This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3130303a3a2f34342d3434203d3e20323731343636.roa
File:                     323830343a376266383a3130303a3a2f34342d3434203d3e20323731343636.roa (raw, json)
Hash identifier:          3DIygP4gqhXkTWtNetMsRXRrbV0nSY5K410b/5AG+vE=
Subject key identifier:   F2:EE:B5:F1:59:4D:11:3E:E5:96:20:67:1D:0F:AF:E7:2A:7D:4C:76
Certificate issuer:       /CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
Certificate serial:       4A0AA57AA9889450609F0532ED0EF29FBF7F353F
Authority key identifier: A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3130303a3a2f34342d3434203d3e20323731343636.roa
Signing time:             Wed 14 Jan 2026 00:38:37 +0000
ROA not before:           Wed 14 Jan 2026 00:33:37 +0000
ROA not after:            Wed 13 Jan 2027 00:38:37 +0000
asID:                     271466
IP address blocks:        2804:7bf8:100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0a:a5:7a:a9:88:94:50:60:9f:05:32:ed:0e:f2:9f:bf:7f:35:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Validity
            Not Before: Jan 14 00:33:37 2026 GMT
            Not After : Jan 13 00:38:37 2027 GMT
        Subject: CN=F2EEB5F1594D113EE59620671D0FAFE72A7D4C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c1:1e:57:f4:34:29:a2:53:a4:db:75:c0:fa:
                    62:bc:8f:f6:10:3c:4f:85:2e:68:e4:9b:ba:18:af:
                    74:93:74:a4:e9:90:e7:40:04:e1:b9:11:69:c0:e8:
                    3a:5c:bb:52:0b:bb:48:24:7d:10:d2:35:5e:f8:1d:
                    23:ff:85:cc:8f:ed:2a:17:1d:62:de:14:4b:80:42:
                    f8:e5:7f:87:9c:5d:60:b0:40:a1:a1:c4:87:24:89:
                    65:f1:2d:10:66:ac:ab:73:ad:22:9e:11:f1:63:e3:
                    13:73:a9:ec:27:0b:7b:12:3d:3b:22:0b:1d:bf:d8:
                    06:be:c9:46:c5:9c:9e:90:66:0b:7e:5b:f8:69:68:
                    a4:df:8b:b0:8e:07:84:56:b2:75:95:a4:a7:b3:0a:
                    5b:8e:c6:fc:5e:6c:56:8a:99:15:07:ac:47:da:86:
                    ee:18:8f:07:41:ff:28:d3:99:26:b4:c0:b4:6d:ce:
                    5b:c4:8c:c1:1a:9d:d4:ed:d0:cc:9c:7d:83:d1:24:
                    cc:02:35:5f:06:28:90:d0:49:b9:37:5c:b4:f5:33:
                    0d:e8:68:56:b8:74:f8:9c:88:8e:b7:f9:14:d6:cc:
                    2d:dd:79:5f:67:55:af:e9:c3:41:58:0f:98:f6:c5:
                    bd:37:f4:fb:0a:81:4d:d5:d6:3b:8f:aa:30:95:24:
                    a2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EE:B5:F1:59:4D:11:3E:E5:96:20:67:1D:0F:AF:E7:2A:7D:4C:76
            X509v3 Authority Key Identifier:
                keyid:A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3130303a3a2f34342d3434203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:a4:28:d4:ed:b3:0e:8c:bc:3e:49:aa:c8:12:27:e8:3b:6a:
         31:62:9c:c8:92:f0:a8:5e:f1:22:d7:ad:a7:fa:d0:00:a1:d1:
         22:bc:c2:7d:91:2f:36:7b:a0:b3:3c:26:29:4a:c1:ca:d1:54:
         86:d5:bb:15:eb:3a:6c:de:4f:55:1e:b6:b5:a9:87:45:7c:84:
         a3:f6:4a:64:ab:96:8d:cc:1f:69:2c:13:62:3b:58:12:d0:4a:
         d5:44:ae:34:10:9e:58:41:33:02:32:59:32:a1:73:8d:d8:56:
         85:21:91:c8:c2:f1:65:bc:e4:a7:f2:12:46:a1:f1:72:21:0c:
         2a:10:bc:4c:a9:10:d7:2a:20:1c:37:b8:88:16:13:64:38:d7:
         fe:74:12:33:72:f8:57:48:b1:82:c6:4e:de:9c:81:b9:0f:4d:
         97:80:13:91:05:e2:45:f6:3c:a9:7a:2b:b4:ad:d1:4a:36:ae:
         b7:b9:31:57:53:85:66:c5:6f:18:ea:46:ba:8c:59:39:10:b1:
         39:c9:26:36:4e:50:80:67:06:f7:34:16:f9:62:73:db:6f:a3:
         2b:e7:4e:f0:3a:9c:0c:16:1b:e5:84:7e:c7:6c:7a:01:61:21:
         67:7c:a2:23:1c:17:96:33:59:e0:6a:7f:ea:2a:40:f7:c1:8f:
         89:c3:d2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:49 2026 by rpki-client