This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a333030303a3a2f33372d3337203d3e20323633363334.roa
File:                     323830343a313036383a333030303a3a2f33372d3337203d3e20323633363334.roa (raw, json)
Hash identifier:          a5Ozv5nAD0IfhYY6EXmUKFJYCLO6bXG/yhkgYKTCSHk=
Subject key identifier:   B9:D8:DD:7A:F8:C6:84:6E:02:9E:BA:37:73:1A:A6:E8:08:12:0F:EC
Certificate issuer:       /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial:       7C153070D993760DE322D304D3E6BA9A3B8F8B19
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a333030303a3a2f33372d3337203d3e20323633363334.roa
Signing time:             Mon 22 Dec 2025 18:34:33 +0000
ROA not before:           Mon 22 Dec 2025 18:29:33 +0000
ROA not after:            Mon 21 Dec 2026 18:34:33 +0000
asID:                     263634
IP address blocks:        2804:1068:3000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 18:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:15:30:70:d9:93:76:0d:e3:22:d3:04:d3:e6:ba:9a:3b:8f:8b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
        Validity
            Not Before: Dec 22 18:29:33 2025 GMT
            Not After : Dec 21 18:34:33 2026 GMT
        Subject: CN=B9D8DD7AF8C6846E029EBA37731AA6E808120FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:d4:74:02:53:66:ac:42:22:5f:ed:5b:7e:
                    2f:5e:0b:c5:78:ec:02:a5:ff:9c:5c:2b:ea:c7:5d:
                    71:42:73:fa:3f:bb:05:bc:74:94:b9:87:81:7a:e0:
                    11:85:36:b6:7c:ec:df:b7:97:a1:60:79:30:3e:1b:
                    78:79:94:04:03:4b:8d:e8:aa:9e:75:c2:12:77:8c:
                    a0:e4:1c:5a:ee:32:25:f0:04:63:31:cc:27:85:57:
                    f8:89:ba:73:36:eb:0d:15:dc:da:54:17:4c:16:25:
                    5d:ee:e4:62:b8:13:70:a0:51:98:28:c8:61:c2:9c:
                    7a:cb:b0:5c:b8:26:07:db:bf:d8:ed:bf:2e:5e:b1:
                    43:1e:92:fa:50:4f:3b:1f:11:13:e6:81:43:ac:a1:
                    3a:7b:36:1c:f6:b9:11:eb:34:38:bf:61:3f:0c:20:
                    7c:a2:be:a8:6e:6d:59:24:0e:64:cd:f1:9c:80:7a:
                    30:23:7b:af:bd:73:e3:00:c9:57:46:53:c7:bd:42:
                    48:3e:f3:c3:68:59:5d:db:61:48:11:f4:e8:f1:0b:
                    57:5f:b9:82:b5:48:87:de:c4:b0:b7:46:84:5c:3e:
                    1c:5b:45:ea:c7:c3:9c:66:c1:36:a6:8a:e9:d6:2e:
                    24:df:b5:69:61:f5:70:86:6a:44:bd:b7:fa:80:b9:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D8:DD:7A:F8:C6:84:6E:02:9E:BA:37:73:1A:A6:E8:08:12:0F:EC
            X509v3 Authority Key Identifier:
                keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a333030303a3a2f33372d3337203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1068:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         75:37:15:b0:ee:c0:52:3a:45:46:78:c0:2c:01:c1:07:07:10:
         1c:92:cf:17:12:52:a5:b4:73:9d:79:4e:6e:89:33:be:52:11:
         65:d4:f9:78:fa:5e:b8:6f:01:21:97:3f:f1:7b:2d:a2:43:c6:
         6d:bf:54:9a:69:dd:1c:3b:a6:2d:75:5b:11:17:e6:42:40:15:
         b2:bb:04:e4:87:71:43:01:53:59:28:7c:ea:02:81:a3:78:2d:
         0d:a1:c2:7c:99:1e:2e:de:c2:92:05:ee:98:e2:fe:70:7f:59:
         e6:60:8c:46:94:e4:fa:86:5a:02:25:51:f5:4f:74:cf:74:9f:
         0e:4e:24:0f:bc:72:31:d6:5e:9d:c2:d7:5d:40:f5:37:7e:ea:
         80:a9:d1:de:af:24:cb:23:74:cc:81:be:ff:0f:3a:54:82:7b:
         b0:8e:e5:2d:78:11:c9:47:3d:43:3e:ff:bf:f2:dc:50:70:fa:
         7d:0f:2b:20:09:fd:e4:97:d4:c9:f2:c4:ce:b4:c2:80:de:dd:
         a3:50:1c:92:ba:0f:ed:02:1e:8b:18:fe:cd:6e:be:fb:2b:0d:
         fa:90:9b:e1:88:82:d5:d8:af:21:3a:70:96:24:cc:7b:5c:1c:
         ce:15:23:bb:9b:65:6d:fd:e5:b2:cf:c0:03:ed:8e:c5:95:de:
         59:b0:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:47:45 2025 by rpki-client