This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a3a2f33332d3333203d3e20323730343938.roa
File:                     323830343a366365303a3a2f33332d3333203d3e20323730343938.roa (raw, json)
Hash identifier:          ZFwq73egv77oItGuV5cIE/KmUyoo5PggFeSqdfF7iPE=
Subject key identifier:   3F:F6:7F:DA:7E:B1:23:9A:E4:08:E9:3E:41:88:FF:98:B7:E6:A3:69
Certificate issuer:       /CN=B487F45E78D59DF1F45590F19639DB670B31088D
Certificate serial:       76C24A01033D73B6996C9FDE2405E083C7ECA959
Authority key identifier: B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a3a2f33332d3333203d3e20323730343938.roa
Signing time:             Mon 05 Jan 2026 13:53:44 +0000
ROA not before:           Mon 05 Jan 2026 13:48:44 +0000
ROA not after:            Mon 04 Jan 2027 13:53:44 +0000
asID:                     270498
IP address blocks:        2804:6ce0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl
                          rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 18:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:4a:01:03:3d:73:b6:99:6c:9f:de:24:05:e0:83:c7:ec:a9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B487F45E78D59DF1F45590F19639DB670B31088D
        Validity
            Not Before: Jan  5 13:48:44 2026 GMT
            Not After : Jan  4 13:53:44 2027 GMT
        Subject: CN=3FF67FDA7EB1239AE408E93E4188FF98B7E6A369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:76:c2:b6:4a:34:a2:b3:2d:2e:c0:57:1c:
                    77:e9:a3:5c:da:da:55:ac:98:f4:17:9b:13:2a:41:
                    ec:da:2e:e6:9f:b0:18:90:f3:a6:c0:1b:05:52:f5:
                    72:10:31:64:ae:37:a6:12:80:29:8d:d0:17:48:10:
                    80:5f:55:e8:c0:55:81:a2:6c:ef:2d:58:2c:01:f1:
                    b6:5a:7e:78:ce:ea:97:39:41:96:e6:12:d4:99:52:
                    2e:c6:b0:d1:60:4e:69:53:56:24:5c:fc:2e:07:31:
                    84:e7:e4:78:42:ae:47:0e:a1:44:b0:31:38:3d:c7:
                    b3:10:a3:12:de:8d:b8:7f:76:9b:5b:75:1b:15:fe:
                    2f:75:c8:69:1f:ef:29:82:60:c0:e4:6e:24:2d:23:
                    15:ad:73:ee:a6:64:2a:aa:4c:01:d2:00:ba:52:5f:
                    d7:e9:07:b1:b2:da:e4:ad:a9:18:98:3e:46:70:d0:
                    a1:56:7a:43:df:74:d6:f1:4f:2f:9e:21:9f:1b:c2:
                    62:8b:70:1d:db:4d:20:d1:02:38:84:57:99:e6:c8:
                    12:a9:fb:4c:a0:e0:f7:8f:16:ce:e5:b5:a0:3d:d9:
                    5b:5b:73:b4:83:47:1c:c6:ca:62:cb:c2:79:e3:2a:
                    cb:d9:ce:9d:eb:e6:79:e6:62:c9:73:62:08:16:c6:
                    5f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:7F:DA:7E:B1:23:9A:E4:08:E9:3E:41:88:FF:98:B7:E6:A3:69
            X509v3 Authority Key Identifier:
                keyid:B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a3a2f33332d3333203d3e20323730343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ce0::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:88:da:91:12:2d:8f:04:5f:6a:1d:07:bb:1a:ac:25:8e:a5:
         80:f7:bc:cf:43:3a:31:28:e6:10:cd:ec:b2:1c:98:a8:c3:d1:
         7d:85:24:04:ed:66:79:46:b9:4e:50:e7:da:29:7b:73:e2:80:
         d2:b7:fa:a0:d8:d8:01:1e:79:fe:88:97:d2:c1:cd:85:81:e3:
         4a:af:bd:f4:ca:4b:a5:42:40:38:45:f3:2c:84:e7:08:f3:df:
         67:d7:d6:6c:e3:28:ee:48:2e:96:55:d7:12:ce:67:e9:4e:48:
         16:1d:62:b0:9f:7d:70:fa:eb:c9:e6:3a:18:e6:b4:72:9c:7c:
         7c:96:9a:e6:30:9b:82:3b:5c:0b:33:d1:97:56:d2:c6:6a:c1:
         72:d7:5d:2c:86:93:f1:08:d8:bb:13:5a:1c:ff:79:af:1e:eb:
         4f:b3:0c:4a:78:1f:75:1a:4f:00:44:fa:52:f7:73:27:db:3e:
         d6:1d:fd:44:11:cb:9b:bb:d0:6a:e4:86:9f:2e:85:54:f1:2b:
         a2:cb:8b:45:ab:96:81:da:b3:6c:50:22:c4:f1:20:a2:47:bc:
         53:79:db:72:e6:e5:03:d6:68:9e:da:8d:bc:1c:3f:be:2b:aa:
         bb:6a:af:c1:4e:60:57:7b:ae:8a:47:8c:ad:c6:e3:43:fd:8a:
         1d:5c:8f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 03:00:45 2026 by rpki-client