This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/323830343a323337303a3a2f33322d3334203d3e20323634313632.roa
File:                     323830343a323337303a3a2f33322d3334203d3e20323634313632.roa (raw, json)
Hash identifier:          UvGoLqG0ilVQtGiiDrcpAWxmdlNCvcvvdq8bku57oyE=
Subject key identifier:   7A:66:79:3F:88:48:60:28:24:D0:A0:2A:E9:70:2F:EF:17:D2:BA:C3
Certificate issuer:       /CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7
Certificate serial:       353956322B1B55B46DA319C21CB05DC6F251CB52
Authority key identifier: 1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/323830343a323337303a3a2f33322d3334203d3e20323634313632.roa
Signing time:             Wed 07 Jan 2026 20:21:32 +0000
ROA not before:           Wed 07 Jan 2026 20:16:32 +0000
ROA not after:            Wed 06 Jan 2027 20:21:32 +0000
asID:                     264162
IP address blocks:        2804:2370::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl
                          rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:39:56:32:2b:1b:55:b4:6d:a3:19:c2:1c:b0:5d:c6:f2:51:cb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7
        Validity
            Not Before: Jan  7 20:16:32 2026 GMT
            Not After : Jan  6 20:21:32 2027 GMT
        Subject: CN=7A66793F8848602824D0A02AE9702FEF17D2BAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:1f:1d:47:4b:37:e5:0b:0b:8f:96:ef:8d:
                    aa:6f:79:4d:2b:04:05:da:d6:d5:fc:57:43:ab:51:
                    11:d7:89:d9:4a:96:37:1e:ec:af:5e:ed:ef:d2:91:
                    cc:25:e7:c6:4a:b2:c2:99:ff:b7:e9:ef:9d:a9:d3:
                    3b:f2:6d:ab:ca:b9:49:89:0b:c9:e7:f5:2b:00:d7:
                    52:87:0d:83:ae:6e:9b:e2:2a:78:ff:58:10:3e:ce:
                    5a:59:05:5d:fa:0d:08:d0:0e:48:f7:04:9f:4e:6d:
                    32:f7:1c:31:bb:de:32:c3:15:dc:f8:05:45:3f:f9:
                    fa:53:8a:d6:26:0e:cc:69:a7:07:33:c7:c4:6f:e3:
                    6c:30:e5:5e:a5:44:db:30:cb:67:a4:c8:cd:ae:7b:
                    06:db:15:f6:bb:33:84:f5:65:a4:7e:c5:bf:61:25:
                    1d:82:4a:c0:2c:e8:2c:15:3d:a7:65:45:e9:b4:4e:
                    ca:1b:86:b8:2c:4d:a6:61:ea:98:bf:49:8f:b1:db:
                    51:62:09:58:3f:a3:e2:87:77:1b:3f:e1:38:83:bf:
                    a0:bb:cc:2c:a5:f9:0b:b0:df:89:e3:14:16:f0:84:
                    28:f8:1d:ae:13:bc:d7:e3:ce:65:2d:ee:5b:1b:a4:
                    94:f5:f0:b3:d7:63:e1:a9:08:22:0c:a7:18:44:13:
                    2b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:66:79:3F:88:48:60:28:24:D0:A0:2A:E9:70:2F:EF:17:D2:BA:C3
            X509v3 Authority Key Identifier:
                keyid:1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/323830343a323337303a3a2f33322d3334203d3e20323634313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2370::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:29:cb:e8:d3:54:ac:93:37:f5:ba:c0:ee:c7:d4:f8:5f:a1:
