466E84F620818E0403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:68:6a:4d:94:20:74:3e:4b:a9:48:0e:99:
                    22:21:52:2f:c8:a6:e3:3d:48:09:cd:a3:22:75:47:
                    c2:51:c6:9b:be:69:1f:5a:05:8f:13:6f:a7:5f:57:
                    51:af:d0:77:8e:e7:03:f4:0d:4a:2d:d6:00:e3:f6:
                    17:7a:48:97:43:ee:44:cc:57:7f:97:59:bc:a1:aa:
                    6f:52:b2:78:40:8b:89:08:3d:46:4c:1a:46:31:aa:
                    fc:f0:67:78:a4:d9:79:4c:d1:79:06:11:8c:ec:ad:
                    09:cd:a0:3d:cf:fc:c3:21:99:14:41:4e:90:3c:b6:
                    d1:96:ee:4b:cf:65:0f:2b:19:dc:62:0b:b9:59:a4:
                    66:d5:48:b8:17:97:93:6c:91:64:30:4a:3d:05:44:
                    3a:30:3b:53:a0:20:fb:70:57:2f:b4:03:b0:4a:f9:
                    de:5f:22:f5:7b:d3:1f:ae:a3:52:44:ce:ae:ba:bd:
                    93:7e:ee:fe:fb:19:2f:2e:b1:03:bb:89:33:af:7f:
                    cf:36:07:ef:6f:1e:74:68:1a:7c:b9:8f:fc:3f:b0:
                    45:f0:c5:7b:e8:b1:8e:55:19:de:5c:71:05:74:35:
                    00:06:43:48:cc:75:97:ba:f5:e7:4e:e7:63:f3:3e:
                    84:b5:6b:35:6a:11:58:46:a2:03:54:34:c1:73:36:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9F:65:6F:63:98:50:E3:06:35:88:46:6E:84:F6:20:81:8E:04:03
            X509v3 Authority Key Identifier:
                keyid:6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a333162383a3a2f33322d3333203d3e20323635303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:16:53:66:ee:63:aa:55:f8:3f:8d:f7:50:8c:a0:c3:17:01:
         8f:89:91:21:04:16:33:5c:ee:ce:aa:ef:85:86:27:3a:1f:bc:
         8b:08:f0:b4:e6:11:af:cf:f3:58:c1:fd:33:55:92:36:bc:c8:
         b2:a5:06:a5:76:d9:30:ee:ed:2e:93:20:fe:f6:73:56:61:77:
         18:91:56:34:dc:79:68:e3:1b:b0:df:d2:fc:08:ee:8e:0c:58:
         b8:6d:2e:2c:ca:df:41:84:9f:1d:f2:db:c3:da:b7:94:d5:85:
         c6:43:93:d7:91:6d:d6:30:d9:00:96:ca:c6:f1:38:0b:9a:cd:
         d1:6b:b9:d8:97:85:84:c4:51:1b:7c:07:aa:d1:7b:d0:7b:f0:
         54:08:bd:7a:14:63:2f:b0:49:14:bc:6f:50:c7:39:54:4f:4f:
         05:d9:5e:21:7c:49:50:03:e1:f7:82:12:33:16:25:d2:19:a2:
         15:cd:17:10:f9:64:5f:df:69:59:03:d3:5e:b2:aa:d7:0e:eb:
         af:9f:e1:28:9a:1d:ec:fa:d4:7b:7a:4a:90:70:b6:fb:23:e7:
         9f:c2:09:8a:5d:50:1c:84:8b:86:cc:f3:d3:a8:f4:4e:0c:8b:
         32:21:7c:d9:0a:d3:fc:11:85:b6:b0:0c:8c:9b:cf:30:29:7e:
         96:91:fd:11
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBwA9sbmKCmy1BJSUzs+y1AwgOW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJCNUQ0Nzc3OUM5OThENzkyNDkyNDk4MEY1NEMyRTYw
NDk2MkNFOTAeFw0yNTEyMjQyMDU0MjJaFw0yNjEyMjMyMDU5MjJaMDMxMTAvBgNV
BAMTKDMyOUY2NTZGNjM5ODUwRTMwNjM1ODg0NjZFODRGNjIwODE4RTA0MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fGhqTZQgdD5LqUgOmSIhUi/I
puM9SAnNoyJ1R8JRxpu+aR9aBY8Tb6dfV1Gv0HeO5wP0DUot1gDj9hd6SJdD7kTM
V3+XWbyhqm9SsnhAi4kIPUZMGkYxqvzwZ3ik2XlM0XkGEYzsrQnNoD3P/MMhmRRB
TpA8ttGW7kvPZQ8rGdxiC7lZpGbVSLgXl5NskWQwSj0FRDowO1OgIPtwVy+0A7BK
+d5fIvV70x+uo1JEzq66vZN+7v77GS8usQO7iTOvf882B+9vHnRoGny5j/w/sEXw
xXvosY5VGd5ccQV0NQAGQ0jMdZe69edO52PzPoS1azVqEVhGogNUNMFzNnctAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMp9lb2OYUOMGNYhGboT2IIGOBAMwHwYDVR0j
BBgwFoAUa7XUd3nJmNeSSSSYD1TC5gSWLOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEZlQzYxeXB2VE1kczhVTXVaUHBnQTNpamJxcjUxTHFqV2NmZ0ZvNUJR
aXAvMC82QkI1RDQ3Nzc5Qzk5OEQ3OTI0OTI0OTgwRjU0QzJFNjA0OTYyQ0U5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCQjVENDc3NzlDOTk4RDc5
MjQ5MjQ5ODBGNTRDMkU2MDQ5NjJDRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hGZUM2MXlwdlRNZHM4VU11WlBwZ0EzaWpicXI1MUxxaldjZmdGbzVCUWlwLzAv
MzIzODMwMzQzYTMzMzE2MjM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM1
MzAzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxuDANBgkqhkiG9w0BAQsFAAOCAQEAJxZTZu5j
qlX4P433UIygwxcBj4mRIQQWM1zuzqrvhYYnOh+8iwjwtOYRr8/zWMH9M1WSNrzI
sqUGpXbZMO7tLpMg/vZzVmF3GJFWNNx5aOMbsN/S/AjujgxYuG0uLMrfQYSfHfLb
w9q3lNWFxkOT15Ft1jDZAJbKxvE4C5rN0Wu52JeFhMRRG3wHqtF70HvwVAi9ehRj
L7BJFLxvUMc5VE9PBdleIXxJUAPh94ISMxYl0hmiFc0XEPlkX99pWQPTXrKq1w7r
r5/hKJod7PrUe3pKkHC2+yPnn8IJil1QHISLhszz06j0TgyLMiF82QrT/BGFtrAM
jJvPMCl+lpH9EQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:42:29 2026 by rpki-client