This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d313238203d3e20323731363232.roa
File:                     323830343a376536383a3a2f33322d313238203d3e20323731363232.roa (raw, json)
Hash identifier:          BbYcHbXRi0lu0wGGo4JWFSvaNN7ruozCzJGAiwFOCck=
Subject key identifier:   12:3A:F3:5C:9E:E6:31:4B:AD:FA:D3:4F:1C:19:CA:AF:4D:83:75:DA
Certificate issuer:       /CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
Certificate serial:       15565DC38A7A4CE313BCA68CA7837FE9C7C51D26
Authority key identifier: A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d313238203d3e20323731363232.roa
Signing time:             Fri 16 Jan 2026 00:11:03 +0000
ROA not before:           Fri 16 Jan 2026 00:06:03 +0000
ROA not after:            Fri 15 Jan 2027 00:11:03 +0000
asID:                     271622
IP address blocks:        2804:7e68::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl
                          rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:56:5d:c3:8a:7a:4c:e3:13:bc:a6:8c:a7:83:7f:e9:c7:c5:1d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
        Validity
            Not Before: Jan 16 00:06:03 2026 GMT
            Not After : Jan 15 00:11:03 2027 GMT
        Subject: CN=123AF35C9EE6314BADFAD34F1C19CAAF4D8375DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:2d:61:6c:57:4a:ca:b0:2f:a2:e9:ef:65:
                    e9:d2:e1:69:bb:3f:fd:a1:e3:ef:64:da:2d:86:cf:
                    f5:22:9d:89:e0:ca:88:dc:65:ac:2e:91:a7:6f:8c:
                    03:22:a4:18:cc:83:33:02:8e:58:b9:69:94:e1:ad:
                    21:bf:0a:22:ad:4b:94:0d:62:60:2e:43:e1:67:b2:
                    b5:a2:1c:93:ea:93:03:b4:19:ea:b5:a7:2b:06:94:
                    b0:0b:54:c0:fb:ed:1c:9b:d8:b1:81:4b:25:06:89:
                    c7:77:b5:14:95:90:85:f2:dd:22:1c:c8:70:91:83:
                    e0:0d:d3:a0:89:00:3e:d6:32:69:98:e9:2f:9a:23:
                    8b:eb:35:ee:52:3f:d8:64:a3:71:f6:c8:60:15:10:
                    df:fb:54:8a:4e:0b:e8:d8:b7:e3:71:0d:bb:b3:7b:
                    91:cf:96:2f:63:d8:ee:44:cc:c7:33:ed:a3:c5:5f:
                    c6:50:2a:25:1f:72:47:98:f7:0c:15:fd:64:5d:9d:
                    d9:db:96:f6:30:18:c6:44:79:62:30:c6:7b:c4:22:
                    87:dd:fd:66:da:86:bf:10:4b:e2:1f:4d:30:56:4f:
                    5f:23:b8:94:21:fa:dc:e4:5a:39:1f:f3:7e:0f:af:
                    2d:98:9e:f9:20:8b:00:59:7e:2d:46:ed:23:56:2a:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:F3:5C:9E:E6:31:4B:AD:FA:D3:4F:1C:19:CA:AF:4D:83:75:DA
            X509v3 Authority Key Identifier:
                keyid:A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d313238203d3e20323731363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e68::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:75:7f:93:c0:c8:a2:70:a7:53:6e:ab:73:e4:49:cb:a3:b8:
         d1:33:3c:f5:3b:f9:d6:3b:61:ba:89:bf:1f:63:eb:b2:fd:65:
         d9:78:e7:43:20:c4:8a:a4:f9:8d:91:0c:28:9f:69:3f:2e:9b:
         02:76:cd:2f:45:c4:0b:a7:c0:a5:77:54:8b:fb:f1:d9:3c:d7:
         77:72:66:c8:12:9e:56:4e:a4:7b:c5:a4:99:09:3f:fa:5f:4c:
         8a:80:b9:92:67:1d:ae:df:20:19:17:37:b0:86:01:3d:96:ea:
         a9:e5:f2:ab:ce:07:4a:05:ed:1d:8f:f8:82:ad:92:2b:a7:15:
         c6:d7:96:f0:03:65:7e:f5:e0:a1:e6:74:87:10:38:52:cf:99:
         a7:c3:57:6e:8b:30:35:ff:0f:f3:2a:3b:cb:c7:37:92:17:b2:
         25:50:c6:cb:23:94:3e:6e:a7:af:7a:20:b3:7c:6f:79:5b:97:
         e0:ef:19:0e:f0:0d:5a:45:e1:29:60:b9:6c:a2:0c:6b:c9:5d:
         58:1f:a0:12:2c:2a:28:a2:91:9b:be:e4:cd:8d:bd:01:48:91:
         82:3e:b3:7e:a4:10:1e:a7:f6:c7:18:50:30:13:d4:5a:37:46:
         cb:e3:54:a0:02:51:ee:e1:6d:41:e8:fd:7e:a9:4a:ae:dc:f6:
         30:b5:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:26:04 2026 by rpki-client