This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a6466383a3a2f33322d3634203d3e203532353332.roa
File:                     323830343a6466383a3a2f33322d3634203d3e203532353332.roa (raw, json)
Hash identifier:          B5M7DiKBua3fK6r9hSa09pPA4z721pewe3XV00YqDk0=
Subject key identifier:   E6:20:8F:A2:41:47:13:8B:5F:DE:F4:0C:3B:C3:04:1C:8C:C9:09:90
Certificate issuer:       /CN=E02547CEB01812D757CD1E70C72BBAD758D9B304
Certificate serial:       4BFD8E219A4914F8AAF2792123E1A64DCEE80BBF
Authority key identifier: E0:25:47:CE:B0:18:12:D7:57:CD:1E:70:C7:2B:BA:D7:58:D9:B3:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E02547CEB01812D757CD1E70C72BBAD758D9B304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a6466383a3a2f33322d3634203d3e203532353332.roa
Signing time:             Wed 07 Jan 2026 12:29:15 +0000
ROA not before:           Wed 07 Jan 2026 12:24:15 +0000
ROA not after:            Wed 06 Jan 2027 12:29:15 +0000
asID:                     52532
IP address blocks:        2804:df8::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/E02547CEB01812D757CD1E70C72BBAD758D9B304.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/E02547CEB01812D757CD1E70C72BBAD758D9B304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E02547CEB01812D757CD1E70C72BBAD758D9B304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 06:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fd:8e:21:9a:49:14:f8:aa:f2:79:21:23:e1:a6:4d:ce:e8:0b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02547CEB01812D757CD1E70C72BBAD758D9B304
        Validity
            Not Before: Jan  7 12:24:15 2026 GMT
            Not After : Jan  6 12:29:15 2027 GMT
        Subject: CN=E6208FA24147138B5FDEF40C3BC3041C8CC90990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:f5:e4:0e:6a:b0:71:42:92:f4:31:d3:fb:
                    61:f4:01:06:85:4f:4a:8e:55:2e:b8:3c:68:7b:a9:
                    5f:d8:df:d1:94:90:f1:38:6e:a1:0c:4f:18:bc:bc:
                    cf:58:ac:2a:54:d2:c6:ad:72:3c:98:b8:46:a2:1f:
                    b4:93:75:70:b4:b1:fb:43:e8:5b:b0:ed:a6:66:0d:
                    db:2a:a2:a1:54:f1:a5:96:9e:0e:54:cb:a5:d2:6e:
                    0e:13:12:36:b9:a5:7c:7f:c3:76:87:ea:af:30:de:
                    2b:d2:1c:75:4c:14:42:cb:a4:76:96:6d:eb:2f:c8:
                    91:06:03:ba:ce:99:71:dc:47:13:31:ef:bc:d9:10:
                    5f:4d:fa:b7:9f:c1:09:cf:13:62:6d:a1:39:88:75:
                    38:f4:35:52:d2:fd:a3:65:86:47:bb:31:63:59:67:
                    4e:51:92:31:ce:9f:3b:12:ae:2b:e5:9b:77:22:be:
                    d7:23:7e:25:46:94:58:8a:60:35:53:ec:6c:ce:fe:
                    2d:ad:a6:17:e7:cf:25:f4:eb:c3:b1:5e:50:c1:eb:
                    a4:0d:bb:c9:6a:df:89:10:84:b2:86:24:ef:70:9e:
                    0e:64:c7:f1:19:f8:cf:49:c3:62:8e:8a:a7:80:b0:
                    3d:e3:40:4a:17:77:83:16:f0:b6:49:8e:02:e5:d6:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:20:8F:A2:41:47:13:8B:5F:DE:F4:0C:3B:C3:04:1C:8C:C9:09:90
            X509v3 Authority Key Identifier:
                keyid:E0:25:47:CE:B0:18:12:D7:57:CD:1E:70:C7:2B:BA:D7:58:D9:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/E02547CEB01812D757CD1E70C72BBAD758D9B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E02547CEB01812D757CD1E70C72BBAD758D9B304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a6466383a3a2f33322d3634203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:35:fd:3a:86:9a:5f:c6:ae:dc:3a:ec:63:ab:01:61:6a:
         66:5a:58:2a:50:be:55:24:d1:c5:7e:66:ea:f0:d8:02:5b:c4:
         85:ea:47:06:42:cb:c6:1a:22:0a:ff:71:54:b5:e9:9f:6c:da:
         fb:8d:bf:6b:ac:77:41:1a:15:74:33:36:2c:3a:be:3e:cd:48:
         11:67:6b:4b:cc:49:06:93:44:6c:0d:30:48:7f:a1:d8:e2:17:
         3a:65:95:64:94:13:85:ba:72:df:59:6c:24:29:8d:59:57:4c:
         3f:20:94:a8:3b:4b:0d:cb:10:c4:0c:cb:31:de:83:ea:34:c1:
         fc:2c:54:a2:e6:1a:3a:9d:e9:0c:58:0f:f0:4e:ac:d0:26:bc:
         cf:8f:8a:1b:a0:3d:6a:90:59:0d:2b:03:70:e5:1f:a8:9a:37:
         e0:ca:8f:e0:f3:47:fc:98:ac:3e:93:ea:ec:2a:ff:3a:09:27:
         ed:af:7e:db:34:b4:7c:b8:7d:4e:43:d7:09:a6:94:eb:df:ff:
         44:9c:89:ff:d4:71:72:34:71:69:ed:15:e0:77:5f:8a:8d:ad:
         c6:9a:de:12:f5:d9:91:01:75:cd:b1:20:e7:76:36:ae:ca:40:
         e8:56:f7:ab:3e:f2:8b:6f:93:7b:b1:d4:ff:01:24:82:f4:e8:
         5d:de:e9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:02:12 2026 by rpki-client