This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/323830343a376434343a3a2f33322d3438203d3e20323731353530.roa
File:                     323830343a376434343a3a2f33322d3438203d3e20323731353530.roa (raw, json)
Hash identifier:          ZmEJlxfCjB01FfOsgXaQherYYGrs/PAQPCRqSg5n1As=
Subject key identifier:   CF:4F:BD:C2:61:65:D6:A1:33:76:DB:E8:C8:7C:53:16:F8:6E:B2:5A
Certificate issuer:       /CN=BF68367BA9C194E56265EA3689DA1A2E695ABC42
Certificate serial:       1611BECCF955695F1AA5AD26D5CD4F2103B020E4
Authority key identifier: BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/323830343a376434343a3a2f33322d3438203d3e20323731353530.roa
Signing time:             Sun 18 Jan 2026 05:40:22 +0000
ROA not before:           Sun 18 Jan 2026 05:35:22 +0000
ROA not after:            Sun 17 Jan 2027 05:40:22 +0000
asID:                     271550
IP address blocks:        2804:7d44::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl
                          rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 00:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:11:be:cc:f9:55:69:5f:1a:a5:ad:26:d5:cd:4f:21:03:b0:20:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF68367BA9C194E56265EA3689DA1A2E695ABC42
        Validity
            Not Before: Jan 18 05:35:22 2026 GMT
            Not After : Jan 17 05:40:22 2027 GMT
        Subject: CN=CF4FBDC26165D6A13376DBE8C87C5316F86EB25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:c2:6c:22:59:a1:93:be:92:38:d0:71:fc:
                    1c:3a:c2:1d:2b:d2:62:de:46:75:45:9d:fe:79:39:
                    2f:99:ee:83:d7:4a:16:ab:99:fc:c7:9a:59:02:f7:
                    40:94:31:21:c3:b7:53:90:88:83:fe:0e:8d:20:c0:
                    45:f9:d5:e2:af:d1:fe:a2:22:fd:e9:ae:b4:02:99:
                    41:4f:11:db:27:1b:2b:2e:8f:31:ee:32:39:b6:d0:
                    c4:fe:21:a2:18:76:62:bb:09:1d:8f:30:91:66:06:
                    75:e0:46:f8:ec:45:ae:49:8d:51:98:83:5b:d3:d9:
                    55:ee:19:62:b1:21:f1:b8:a6:b4:11:cc:6f:e4:d3:
                    fb:02:0b:3e:6e:0d:d9:28:f1:d0:07:67:37:64:32:
                    76:fe:c8:0d:5a:28:60:55:03:d3:d6:1d:54:db:b4:
                    47:44:92:7f:64:e2:a8:4b:db:ca:88:8a:2d:c9:64:
                    51:d4:23:73:c3:f3:81:f5:20:e9:15:d0:de:1c:4d:
                    cb:39:29:e3:33:21:25:17:c9:c3:e9:f4:39:42:3c:
                    55:5f:b2:d5:5b:9a:6d:78:b3:7b:ba:d6:33:0a:ad:
                    8b:5d:11:b7:ac:44:13:8d:be:9e:a5:17:ef:87:06:
                    76:e1:54:c6:3f:70:0d:31:dd:cb:ae:d7:fb:fd:4c:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4F:BD:C2:61:65:D6:A1:33:76:DB:E8:C8:7C:53:16:F8:6E:B2:5A
            X509v3 Authority Key Identifier:
                keyid:BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/323830343a376434343a3a2f33322d3438203d3e20323731353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d44::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:d8:1c:73:a8:e8:6a:11:e1:ec:d9:9a:2b:e8:cd:09:65:1a:
         de:5f:c2:92:e6:f8:71:d1:b8:b7:ba:e6:ce:2d:53:19:98:2d:
         f7:ce:95:98:83:18:e6:d3:b2:6c:b3:34:18:70:88:33:67:36:
         8a:a3:86:5e:d2:13:5f:42:34:15:88:44:d2:d4:72:3b:72:f6:
         01:5c:f6:b4:39:62:a0:1b:a3:2a:f4:44:9c:17:b0:70:36:0d:
         9b:e4:d0:42:89:aa:8b:07:ab:61:fe:97:99:ad:f6:1a:3a:0f:
         b3:32:f1:ef:ac:ae:0d:0c:e7:bf:ea:f4:c0:f1:8a:f3:de:dc:
         79:27:37:65:7c:b9:d8:31:92:f7:cb:f4:97:58:a3:11:b9:43:
         7e:07:ae:35:e1:ec:75:6b:56:7b:15:91:97:e9:1d:3e:50:c1:
         b6:37:f5:ed:66:17:3c:b9:ea:32:d2:ff:cd:f5:66:37:83:48:
         c2:5d:61:3c:46:01:54:3b:66:47:0b:3a:b3:d4:97:5e:5a:1b:
         3c:d5:3d:75:f6:d0:4e:dd:92:3d:0c:8e:05:b6:3b:22:5d:02:
         e0:1c:f1:ff:ba:60:4a:0b:c2:e7:c8:7f:ee:74:eb:f4:1c:42:
         25:34:bb:23:d5:2a:c1:ed:bd:8e:e6:a7:58:48:98:68:e8:04:
         be:3d:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:25:15 2026 by rpki-client