This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
File:                     323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (raw, json)
Hash identifier:          LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=
Subject key identifier:   A6:50:26:B2:6E:7E:F7:E0:DF:1D:97:C7:69:F7:77:7F:F5:B6:63:2B
Certificate issuer:       /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
Certificate serial:       36F4854818C7866494FD8BFDA316812F2C245F92
Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
Signing time:             Fri 16 Jan 2026 15:45:20 +0000
ROA not before:           Fri 16 Jan 2026 15:40:20 +0000
ROA not after:            Fri 15 Jan 2027 15:45:20 +0000
asID:                     266304
IP address blocks:        2804:35c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl
                          rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f4:85:48:18:c7:86:64:94:fd:8b:fd:a3:16:81:2f:2c:24:5f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
        Validity
            Not Before: Jan 16 15:40:20 2026 GMT
            Not After : Jan 15 15:45:20 2027 GMT
        Subject: CN=A65026B26E7EF7E0DF1D97C769F7777FF5B6632B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:7b:c0:66:a5:18:8e:51:31:0f:35:f7:3d:
                    b3:b8:dd:7d:5d:f5:4c:c1:fc:50:1c:6d:ec:b2:c5:
                    33:c4:05:b8:4c:b5:ca:a9:40:38:05:f7:a9:7c:a7:
                    00:3a:e5:97:56:61:bd:c8:2e:80:90:29:8f:e9:36:
                    38:8f:d9:af:ef:d0:66:f8:cb:5c:58:1b:b4:b0:ef:
                    0c:74:18:c7:32:b0:58:27:6d:95:be:e6:86:5d:f4:
                    43:40:a8:3c:0b:a4:f9:ff:94:64:03:13:e8:6e:c6:
                    02:f0:41:82:d3:a4:66:b7:bb:1e:df:8c:bb:83:27:
                    61:7e:ff:99:76:8b:ec:dc:df:fd:a9:51:b8:12:82:
                    9b:2e:f7:4c:9a:d8:8f:b2:d0:39:d8:d9:8d:73:64:
                    7f:bf:fd:97:c5:f0:4e:0c:7a:e2:67:f5:5e:d0:a7:
                    15:c5:1e:8c:1a:41:56:ca:0e:90:db:b1:68:2b:02:
                    ef:1d:fa:92:8a:1f:08:33:e5:0b:6b:93:da:d6:35:
                    d0:d3:a1:ef:bb:e3:c6:f4:29:c7:15:57:32:3a:af:
                    06:2a:78:fb:dd:7e:09:2a:5a:c2:f0:12:86:e4:5d:
                    7e:6d:9c:26:87:8a:10:1d:46:89:ce:e1:86:48:a9:
                    48:1a:ba:24:90:8e:53:03:26:16:df:8e:c5:1e:d8:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:50:26:B2:6E:7E:F7:E0:DF:1D:97:C7:69:F7:77:7F:F5:B6:63:2B
            X509v3 Authority Key Identifier:
                keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:f9:33:90:a0:19:9f:03:3a:82:a0:d6:2c:d2:ef:fa:d6:6d:
         69:ca:66:33:d2:c9:b7:31:93:1e:c7:b0:cb:bd:71:2b:47:fe:
         36:e4:94:5b:01:52:34:77:22:04:f3:28:1d:6b:5f:b1:16:58:
         d7:9c:7a:c2:60:6e:db:f1:75:5d:49:50:75:95:81:32:5b:04:
         b9:84:73:80:f5:ec:9b:b2:ae:3e:2b:b2:60:f4:bb:d5:9d:b5:
         c7:1b:46:b7:51:b0:e9:74:38:ce:f3:59:34:6f:4e:95:e0:03:
         12:b3:99:7e:ce:a4:63:b6:95:e7:8f:3b:3b:05:56:09:65:7d:
         47:43:52:71:d0:ce:13:2b:75:5b:71:3b:2c:53:bf:1f:dd:68:
         ae:86:6c:26:80:49:32:c1:fd:d8:8b:ba:c9:49:cd:88:ff:6a:
         12:b9:7d:4a:68:28:b1:a1:a5:b1:4a:3d:f2:99:b1:1f:76:15:
         b8:b6:f1:ec:bc:24:43:32:e5:21:4b:f5:83:ae:82:71:9d:99:
         4d:89:82:ca:f2:f2:1b:2a:a9:a7:dc:f1:14:79:f2:de:13:f9:
         37:41:3a:9b:cd:a4:bf:83:10:68:66:85:8d:cf:bc:6f:40:f5:
         cf:f4:38:65:80:fb:2c:f5:83:1c:fb:0b:05:f3:1e:0a:51:75:
         a6:39:8d:29
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUNvSFSBjHhmSU/Yv9oxaBLywkX5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM3MDIzMTFBRENBN0ZDNkM4NURDMDY1NUE5MjE3QzAw
QkU1RTFFQzAeFw0yNjAxMTYxNTQwMjBaFw0yNzAxMTUxNTQ1MjBaMDMxMTAvBgNV
BAMTKEE2NTAyNkIyNkU3RUY3RTBERjFEOTdDNzY5Rjc3NzdGRjVCNjYzMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fnvAZqUYjlExDzX3PbO43X1d
9UzB/FAcbeyyxTPEBbhMtcqpQDgF96l8pwA65ZdWYb3ILoCQKY/pNjiP2a/v0Gb4
y1xYG7Sw7wx0GMcysFgnbZW+5oZd9ENAqDwLpPn/lGQDE+huxgLwQYLTpGa3ux7f
jLuDJ2F+/5l2i+zc3/2pUbgSgpsu90ya2I+y0DnY2Y1zZH+//ZfF8E4MeuJn9V7Q
pxXFHowaQVbKDpDbsWgrAu8d+pKKHwgz5Qtrk9rWNdDToe+748b0KccVVzI6rwYq
ePvdfgkqWsLwEobkXX5tnCaHihAdRonO4YZIqUgauiSQjlMDJhbfjsUe2JudAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUplAmsm5+9+DfHZfHafd3f/W2YyswHwYDVR0j
BBgwFoAUM3AjEa3Kf8bIXcBlWpIXwAvl4ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq
ZkIvMC8zMzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzAyMzExQURDQTdGQzZD
ODVEQzA2NTVBOTIxN0MwMEJFNUUxRUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0SGl1eHFvNm5id1p0cUNBcUt4MkRiVTc2dnJIV1VYMUJiWlBGNUU4amZCLzAv
MzIzODMwMzQzYTMzMzU2MzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDXAMA0GCSqGSIb3DQEBCwUAA4IBAQBd+TOQ
oBmfAzqCoNYs0u/61m1pymYz0sm3MZMex7DLvXErR/425JRbAVI0dyIE8ygda1+x
FljXnHrCYG7b8XVdSVB1lYEyWwS5hHOA9eybsq4+K7Jg9LvVnbXHG0a3UbDpdDjO
81k0b06V4AMSs5l+zqRjtpXnjzs7BVYJZX1HQ1Jx0M4TK3VbcTssU78f3Wiuhmwm
gEkywf3Yi7rJSc2I/2oSuX1KaCixoaWxSj3ymbEfdhW4tvHsvCRDMuUhS/WDroJx
nZlNiYLK8vIbKqmn3PEUefLeE/k3QTqbzaS/gxBoZoWNz7xvQPXP9DhlgPss9YMc
+wsF8x4KUXWmOY0p
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:45 2026 by rpki-client