This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373730303a3a2f34302d3430203d3e203631353931.roa
File:                     323830343a323331633a373730303a3a2f34302d3430203d3e203631353931.roa (raw, json)
Hash identifier:          q+TJJBfoFS2DKz+6sqOkFnHHVxZxK/TRMhiYx5ZRhgw=
Subject key identifier:   F9:41:2D:87:25:4E:A7:7B:10:36:FC:6E:E5:21:4B:0F:5F:1F:5D:0E
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       1643D20C9FE70CD511D06E71892146425DE19FFE
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373730303a3a2f34302d3430203d3e203631353931.roa
Signing time:             Sat 03 Jan 2026 19:00:01 +0000
ROA not before:           Sat 03 Jan 2026 18:55:01 +0000
ROA not after:            Sat 02 Jan 2027 19:00:01 +0000
asID:                     61591
IP address blocks:        2804:231c:7700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:43:d2:0c:9f:e7:0c:d5:11:d0:6e:71:89:21:46:42:5d:e1:9f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jan  3 18:55:01 2026 GMT
            Not After : Jan  2 19:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:a9:eb:a5:df:0f:bd:6e:55:53:7f:31:64:
                    59:7b:f8:11:09:b9:9d:a4:bf:ef:b1:fc:43:75:da:
                    c6:13:23:33:b2:0a:8f:d8:79:e6:06:b9:99:17:50:
                    e2:57:d5:85:36:46:e6:6b:c2:21:74:ba:21:0f:22:
                    6a:9f:5d:5f:ed:04:cd:ba:3e:10:c1:5e:25:72:6f:
                    a9:34:5a:da:70:6f:ec:03:72:62:8d:f9:17:47:48:
                    cd:b2:18:e9:3e:18:50:cf:7d:e5:e6:61:f9:da:bf:
                    ef:06:40:41:e6:5f:1c:5d:9a:cd:84:73:d3:79:d0:
                    5a:59:79:db:c0:14:b1:87:63:c2:99:8a:60:42:71:
                    c4:39:3f:2d:96:c3:0a:32:08:5b:bb:13:01:74:00:
                    39:4b:d5:08:18:a6:ef:e5:d0:fc:c7:5e:20:08:4b:
                    71:4b:25:af:a1:90:08:f1:13:f8:91:3a:80:0d:be:
                    e6:ad:cc:29:8a:23:a0:14:0d:4e:7d:4d:14:80:66:
                    4f:89:b0:1e:2d:cc:df:06:2b:84:e1:26:d5:33:0b:
                    2b:ea:e0:d5:8f:d9:a9:f4:67:03:e5:ed:2a:07:ff:
                    d2:1c:db:16:57:20:06:d1:17:fa:f2:39:40:e7:71:
                    9b:c6:7f:89:0c:af:88:08:5d:5d:ca:89:7c:f6:11:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:2D:87:25:4E:A7:7B:10:36:FC:6E:E5:21:4B:0F:5F:1F:5D:0E
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373730303a3a2f34302d3430203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:7700::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:8f:10:e7:31:66:8c:67:0a:60:fc:da:a1:01:af:2a:19:d7:
         3e:30:10:7b:78:41:25:d9:5e:72:20:0b:87:c2:e8:b7:74:e6:
         13:d2:0f:fa:85:45:cc:6a:fa:27:00:b8:db:4a:81:bc:ca:83:
         34:bf:e3:c9:cc:15:4c:75:1e:9d:14:7a:bd:9c:f2:0f:cf:05:
