This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/323830343a333266343a3a2f33322d313238203d3e20323635313037.roa
File:                     323830343a333266343a3a2f33322d313238203d3e20323635313037.roa (raw, json)
Hash identifier:          RHLqQnatTfxNVPWAWKcUyw0XW+vMAk4SEtrQAezmYlY=
Subject key identifier:   B2:F8:68:4C:6F:E0:85:EB:0E:AD:D7:FA:A4:09:44:95:BC:E2:8C:AA
Certificate issuer:       /CN=07ED916E260CEE4493474E6E1B368CCEF212F6F0
Certificate serial:       15BD279C24B6686F39ACD005935F09E6A8937D09
Authority key identifier: 07:ED:91:6E:26:0C:EE:44:93:47:4E:6E:1B:36:8C:CE:F2:12:F6:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07ED916E260CEE4493474E6E1B368CCEF212F6F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/323830343a333266343a3a2f33322d313238203d3e20323635313037.roa
Signing time:             Mon 05 Jan 2026 20:16:09 +0000
ROA not before:           Mon 05 Jan 2026 20:11:09 +0000
ROA not after:            Mon 04 Jan 2027 20:16:09 +0000
asID:                     265107
IP address blocks:        2804:32f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/07ED916E260CEE4493474E6E1B368CCEF212F6F0.crl
                          rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/07ED916E260CEE4493474E6E1B368CCEF212F6F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07ED916E260CEE4493474E6E1B368CCEF212F6F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 14:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bd:27:9c:24:b6:68:6f:39:ac:d0:05:93:5f:09:e6:a8:93:7d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ED916E260CEE4493474E6E1B368CCEF212F6F0
        Validity
            Not Before: Jan  5 20:11:09 2026 GMT
            Not After : Jan  4 20:16:09 2027 GMT
        Subject: CN=B2F8684C6FE085EB0EADD7FAA4094495BCE28CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:6a:d7:1a:56:de:70:bc:34:6b:2d:fd:13:
                    2d:47:d8:a6:22:01:f2:94:fd:00:ff:fc:eb:03:36:
                    52:0e:eb:3e:33:76:da:af:9d:42:d9:27:92:55:0c:
                    5e:87:04:46:12:8e:ab:f0:3f:17:bd:69:3c:dd:f9:
                    c0:ce:58:ea:e5:9d:22:33:d6:61:e3:0d:2b:ea:6f:
                    2b:49:ce:d1:b8:17:2d:90:d3:16:e0:04:46:41:7c:
                    64:1d:4b:15:dd:6b:61:1f:a3:b1:3e:63:a8:44:23:
                    0a:e7:27:b2:87:89:33:6c:5a:c3:c6:34:65:da:16:
                    a1:4b:43:94:6e:eb:34:fc:71:d7:95:0c:39:6a:76:
                    89:98:34:65:12:17:22:e1:4a:6b:2c:56:0f:4a:03:
                    9f:08:eb:de:f9:ca:a4:58:6e:da:7f:c8:d4:ab:49:
                    e1:77:70:d8:53:f6:57:ed:fc:18:dd:54:84:ad:a6:
                    92:6c:e0:a7:7b:92:37:65:22:af:d3:5d:cf:d3:9e:
                    bb:5c:ca:3f:6a:50:9b:92:b7:82:d2:72:a2:e1:1e:
                    0c:99:dd:22:1f:11:69:fa:51:f4:c1:be:86:2d:26:
                    c2:b6:aa:78:21:35:68:14:4c:fc:bc:38:40:fe:bf:
                    51:6d:c2:01:df:c5:cb:a6:f9:94:8f:95:99:0a:97:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F8:68:4C:6F:E0:85:EB:0E:AD:D7:FA:A4:09:44:95:BC:E2:8C:AA
            X509v3 Authority Key Identifier:
                keyid:07:ED:91:6E:26:0C:EE:44:93:47:4E:6E:1B:36:8C:CE:F2:12:F6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/07ED916E260CEE4493474E6E1B368CCEF212F6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07ED916E260CEE4493474E6E1B368CCEF212F6F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/323830343a333266343a3a2f33322d313238203d3e20323635313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:f0:69:f5:dc:73:f6:3c:ad:45:61:51:31:0e:4f:14:be:
         18:e9:0f:11:6f:96:15:0e:3b:7a:76:2d:14:0f:dc:71:e1:a2:
         3b:ef:6c:57:27:e8:6c:97:78:c3:fe:cd:61:f1:91:9f:08:83:
         ed:a4:d6:e9:c2:52:45:04:3f:af:e5:4a:33:c5:cc:6a:4c:f1:
         1e:2a:9c:b1:fd:db:f4:65:ea:06:da:5f:7d:0d:9a:d3:28:c1:
         03:88:ae:85:1a:c7:9e:b5:55:21:51:92:86:5a:23:2e:cf:eb:
         5f:a1:ee:ba:02:9e:c2:e5:5f:02:71:e3:04:b7:d0:46:5f:6f:
         29:91:ef:20:07:14:fd:95:06:58:f0:15:b6:76:5f:d1:64:59:
         3e:96:37:62:f1:38:8c:49:67:15:99:49:aa:8d:4e:1a:14:25:
         72:f9:14:fb:9b:02:43:4d:9c:b6:e4:8c:40:33:a1:43:a2:74:
         6b:46:c4:29:1f:d5:03:53:f7:08:de:a7:28:c4:7a:cc:ce:1f:
         bb:5e:80:ce:7a:0f:65:c8:5d:36:d8:18:3d:3c:92:e3:12:c6:
         58:ee:ad:18:ae:93:d7:67:a3:0c:4a:4a:a0:98:49:53:42:02:
         d0:3e:49:47:c0:9d:d8:f9:16:a9:df:e7:12:23:4b:5a:41:bf:
         d1:55:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:25:25 2026 by rpki-client