This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/323830343a363736383a3a2f33322d3332203d3e20323639363236.roa
File:                     323830343a363736383a3a2f33322d3332203d3e20323639363236.roa (raw, json)
Hash identifier:          0o34WETwViCl8CVka9QXUz3jojUOCpA8ZMqPZsv0Ynk=
Subject key identifier:   8F:03:D1:97:97:83:D5:30:6D:41:0D:47:E6:0D:55:2F:7A:98:52:36
Certificate issuer:       /CN=027E5989BE9C86C746877442F729BCCF804DAC18
Certificate serial:       61A55EAB3269054009CFAD9D25EC907FD86F5C78
Authority key identifier: 02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/323830343a363736383a3a2f33322d3332203d3e20323639363236.roa
Signing time:             Thu 18 Dec 2025 12:36:00 +0000
ROA not before:           Thu 18 Dec 2025 12:31:00 +0000
ROA not after:            Thu 17 Dec 2026 12:36:00 +0000
asID:                     269626
IP address blocks:        2804:6768::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a5:5e:ab:32:69:05:40:09:cf:ad:9d:25:ec:90:7f:d8:6f:5c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027E5989BE9C86C746877442F729BCCF804DAC18
        Validity
            Not Before: Dec 18 12:31:00 2025 GMT
            Not After : Dec 17 12:36:00 2026 GMT
        Subject: CN=8F03D1979783D5306D410D47E60D552F7A985236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:c0:16:c8:32:aa:ae:6b:9d:3b:80:2e:28:
                    f2:ae:8a:9e:cb:7c:c1:5b:69:d5:25:6b:be:cd:ba:
                    c2:54:e1:51:3c:3a:91:dc:8d:1e:d7:4b:72:c9:fb:
                    6c:09:5a:93:03:5e:ae:d4:38:f1:3f:48:61:7c:7d:
                    1d:28:93:28:5a:40:bc:4f:65:c3:b7:5c:94:9c:45:
                    eb:f1:e4:62:63:06:9b:06:8e:b4:fe:d8:98:44:df:
                    65:67:60:c9:36:18:3a:f3:4b:f4:34:8d:d7:c1:73:
                    26:64:40:cf:49:07:2a:f3:87:cc:51:b1:57:b6:24:
                    7c:92:ae:f1:23:57:1e:1c:72:2a:64:bc:13:15:35:
                    4e:bb:73:e1:56:6e:ce:a8:b9:a1:d3:a2:52:a7:bf:
                    e0:44:72:55:a7:7f:ee:76:e7:d7:b1:c3:a5:ca:54:
                    a1:7f:9b:2c:cc:36:ff:3f:44:cf:41:b7:6f:c0:0b:
                    38:f6:0f:35:a8:f3:54:a4:a1:92:c0:c3:e5:9c:c0:
                    29:04:b7:91:df:60:ff:bd:33:ea:55:e4:54:1b:b2:
                    ff:a4:73:c2:48:6f:45:64:94:a7:a9:cc:dc:45:0f:
                    c4:d4:1d:20:bb:66:b9:73:4a:72:c7:c2:e1:3f:82:
                    2b:86:fb:c2:78:c0:b5:9d:d3:e9:1a:9b:0e:f5:1f:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:03:D1:97:97:83:D5:30:6D:41:0D:47:E6:0D:55:2F:7A:98:52:36
            X509v3 Authority Key Identifier:
                keyid:02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/323830343a363736383a3a2f33322d3332203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6768::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:20:98:ae:b2:cd:e9:35:89:31:20:9d:f4:aa:23:b9:5e:
         84:7f:55:f2:cc:5c:d4:86:06:29:21:8f:85:54:5d:b6:be:a6:
         44:8e:3f:b0:c1:5b:55:6f:a2:71:ba:6f:61:6d:35:fb:9b:64:
         9e:cc:4d:97:88:ae:bb:79:bd:46:5f:3e:78:8b:59:76:06:93:
         0e:b4:48:e1:a2:50:b5:b9:6b:77:a9:3c:9f:93:03:37:27:fb:
         19:16:df:7e:e1:80:ed:4a:d8:d8:fc:18:af:ea:5a:7b:13:42:
         36:d5:f7:5a:55:20:e8:88:fa:f1:62:ed:8e:d5:3d:a9:58:5a:
         22:07:e3:41:74:23:ca:38:71:64:5d:9e:a6:17:29:36:c6:eb:
         50:17:a0:c7:40:3f:88:73:0f:d1:fa:10:d2:8a:a9:bd:ee:0a:
         25:27:e9:4f:d8:45:fc:c9:0c:e4:51:f4:31:74:44:d9:75:f0:
         85:56:8e:bd:b4:39:41:8b:0f:19:ed:43:2b:cc:05:9d:62:69:
         61:23:1e:3d:c0:40:a4:e1:92:86:11:64:93:a3:0e:37:87:6e:
         ea:98:4c:20:7a:eb:e4:07:16:38:e0:5c:e1:d0:52:7b:c4:3a:
         77:79:18:cc:04:a1:37:18:6f:19:59:85:2c:c6:c2:68:41:da:
         ae:92:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:32:00 2025 by rpki-client