This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/323830343a343565343a3a2f33322d3438203d3e20323632353637.roa
File:                     323830343a343565343a3a2f33322d3438203d3e20323632353637.roa (raw, json)
Hash identifier:          I9nQetKRTb/CMv5oOvnICH83vEkeS/E3EmmEXKa+Xss=
Subject key identifier:   48:43:72:D0:4D:FE:93:B2:1C:71:1A:3D:B9:F6:3F:59:C3:2E:63:DE
Certificate issuer:       /CN=7D8B7C1B022D90A4E26EB00EEE79A68375511430
Certificate serial:       6FDC156A5810BB4A615EAF9948394375632E8C56
Authority key identifier: 7D:8B:7C:1B:02:2D:90:A4:E2:6E:B0:0E:EE:79:A6:83:75:51:14:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D8B7C1B022D90A4E26EB00EEE79A68375511430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/323830343a343565343a3a2f33322d3438203d3e20323632353637.roa
Signing time:             Mon 29 Dec 2025 13:10:56 +0000
ROA not before:           Mon 29 Dec 2025 13:05:56 +0000
ROA not after:            Mon 28 Dec 2026 13:10:56 +0000
asID:                     262567
IP address blocks:        2804:45e4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.crl
                          rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D8B7C1B022D90A4E26EB00EEE79A68375511430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dc:15:6a:58:10:bb:4a:61:5e:af:99:48:39:43:75:63:2e:8c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D8B7C1B022D90A4E26EB00EEE79A68375511430
        Validity
            Not Before: Dec 29 13:05:56 2025 GMT
            Not After : Dec 28 13:10:56 2026 GMT
        Subject: CN=484372D04DFE93B21C711A3DB9F63F59C32E63DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:53:17:1e:eb:3d:9a:72:7d:ce:35:c0:13:
                    c5:19:b1:95:31:b4:05:9b:87:2c:fa:aa:64:6d:69:
                    d5:4a:85:9d:33:88:5d:0e:45:84:8e:12:1b:6d:93:
                    12:ea:3c:51:e7:01:53:30:eb:15:1e:78:e5:12:f2:
                    98:87:6e:02:2c:36:81:69:9c:3c:2f:1b:68:19:0d:
                    f2:52:d2:eb:7a:04:e2:83:c0:88:70:72:7b:0b:ae:
                    af:4b:34:a0:81:e4:14:cd:58:23:49:ab:1d:1f:92:
                    a2:27:1c:08:2b:e8:be:79:27:5a:16:89:da:52:b4:
                    21:09:dc:6a:69:bf:21:fa:b8:a4:54:c0:7a:86:cc:
                    cf:cd:8d:5a:8c:03:21:86:89:6e:0a:52:79:3a:2b:
                    2c:f3:61:7f:91:51:bd:c9:9a:80:0d:11:c9:2b:64:
                    c4:5f:74:9f:fd:69:5c:fd:39:e3:d2:33:6a:87:14:
                    6f:7c:c3:6b:a3:37:5b:e4:65:75:54:8f:4e:0c:3a:
                    27:f4:90:a9:09:7e:bb:b0:8c:bb:1a:d4:50:d5:99:
                    f6:03:82:5a:87:62:ff:ab:d9:0a:14:af:ff:55:b2:
                    bb:36:da:5f:2e:e9:55:ba:f2:fa:c1:23:e9:3e:03:
                    f7:6f:1a:f4:dd:6c:5b:1c:4c:7e:2d:41:01:66:78:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:43:72:D0:4D:FE:93:B2:1C:71:1A:3D:B9:F6:3F:59:C3:2E:63:DE
            X509v3 Authority Key Identifier:
                keyid:7D:8B:7C:1B:02:2D:90:A4:E2:6E:B0:0E:EE:79:A6:83:75:51:14:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D8B7C1B022D90A4E26EB00EEE79A68375511430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/323830343a343565343a3a2f33322d3438203d3e20323632353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:9a:1f:d6:36:96:bd:64:be:7d:ee:e3:cb:4c:c3:8f:e7:e4:
         b9:b1:a4:de:53:09:76:07:6f:05:db:51:70:4b:4a:5c:8d:c7:
         64:66:7c:ea:45:d7:13:5b:53:a8:41:63:46:81:d6:d9:92:67:
         d7:9c:d4:07:8e:0a:51:93:4b:58:7f:71:c6:9d:34:28:e8:f5:
         63:ae:09:62:9f:7a:04:56:3f:f4:32:78:fe:56:3f:c1:ea:c3:
         cd:e2:04:0f:19:97:92:5c:d0:23:de:ab:b5:8f:2a:4a:69:ca:
         73:33:74:5c:b0:d0:a9:0a:31:0f:15:27:75:35:02:2e:54:64:
         73:97:f1:77:e5:ac:f0:fe:14:a7:aa:72:f2:ab:66:a1:e0:a1:
         69:ba:9e:68:5a:d9:70:fb:ab:48:09:45:c5:d1:d9:23:96:6e:
         93:63:7c:4d:7b:74:b0:b8:d1:04:b1:73:1a:90:33:3d:f3:3a:
         32:ed:aa:e2:17:fd:99:c5:6a:91:d7:70:eb:c8:d9:9c:17:f6:
         83:9f:74:b5:06:56:66:99:02:1a:e4:36:b3:aa:36:26:d3:a6:
         cf:f5:e2:b3:e3:32:51:5a:dc:ed:e2:a0:1f:d6:1b:c0:72:76:
         f9:94:9f:50:63:05:81:ba:10:9c:90:fd:98:dc:39:3e:98:eb:
         0d:23:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:06 2026 by rpki-client