This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a3a2f33322d313238203d3e20323635343636.roa
File:                     323830343a333439343a3a2f33322d313238203d3e20323635343636.roa (raw, json)
Hash identifier:          fgqcvLTFb3w0mvLuSRRZdyiU6etb9FcHSvT/PCeAZ3g=
Subject key identifier:   38:E5:E8:4C:4D:15:3F:A3:80:09:6F:52:B0:D1:FC:14:F3:B6:C7:C9
Certificate issuer:       /CN=8F66558670F52B216CF1A300EE9109FB19CBD795
Certificate serial:       2AF708540D6994D9D7215C1E882B3EE4A795BEB0
Authority key identifier: 8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a3a2f33322d313238203d3e20323635343636.roa
Signing time:             Thu 22 Jan 2026 03:42:29 +0000
ROA not before:           Thu 22 Jan 2026 03:37:29 +0000
ROA not after:            Thu 21 Jan 2027 03:42:29 +0000
asID:                     265466
IP address blocks:        2804:3494::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.crl
                          rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f7:08:54:0d:69:94:d9:d7:21:5c:1e:88:2b:3e:e4:a7:95:be:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F66558670F52B216CF1A300EE9109FB19CBD795
        Validity
            Not Before: Jan 22 03:37:29 2026 GMT
            Not After : Jan 21 03:42:29 2027 GMT
        Subject: CN=38E5E84C4D153FA380096F52B0D1FC14F3B6C7C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:d7:84:10:e2:40:07:93:63:51:ca:ce:5f:
                    04:e6:66:b9:e9:52:c4:51:2c:f5:b5:ad:16:03:7d:
                    fe:b4:11:59:f4:17:c9:f0:d1:77:37:fd:09:a9:0a:
                    ff:94:0c:f8:18:f5:5c:f5:80:31:09:02:b7:59:7b:
                    20:43:37:6b:46:bc:5a:32:16:bb:19:9e:a2:3a:73:
                    89:84:aa:7b:71:98:ea:b2:7a:3a:bd:13:5f:d2:4d:
                    46:91:38:44:6f:70:2a:ae:bb:14:89:39:a6:a2:1e:
                    23:51:94:17:e8:78:5f:f6:0c:d4:27:c0:4e:dd:09:
                    eb:c3:dd:ea:39:24:b7:e8:b3:8f:6d:47:bb:e8:a2:
                    79:d4:7a:50:8c:12:81:5e:4a:84:9e:ec:33:96:08:
                    e0:e0:80:3a:74:39:99:2a:29:66:62:de:b8:d2:23:
                    c0:e7:4c:9f:ac:d4:49:e4:96:59:7a:1f:31:f7:e5:
                    77:0a:2e:ae:45:59:25:44:23:d1:f9:0f:d7:90:47:
                    2b:32:9c:0f:fc:a8:76:cc:dd:49:5d:07:c9:20:7d:
                    0b:3c:c8:7c:18:cf:6a:3c:9d:b4:06:77:2c:0c:d5:
                    b0:9f:9d:12:ea:39:97:97:64:10:7b:d4:0a:bd:cf:
                    6a:cc:d9:24:94:a1:47:9d:d8:1a:f9:ff:01:8d:2b:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E5:E8:4C:4D:15:3F:A3:80:09:6F:52:B0:D1:FC:14:F3:B6:C7:C9
            X509v3 Authority Key Identifier:
                keyid:8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a3a2f33322d313238203d3e20323635343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3494::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:8e:af:b1:3f:70:3e:09:02:4a:23:95:91:8c:b3:04:2d:5a:
         95:e0:e2:60:df:91:4a:99:4a:76:67:bd:8c:83:4a:62:04:4d:
         31:3c:fc:e9:2d:70:47:0b:2a:5a:db:3e:12:58:f3:7c:1e:4b:
         0d:87:b9:bc:e1:a4:fa:7d:3f:62:74:bd:e9:2c:9d:57:7c:15:
         cc:45:41:52:08:a3:d3:92:62:b8:ef:49:9d:fd:64:6f:1f:eb:
         a4:3b:3f:fb:d0:7a:e2:00:05:a3:d3:3b:4c:91:a9:7a:ce:b3:
         85:55:09:22:71:b2:96:58:91:68:a0:58:e7:7b:e9:60:e1:b6:
         44:47:04:9b:21:7c:34:0d:b5:7f:98:87:6a:68:b7:7b:73:37:
         8a:69:53:a9:a8:a2:02:44:76:c8:12:21:d3:ac:6d:45:a6:84:
         9e:59:be:31:e7:8a:fb:42:6b:b6:16:bd:68:b6:16:1a:d3:cf:
         3d:c8:6d:59:38:fe:4e:ee:c7:1a:3a:1f:1b:5e:48:51:5c:31:
         18:05:53:48:4c:6b:db:2e:f7:7f:22:f1:73:05:37:f3:31:b2:
         23:85:d7:37:96:4d:39:30:06:6b:b1:65:82:f6:87:5d:41:c2:
         b3:8f:4a:ed:ef:be:93:55:55:6c:71:b1:d6:39:84:9e:39:a2:
         fe:2a:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:26:22 2026 by rpki-client