This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa
File:                     323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa (raw, json)
Hash identifier:          as2L22PmjDcX5KRBiBaQ2Q8uoaoIlXfeFChr3BYiLao=
Subject key identifier:   CF:24:BC:56:47:42:1C:AB:10:63:CB:EB:5E:B5:9C:D1:FB:08:A3:7B
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       572BAEAAD0B07E44556882BCC0E85FE7B1D7EBBC
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa
Signing time:             Fri 19 Dec 2025 00:23:58 +0000
ROA not before:           Fri 19 Dec 2025 00:18:58 +0000
ROA not after:            Fri 18 Dec 2026 00:23:58 +0000
asID:                     267024
IP address blocks:        2804:46fc:6600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 03:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2b:ae:aa:d0:b0:7e:44:55:68:82:bc:c0:e8:5f:e7:b1:d7:eb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Dec 19 00:18:58 2025 GMT
            Not After : Dec 18 00:23:58 2026 GMT
        Subject: CN=CF24BC5647421CAB1063CBEB5EB59CD1FB08A37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:45:fe:3a:bf:84:3f:b8:5d:26:36:0c:0d:
                    ac:32:82:42:78:87:55:ac:99:cd:91:47:8b:c2:1f:
                    61:02:fc:30:1b:25:43:08:18:cb:a5:25:a2:4d:5a:
                    39:a0:86:13:78:a6:71:f8:5b:e0:73:39:cf:7b:06:
                    19:fd:20:f5:92:c3:44:36:01:77:7a:d8:b7:40:48:
                    ac:6a:36:4f:8b:2b:80:96:1d:91:7e:81:87:ab:59:
                    76:1e:8a:ee:bd:e0:bd:2a:5c:55:d5:7c:57:cd:07:
                    32:f1:3a:a4:f2:63:da:a0:89:9c:78:cc:d7:cf:1e:
                    cc:ee:11:01:46:7c:f4:63:c4:85:66:70:e9:c4:da:
                    e0:2c:e3:59:fb:14:d3:c0:c9:43:be:1d:27:94:69:
                    9a:e7:ba:5c:b8:73:56:ff:bd:81:d4:93:1d:f5:5b:
                    26:a8:07:17:9f:c5:c6:9f:ec:e5:98:5d:1b:2b:23:
                    4d:08:5d:de:cb:7b:7d:14:1b:79:8a:fc:7a:ba:ae:
                    36:3d:4d:4f:f8:e1:c9:d1:92:ed:ca:ac:05:e1:61:
                    4a:27:69:14:e7:8a:ae:0e:73:3d:c5:2c:06:55:00:
                    4d:f9:b9:92:c7:2d:a3:1c:ae:33:52:97:e0:fc:37:
                    e1:9d:4a:7d:f9:b7:83:b1:48:fd:27:70:d0:89:5d:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:24:BC:56:47:42:1C:AB:10:63:CB:EB:5E:B5:9C:D1:FB:08:A3:7B
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:54:96:4c:6a:62:bd:f2:97:9a:19:59:35:ab:ac:15:7c:f4:
         7c:02:5b:46:fc:c3:f2:24:38:d3:19:be:9e:bb:1e:52:b9:d6:
         a4:80:36:fa:ec:c0:9f:1e:3f:cf:04:6b:84:c0:ba:0e:35:0c:
         f7:f4:c7:31:36:5b:e5:4b:c8:54:b8:aa:d1:56:ab:28:dc:5b:
         e4:9d:05:38:c5:bb:5a:14:ee:49:e3:e5:61:68:df:d7:f8:fb:
         25:f8:a4:8f:e1:d1:e4:88:86:0e:0d:fa:f7:d7:62:47:f5:42:
         62:c1:1b:4e:78:21:aa:4e:c9:57:5b:df:91:50:00:5e:1b:07:
         d0:6e:1f:4d:1e:df:bd:f5:8a:ba:3a:44:f6:89:94:1f:91:fd:
         c7:54:43:fb:64:d7:26:5c:71:bb:01:78:29:18:03:0c:c1:49:
         bf:df:5c:02:61:e4:cd:3f:67:7b:05:12:da:66:2e:87:e0:dd:
         4f:48:e7:85:60:a2:77:23:31:cf:be:db:18:90:75:b9:33:79:
         6e:18:e8:a6:b8:da:e9:06:55:08:07:9d:b0:90:1e:9f:96:3e:
         37:4d:64:71:07:69:0c:ec:d7:99:28:2f:1f:f5:20:93:2d:dc:
         84:a6:4a:44:20:1a:77:62:00:fa:51:b8:48:5f:cd:0b:37:0f:
         4d:88:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:22:42 2025 by rpki-client