         6b:2c:ba:1e:5c:62:08:fb:92:5f:43:e2:98:9b:8d:bf:53:6a:
         b0:b8:ba:c3:0f:10:a8:28:f6:5e:17:62:15:91:c1:a0:6f:14:
         f1:86:d7:44:72:a6:9c:a5:bb:56:48:64:30:bd:db:2a:bd:43:
         82:a1:77:ef:cb:cf:58:11:da:8e:da:0e:e9:4f:24:b2:e6:32:
         64:75:5d:3e:d2:06:bb:f6:69:1b:8d:a1:3c:e0:f9:54:29:4b:
         7a:44:05:ca:1b:26:82:a1:5d:8c:14:17:47:99:2f:95:08:c4:
         e9:4e:62:4b:9f:e1:07:0f:19:5d:53:ec:1b:c9:a9:77:71:91:
         66:91:02:77:09:80:e9:23:07:99:c8:6a:17:2a:91:c2:e3:c4:
         0e:6c:3d:32:96:a6:95:4f:4c:b9:fd:69:be:76:a1:e2:61:3a:
         4c:f8:4f:ba:6e:24:84:1b:f6:fa:ec:e5:c3:c5:63:18:b2:29:
         0e:5d:a4:b6:df:58:56:e9:63:b1:b9:cc:cd:d7:dd:86:82:77:
         e2:cc:50:bb:93:16:e2:5a:43:a6:32:2b:d8:a2:1e:1f:43:4a:
         f2:be:39:88:d4:4c:9c:c2:e6:41:f0:7a:49:64:63:e3:38:5e:
         b2:3c:42:3c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNTlWMisbVbRtoxnCHLBdxvJRy1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVDMTkwOTU3QUJDMEVDMDQzMkVGNDhDOUJDQjQ1Qzgx
OTgyRDNFNzAeFw0yNjAxMDcyMDE2MzJaFw0yNzAxMDYyMDIxMzJaMDMxMTAvBgNV
BAMTKDdBNjY3OTNGODg0ODYwMjgyNEQwQTAyQUU5NzAyRkVGMTdEMkJBQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkaR8dR0s35QsLj5bvjapveU0r
BAXa1tX8V0OrURHXidlKljce7K9e7e/Skcwl58ZKssKZ/7fp752p0zvybavKuUmJ
C8nn9SsA11KHDYOubpviKnj/WBA+zlpZBV36DQjQDkj3BJ9ObTL3HDG73jLDFdz4
BUU/+fpTitYmDsxppwczx8Rv42ww5V6lRNswy2ekyM2uewbbFfa7M4T1ZaR+xb9h
JR2CSsAs6CwVPadlRem0TsobhrgsTaZh6pi/SY+x21FiCVg/o+KHdxs/4TiDv6C7
zCyl+Quw34njFBbwhCj4Ha4TvNfjzmUt7lsbpJT18LPXY+GpCCIMpxhEEyuPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUemZ5P4hIYCgk0KAq6XAv7xfSusMwHwYDVR0j
BBgwFoAUHsGQlXq8DsBDLvSMm8tFyBmC0+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRybXAyZHBqMlZLenZHOWZlZGdDeGs3Vm5KcmlmZ0xxQTFCOGJyNmdD
U1IvMC8xRUMxOTA5NTdBQkMwRUMwNDMyRUY0OEM5QkNCNDVDODE5ODJEM0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFQzE5MDk1N0FCQzBFQzA0
MzJFRjQ4QzlCQ0I0NUM4MTk4MkQzRTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkcm1wMmRwajJWS3p2RzlmZWRnQ3hrN1ZuSnJpZmdMcUExQjhicjZnQ1NSLzAv
MzIzODMwMzQzYTMyMzMzNzMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM0
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQjcDANBgkqhkiG9w0BAQsFAAOCAQEACSnL6NNU
rJM39brA7sfU+F+hayy6HlxiCPuSX0PimJuNv1NqsLi6ww8QqCj2XhdiFZHBoG8U
8YbXRHKmnKW7VkhkML3bKr1DgqF378vPWBHajtoO6U8ksuYyZHVdPtIGu/ZpG42h
POD5VClLekQFyhsmgqFdjBQXR5kvlQjE6U5iS5/hBw8ZXVPsG8mpd3GRZpECdwmA
6SMHmchqFyqRwuPEDmw9MpamlU9Muf1pvnah4mE6TPhPum4khBv2+uzlw8VjGLIp
Dl2ktt9YVuljsbnMzdfdhoJ34sxQu5MW4lpDpjIr2KIeH0NK8r45iNRMnMLmQfB6
SWRj4zhesjxCPA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:55:44 2026 by rpki-client