This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a653430313a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a653430313a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          6UdwzMlfH20MaVv45oP9EXMTIPalu9gETdUVFb8dBL8=
Subject key identifier:   07:9A:E3:23:BA:B6:69:14:D0:16:2E:00:65:19:B2:B2:C5:C2:48:F4
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       3C326DC27168CE6FEA79DA4247BF1DF2BBD04ECD
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a653430313a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 03 Jan 2026 19:00:00 +0000
ROA not before:           Sat 03 Jan 2026 18:55:00 +0000
ROA not after:            Sat 02 Jan 2027 19:00:00 +0000
asID:                     61591
IP address blocks:        2804:231c:e401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:32:6d:c2:71:68:ce:6f:ea:79:da:42:47:bf:1d:f2:bb:d0:4e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jan  3 18:55:00 2026 GMT
            Not After : Jan  2 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:29:b3:cd:04:37:a6:4d:d3:9f:6e:f4:b4:
                    b5:a2:d5:8a:69:d8:04:ee:6e:0f:7c:70:bb:63:ca:
                    25:ee:5f:4d:50:40:c4:b3:52:c6:c2:d2:fb:a6:3f:
                    86:6d:d4:55:d3:29:9c:7a:87:9f:b2:30:52:35:d8:
                    49:40:a7:7e:43:cb:21:f8:4b:00:25:c3:22:8a:93:
                    0a:b5:a8:72:76:cb:83:32:f2:2f:e6:4a:55:cc:ae:
                    3b:c5:c9:6c:2c:f5:9c:19:c7:70:dc:a6:a8:f8:c2:
                    60:02:b1:87:56:95:6a:5b:60:95:55:40:50:07:e8:
                    8e:94:fc:44:fd:ae:8c:6c:9a:dc:18:bd:f5:e4:8e:
                    a2:19:50:b5:b5:fc:be:05:6f:fa:7c:d9:3f:39:c3:
                    b8:79:f5:28:b9:78:bd:8b:02:9d:63:08:78:ff:60:
                    ac:1c:67:16:14:9b:50:95:78:88:48:44:e3:14:1d:
                    2a:40:3c:d1:43:2f:4b:66:9d:53:31:66:af:74:d0:
                    77:24:3c:1b:09:21:4e:f7:6f:43:24:b6:c2:b3:63:
                    88:d9:b6:f2:cc:c2:96:3d:54:56:bd:21:bc:7f:33:
                    e9:89:85:9b:da:60:9a:1a:7b:d0:4a:3d:7f:91:d4:
                    15:e0:54:c1:61:a0:50:8c:c1:1d:71:a9:75:9a:41:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9A:E3:23:BA:B6:69:14:D0:16:2E:00:65:19:B2:B2:C5:C2:48:F4
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a653430313a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:e401::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:c9:5d:83:4b:f1:5c:62:02:2c:83:b9:07:e4:fc:13:b5:
         ec:24:77:05:1c:27:7c:a9:85:68:75:b8:a5:cd:76:5a:47:55:
         d6:bc:4d:79:1d:68:aa:46:2b:a2:95:82:5a:60:18:6b:d3:ea:
         50:e3:b7:12:3a:d9:79:09:8e:d2:97:56:59:73:1b:cd:19:ad:
         27:a7:9b:68:65:bb:b7:ac:55:94:3c:ee:d8:d7:80:58:29:f7:
         4e:90:eb:ef:bb:10:05:e9:2e:5d:07:b4:8b:a1:df:78:4a:bc:
         d0:7f:93:95:e2:0e:4c:1e:85:56:9b:42:c8:86:ec:e2:0c:f4:
         03:b4:99:9f:88:1b:44:bc:65:80:45:f4:1f:ad:6a:93:0f:fa:
         fd:d3:68:bb:f1:13:ee:f6:45:61:d8:b4:85:c5:38:68:36:21:
         d4:7d:1b:fa:03:a3:4a:50:56:c8:03:27:4f:a7:4c:31:2b:4f:
         4f:7d:8c:5e:e1:5e:3c:29:43:a6:e8:52:7b:05:dc:35:fc:3f:
         77:2f:54:a3:13:ee:66:5f:e4:01:32:ab:c9:23:a0:9b:04:42:
         60:1e:32:f0:68:67:26:4d:71:f0:5c:77:fe:7d:be:69:63:8c:
         26:33:87:55:6a:ec:51:16:5a:26:11:49:09:03:ea:a4:d2:f1:
         a9:e0:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:23:58 2026 by rpki-client