This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/323830343a363765633a3a2f33322d3438203d3e20323639363539.roa
File:                     323830343a363765633a3a2f33322d3438203d3e20323639363539.roa (raw, json)
Hash identifier:          udNfBsgduF8xnoA5aUjNoX/t1HGafISrgY8hgZqlY8I=
Subject key identifier:   79:0C:CF:E5:F3:1B:3C:FF:86:C4:73:C3:63:02:2F:82:86:1E:B6:F2
Certificate issuer:       /CN=58639C4997EFECC162154C22A0044E1442CBA069
Certificate serial:       03D7588A7EEB94E319A8162693311FCA7689CD12
Authority key identifier: 58:63:9C:49:97:EF:EC:C1:62:15:4C:22:A0:04:4E:14:42:CB:A0:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58639C4997EFECC162154C22A0044E1442CBA069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/323830343a363765633a3a2f33322d3438203d3e20323639363539.roa
Signing time:             Fri 23 Jan 2026 12:26:04 +0000
ROA not before:           Fri 23 Jan 2026 12:21:04 +0000
ROA not after:            Fri 22 Jan 2027 12:26:04 +0000
asID:                     269659
IP address blocks:        2804:67ec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/58639C4997EFECC162154C22A0044E1442CBA069.crl
                          rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/58639C4997EFECC162154C22A0044E1442CBA069.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58639C4997EFECC162154C22A0044E1442CBA069.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d7:58:8a:7e:eb:94:e3:19:a8:16:26:93:31:1f:ca:76:89:cd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58639C4997EFECC162154C22A0044E1442CBA069
        Validity
            Not Before: Jan 23 12:21:04 2026 GMT
            Not After : Jan 22 12:26:04 2027 GMT
        Subject: CN=790CCFE5F31B3CFF86C473C363022F82861EB6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:28:02:b8:b9:d1:8b:0e:fc:b8:b0:ab:0a:
                    8a:c0:1a:3e:0e:04:76:0d:e5:cb:56:ba:43:c6:5f:
                    55:b3:df:a6:21:95:bb:d5:af:f8:a4:af:40:8b:33:
                    94:55:1f:e5:d7:35:f5:9a:0a:ee:f5:8b:c0:09:c9:
                    6c:a9:d0:09:88:d3:ad:04:07:36:e6:45:60:f3:e0:
                    46:61:b3:03:17:c5:7b:4c:5d:ad:38:18:cc:74:5a:
                    22:89:69:bd:72:fb:c4:fb:b1:09:f1:b9:da:ce:e7:
                    43:c3:4c:73:05:6c:c5:29:81:b4:6b:37:af:17:09:
                    20:00:c3:4e:92:32:1a:26:c8:e9:ca:ee:e3:2e:c5:
                    da:58:ad:1e:37:9d:fa:4d:d0:6a:1e:bf:d7:da:cf:
                    af:86:9e:2b:37:3f:06:be:8f:55:69:a2:00:6c:b9:
                    62:4c:10:94:9d:e2:cc:d4:9b:42:14:93:86:ac:ff:
                    4c:1d:12:2a:f5:d1:d2:2b:2a:ee:c6:1c:78:dd:61:
                    46:4c:ed:1e:88:78:8d:10:5d:30:87:85:60:33:e4:
                    9f:be:ca:7f:86:3e:fe:48:8c:4b:15:98:3e:a1:90:
                    59:83:36:bf:b1:70:82:6f:e1:0f:43:56:fc:90:68:
                    4c:12:f2:d2:f8:4e:a6:c0:bb:bc:39:06:c0:f1:d4:
                    90:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0C:CF:E5:F3:1B:3C:FF:86:C4:73:C3:63:02:2F:82:86:1E:B6:F2
            X509v3 Authority Key Identifier:
                keyid:58:63:9C:49:97:EF:EC:C1:62:15:4C:22:A0:04:4E:14:42:CB:A0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/58639C4997EFECC162154C22A0044E1442CBA069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58639C4997EFECC162154C22A0044E1442CBA069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/323830343a363765633a3a2f33322d3438203d3e20323639363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:ef:63:90:9b:e1:74:72:da:c2:a3:49:94:73:c1:6b:f2:78:
         19:0f:ba:6c:f9:2f:1a:94:79:1b:f4:16:5f:22:d3:8b:c2:69:
         cc:e0:1f:38:b8:b2:4d:b9:4d:e7:0d:c7:93:8c:ba:a1:8f:1b:
         9c:4a:fc:15:79:ca:4b:b0:57:1e:22:4a:23:8a:95:db:1f:b4:
         f0:f5:0f:c8:92:28:2e:3b:e7:d4:de:66:73:99:80:dd:4e:55:
         b3:15:57:39:c4:fc:7c:6b:5a:65:a6:fd:ce:16:64:95:d2:f7:
         dd:e6:96:40:f4:35:e3:55:98:5d:10:1e:d2:85:59:2a:51:1f:
         73:a8:6c:cd:c5:98:d8:72:e6:71:13:a2:4f:c3:d8:ea:63:ad:
         ba:a1:0e:da:70:47:0d:9f:d5:d2:14:ed:f7:96:e1:25:aa:8a:
         0d:b4:f8:35:35:43:1e:3c:a0:be:da:40:07:f8:2b:0f:7b:3b:
         3a:6b:99:de:b4:80:5c:e3:1a:50:e8:58:54:da:a7:9d:fa:dc:
         49:c7:40:fc:9f:b6:f7:98:e3:44:b2:e8:d5:be:48:7d:6b:5c:
         96:96:de:8a:db:08:5a:48:43:42:b1:3e:09:2f:92:dd:c8:43:
         db:0f:92:eb:b7:34:0e:1d:99:53:56:45:cc:76:9d:b1:76:ac:
         fd:7d:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:29:33 2026 by rpki-client