         30:a9:d6:31:85:5e:9d:b7:3d:49:eb:b0:11:54:3b:fd:02:f7:
         06:56:22:3d:77:97:65:0d:87:36:37:32:23:44:17:39:94:14:
         24:94:d7:8a:e7:ec:ec:46:d1:ec:55:0b:73:de:fd:92:f6:e4:
         7f:5a:4f:34:f0:97:03:a2:ca:ea:0b:c5:64:2d:4e:34:af:5d:
         bd:71:e0:df:d4:3c:e1:5e:d2:3a:37:7e:ca:b6:24:97:fd:4e:
         1b:f7:94:02:98:c7:24:47:4e:1c:a7:80:69:83:89:fe:09:ca:
         6c:ea:b7:d5:3d:13:d3:d2:9f:2f:e1:19:c1:ee:95:92:59:08:
         a1:cf:55:14:0e:0f:7e:aa:e6:ba:5c:78:43:ff:3d:8b:4e:39:
         27:a6:87:93:01:ac:36:ab:89:ff:ab:18:4d:e3:fc:fd:83:55:
         7d:3c:6c:88:94:37:61:c2:95:7b:7c:a0:78:f9:87:5d:a0:1f:
         41:04:8f:95
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUFkPSDJ/nDNUR0G5xiSFGQl3hn/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNjAxMDMxODU1MDFaFw0yNzAxMDIxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUU0N0E5RUJBNURGMEZCRDZF
NTU1MzdGMzE2NDU5N0JGODExMDlCOTlEQTRCRkVGQjFGQzQzNzVEQUM2MTMyMzMz
QjIwQThGRDg3OUU2MDZCOTk5MTc1MEUyNTdENTg1MzY0NkU2NkJDMjIxNzRCQTIx
MEYyMjZBOUY1RDVGRUQwNENEQkEzRTEwQzE1RTI1NzI2RkE5MzQ1QURBNzA2RkVD
MDM3MjYyOERGOTE3NDc0OENEQjIxOEU5M0UxODUwQ0Y3REU1RTY2MUY5REFCRkVG
MDY0MDQxRTY1RjFDNUQ5QUNEODQ3M0QzNzlEMDVBNTk3OURCQzAxNEIxODc2M0My
OTk4QTYwNDI3MUM0MzkzRjJEOTZDMzBBMzIwODVCQkIxMzAxNzQwMDM5NEJENTA4
MThBNkVGRTVEMEZDQzc1RTIwMDg0QjcxNEIyNUFGQTE5MDA4RjExM0Y4OTEzQTgw
MERCRUU2QURDQzI5OEEyM0EwMTQwRDRFN0Q0RDE0ODA2NjRGODlCMDFFMkRDQ0RG
MDYyQjg0RTEyNkQ1MzMwQjJCRUFFMEQ1OEZEOUE5RjQ2NzAzRTVFRDJBMDdGRkQy
MUNEQjE2NTcyMDA2RDExN0ZBRjIzOTQwRTc3MTlCQzY3Rjg5MENBRjg4MDg1RDVE
Q0E4OTdDRjYxMUM0NjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArkep66XfD71uVVN/MWRZe/gRCbmdpL/vsfxDddrGEyMzsgqP2Hnm
BrmZF1DiV9WFNkbma8IhdLohDyJqn11f7QTNuj4QwV4lcm+pNFracG/sA3JijfkX
R0jNshjpPhhQz33l5mH52r/vBkBB5l8cXZrNhHPTedBaWXnbwBSxh2PCmYpgQnHE
OT8tlsMKMghbuxMBdAA5S9UIGKbv5dD8x14gCEtxSyWvoZAI8RP4kTqADb7mrcwp
iiOgFA1OfU0UgGZPibAeLczfBiuE4SbVMwsr6uDVj9mp9GcD5e0qB//SHNsWVyAG
0Rf68jlA53Gbxn+JDK+ICF1dyol89hHEYQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FPlBLYclTqd7EDb8buUhSw9fH10OMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzMyMzgzMDM0M2EzMjMzMzE2MzNh
MzczNzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNjMxMzUzOTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKAQjHHcwDQYJKoZIhvcNAQELBQADggEBAKiPEOcxZoxnCmD82qEBryoZ
1z4wEHt4QSXZXnIgC4fC6Ld05hPSD/qFRcxq+icAuNtKgbzKgzS/48nMFUx1Hp0U
er2c8g/PBTCp1jGFXp23PUnrsBFUO/0C9wZWIj13l2UNhzY3MiNEFzmUFCSU14rn
7OxG0exVC3Pe/ZL25H9aTzTwlwOiyuoLxWQtTjSvXb1x4N/UPOFe0jo3fsq2JJf9
Thv3lAKYxyRHThyngGmDif4Jymzqt9U9E9PSny/hGcHulZJZCKHPVRQOD36q5rpc
eEP/PYtOOSemh5MBrDarif+rGE3j/P2DVX08bIiUN2HClXt8oHj5h12gH0EEj5U=
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:23:57 2026 by rpki-client