This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a343030303a3a2f33342d3334203d3e20323731333938.roa
File:                     323830343a376165343a343030303a3a2f33342d3334203d3e20323731333938.roa (raw, json)
Hash identifier:          fCIYrCZY+AvgwmuNI4ijC+dfenz7ut0gBuwkLBYdgEE=
Subject key identifier:   0F:DB:FE:DF:E6:0E:1D:35:28:A2:98:50:0E:3E:3C:E6:A0:DC:7C:41
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       2482EF089D2C12BB8B3732ADE515A9983A7ABB69
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a343030303a3a2f33342d3334203d3e20323731333938.roa
Signing time:             Tue 20 Jan 2026 19:12:58 +0000
ROA not before:           Tue 20 Jan 2026 19:07:58 +0000
ROA not after:            Tue 19 Jan 2027 19:12:58 +0000
asID:                     271398
IP address blocks:        2804:7ae4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl
                          rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:82:ef:08:9d:2c:12:bb:8b:37:32:ad:e5:15:a9:98:3a:7a:bb:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Jan 20 19:07:58 2026 GMT
            Not After : Jan 19 19:12:58 2027 GMT
        Subject: CN=0FDBFEDFE60E1D3528A298500E3E3CE6A0DC7C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ac:98:9a:c3:14:e5:6c:06:14:54:9a:2d:64:
                    56:59:29:f7:76:c0:66:5c:54:87:6c:e9:6e:8f:fd:
                    a8:e3:72:0c:6c:57:b9:58:9d:3f:c3:89:f0:e5:eb:
                    00:3d:03:24:02:d3:59:c3:ae:8d:93:51:7d:0c:38:
                    11:3c:b1:ce:d5:76:8b:83:59:0c:cc:46:48:2b:7d:
                    64:5a:8b:b4:ae:4c:bc:cf:1e:1d:7a:55:53:05:3f:
                    85:2f:25:b1:0b:58:30:6f:4f:26:b9:7d:c0:f5:03:
                    84:39:f4:ef:80:74:05:c5:0d:f6:f3:a0:a6:71:44:
                    51:b0:90:dc:45:5c:a4:30:05:83:78:89:6e:62:1f:
                    e2:d9:33:59:db:95:f9:9d:8a:22:1a:64:c0:7d:25:
                    c6:0c:ec:5f:a2:4a:df:43:8d:fc:8a:38:3e:2c:18:
                    3f:92:a8:14:d2:c9:83:e6:5d:b9:a3:40:94:e3:46:
                    0e:0c:93:45:7b:ff:82:8c:29:d5:d0:71:77:e2:59:
                    7c:96:92:88:bc:2f:88:25:ef:9c:58:ec:1b:9a:6a:
                    e0:49:b9:86:6f:24:0e:f9:91:ad:73:1f:60:e6:d8:
                    08:2f:83:ca:0d:1c:09:29:6a:10:70:58:d5:9b:f5:
                    99:7b:21:2c:d4:b4:43:87:73:e1:d9:89:81:90:e1:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DB:FE:DF:E6:0E:1D:35:28:A2:98:50:0E:3E:3C:E6:A0:DC:7C:41
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a343030303a3a2f33342d3334203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ae4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:73:35:77:a2:19:a1:d1:be:aa:d0:7d:9f:d7:b7:9e:82:
         65:e6:89:53:08:2e:92:fb:19:35:f4:34:d5:ce:13:8d:9f:c5:
         f2:7c:c3:3e:58:5b:13:22:12:f0:26:e0:58:16:46:80:b6:42:
         91:98:8f:20:e8:4d:eb:29:59:93:0f:ef:c1:2b:1b:ab:82:29:
         2f:5e:66:f7:ee:4d:b7:92:92:a1:f2:67:f1:fc:da:ff:c6:8f:
         ad:64:1a:a1:ab:1c:1c:73:88:c7:ad:8f:f8:e2:41:ad:44:4d:
         54:af:1f:5b:77:9c:9f:12:6a:54:de:57:fe:7e:f4:60:a2:4a:
         90:fc:a2:1f:2f:45:6d:75:b3:6c:81:d2:59:67:df:69:d0:76:
         96:77:a5:9a:eb:f0:fb:93:e4:8e:18:55:84:de:b2:fc:13:ae:
         fc:d9:79:ce:f1:4d:54:c0:4f:25:29:1d:60:c2:28:f6:dc:a3:
         f9:7e:ab:25:ee:cb:f4:6c:17:da:56:80:ae:c3:97:59:18:f2:
         da:08:cd:c7:b4:d1:cf:c9:50:70:f0:cc:78:a0:1e:08:36:1e:
         41:5a:c8:80:a2:77:0f:c0:dc:6a:67:86:8b:6b:03:a4:da:be:
         3f:8e:ec:e7:f6:ec:2a:f0:8d:4c:b3:61:b9:c8:a4:3d:bf:fc:
         ad:79:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:21 2026 by rpki-client