This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a3a2f33322d3332203d3e20323731333938.roa
File:                     323830343a376165343a3a2f33322d3332203d3e20323731333938.roa (raw, json)
Hash identifier:          WBt5KH/i7lQ/eW1GYIBGKafNnQCdJceQfzQBsv7xEC0=
Subject key identifier:   2F:87:62:A6:24:D4:BF:DA:82:8A:6F:90:59:3A:89:85:E5:A6:1D:B8
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       6FAB5FD021F2D77368BFA2CFC6022BFE23B51199
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a3a2f33322d3332203d3e20323731333938.roa
Signing time:             Tue 20 Jan 2026 19:12:59 +0000
ROA not before:           Tue 20 Jan 2026 19:07:59 +0000
ROA not after:            Tue 19 Jan 2027 19:12:59 +0000
asID:                     271398
IP address blocks:        2804:7ae4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl
                          rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ab:5f:d0:21:f2:d7:73:68:bf:a2:cf:c6:02:2b:fe:23:b5:11:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Jan 20 19:07:59 2026 GMT
            Not After : Jan 19 19:12:59 2027 GMT
        Subject: CN=2F8762A624D4BFDA828A6F90593A8985E5A61DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:ad:9a:a3:d8:b4:d0:e3:95:6a:05:3a:f2:
                    07:58:34:18:e0:8d:01:2e:4c:55:6a:7f:f5:09:b8:
                    bd:8a:be:67:a8:21:44:03:a6:94:80:d8:5e:fe:eb:
                    aa:2a:30:9c:00:a5:5d:10:b4:dc:46:cf:06:10:08:
                    13:c5:52:b1:ce:a7:f4:8c:5f:40:c7:83:07:58:a1:
                    0b:c0:b1:77:2c:83:cf:15:bf:ca:98:ca:51:b8:68:
                    50:1e:9b:11:f6:f3:53:f4:22:6f:ee:e9:f7:c5:a1:
                    33:ad:7d:99:cd:f2:d5:34:3e:35:99:c7:2f:ba:fe:
                    e6:7b:49:04:fc:87:be:4c:59:9f:7b:2d:c0:73:e0:
                    19:b9:37:bb:a7:53:cb:1f:51:d9:55:81:7e:cc:c4:
                    2a:34:b6:d6:79:38:f6:21:b0:7f:16:38:18:50:1e:
                    a3:cb:cd:7d:f0:73:06:d4:46:4f:07:ff:3a:d3:ac:
                    3f:bc:1a:08:49:d4:0e:fe:54:72:ba:71:92:cf:b9:
                    8e:44:00:e6:6b:45:ec:53:a2:dc:d0:b1:68:ee:50:
                    4f:da:c3:e4:8b:59:e2:5e:f3:0a:52:48:12:93:7d:
                    43:b1:6d:c3:79:2f:99:77:a6:3f:4c:ad:7f:fb:61:
                    96:f3:b6:e2:a9:71:11:29:4e:65:0b:8d:34:22:6d:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:87:62:A6:24:D4:BF:DA:82:8A:6F:90:59:3A:89:85:E5:A6:1D:B8
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a3a2f33322d3332203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ae4::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:15:31:c2:c6:d8:1c:3b:04:d5:9e:31:d5:3f:9c:87:cc:
         aa:8e:84:5e:58:52:0f:01:c7:c7:cf:d7:09:bf:30:1e:4b:ac:
         7e:fb:56:ee:cc:9f:4a:62:fc:49:24:f6:56:ab:60:6a:be:ec:
         c3:4f:ca:43:a1:c7:11:dc:15:49:4d:7b:25:86:03:39:28:7d:
         f2:ce:60:19:a6:02:1b:31:27:b0:3e:03:4d:44:be:49:81:59:
         71:ff:2f:0d:75:06:f2:f2:bb:80:76:d7:b4:61:4d:b8:74:b5:
         96:1b:a8:64:6b:01:62:20:7b:25:c1:d9:39:43:e0:3b:bc:2c:
         60:11:07:ca:ef:50:57:25:95:a8:82:85:cb:ce:bc:45:8a:b5:
         35:9d:45:d5:60:f8:98:5c:ce:c1:94:35:15:45:ff:01:1d:6f:
         d2:fd:fb:42:60:c2:d9:6f:58:b7:dd:e7:71:23:f0:e9:b8:4d:
         d5:4f:d8:48:14:22:8d:14:b8:e5:bd:a5:8f:a9:17:fb:66:d1:
         03:e3:fc:1e:a7:a3:d6:72:4a:eb:4c:34:7e:1b:a9:3a:bc:f6:
         27:47:ae:03:21:17:4f:2c:be:6b:af:6c:1e:c1:b8:16:9c:78:
         88:30:50:bc:a8:e2:8d:b9:32:71:8e:b6:4d:93:24:d2:e8:0f:
         08:a8:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:17 2026 by rpki-client