This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a633030303a3a2f33342d3334203d3e20323731333938.roa
File:                     323830343a376165343a633030303a3a2f33342d3334203d3e20323731333938.roa (raw, json)
Hash identifier:          LVUgTQYSxdfOyIKWP89CNS0GPFbyOzYrubdoRMwaEAg=
Subject key identifier:   13:7B:A4:E2:AD:01:41:5C:B6:24:A3:27:4C:D4:27:D9:E5:DD:31:B2
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       57EF507FAAE7B2EA2F0113B8917B314BE01B3486
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a633030303a3a2f33342d3334203d3e20323731333938.roa
Signing time:             Tue 20 Jan 2026 19:12:59 +0000
ROA not before:           Tue 20 Jan 2026 19:07:59 +0000
ROA not after:            Tue 19 Jan 2027 19:12:59 +0000
asID:                     271398
IP address blocks:        2804:7ae4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl
                          rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ef:50:7f:aa:e7:b2:ea:2f:01:13:b8:91:7b:31:4b:e0:1b:34:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Jan 20 19:07:59 2026 GMT
            Not After : Jan 19 19:12:59 2027 GMT
        Subject: CN=137BA4E2AD01415CB624A3274CD427D9E5DD31B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:95:cf:ea:6a:68:a1:9f:5f:dc:2a:5a:e8:8d:
                    c5:a6:f6:c7:27:19:4a:d7:76:e1:b7:91:93:3e:70:
                    e5:eb:4d:05:53:41:09:dc:ed:3f:b2:79:e5:af:0d:
                    c3:9f:05:2e:7f:22:5f:f6:29:97:bc:f3:2a:50:ae:
                    e0:3a:04:d7:23:ae:a3:89:db:a5:32:f5:70:cd:49:
                    c2:d9:20:56:88:88:c2:b2:3a:e4:66:b5:d8:59:ed:
                    98:7a:66:8b:61:57:f9:1e:e7:81:b1:ad:db:c5:9b:
                    96:b4:c0:46:45:c1:d9:69:84:ce:d5:79:03:01:7b:
                    df:9c:7c:61:77:e6:86:6d:69:60:52:ef:99:84:1e:
                    03:1a:1a:04:3d:79:a9:0d:4b:d1:64:e5:0e:92:2f:
                    fb:de:8c:9b:5c:12:6c:2a:bd:27:2f:d1:6a:2d:54:
                    2c:ed:0c:a2:ed:af:15:99:8e:a4:84:ec:8a:5b:9e:
                    c8:18:9b:5c:6a:2c:a9:5d:ee:66:43:4c:3f:bc:4c:
                    0c:a8:6d:5f:2d:ea:61:9d:f9:27:c3:f7:15:14:4c:
                    75:81:79:57:78:d1:08:c4:c3:72:eb:7b:9b:80:b4:
                    e5:1c:02:01:23:a0:49:1d:28:d8:00:6f:ef:43:a2:
                    ee:3f:70:0c:b1:64:1a:3f:c4:cd:83:1f:d5:e0:dd:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7B:A4:E2:AD:01:41:5C:B6:24:A3:27:4C:D4:27:D9:E5:DD:31:B2
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a633030303a3a2f33342d3334203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ae4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9b:f8:6d:63:63:50:0a:44:2c:a8:44:99:f4:76:e2:48:5f:b0:
         3d:96:97:3a:33:b7:f5:9a:c0:be:8d:90:b2:a3:0e:4a:c1:b5:
         34:ee:e5:9a:44:1e:38:14:35:ea:a3:a1:fe:e1:38:3a:c8:3c:
         35:9d:33:2e:7c:3f:7f:7e:a2:ad:0c:53:66:8d:da:d4:52:6c:
         56:fd:7d:43:28:66:e9:16:1d:68:50:8e:d5:3a:77:88:dd:16:
         fe:7f:5a:3d:51:2a:92:f3:f8:af:7a:ea:ff:0b:83:87:37:af:
         b3:85:ef:e6:2d:ef:6c:b5:ff:07:9d:3b:20:dc:d9:bd:4f:84:
         01:12:a2:d6:85:ed:3e:2c:bd:2c:18:ca:f5:23:29:ad:24:95:
         ec:12:22:bf:cc:94:33:31:ca:b0:a2:11:65:3f:a0:08:8c:8b:
         2f:8d:e8:d3:49:11:19:4c:90:8b:19:5d:2b:3c:90:31:9f:02:
         c3:9b:cb:35:5f:3e:98:d1:e5:a4:2b:2d:58:0e:e3:67:c5:ba:
         56:3f:1a:13:6f:99:17:75:d5:bc:9a:77:c8:c7:b2:fd:1f:a8:
         f8:a6:70:e9:f0:c9:0c:a8:44:d3:be:62:50:bf:be:c6:80:68:
         41:86:e1:98:e5:35:40:be:d8:8f:26:01:a9:11:a3:68:3a:44:
         ba:9c:e7:77
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUV+9Qf6rnsuovARO4kXsxS+AbNIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VCNjZERUZERDk0MjczOThDQkU4MEI4RUMzRDFENUJD
RjMzMjFBQTAeFw0yNjAxMjAxOTA3NTlaFw0yNzAxMTkxOTEyNTlaMDMxMTAvBgNV
BAMTKDEzN0JBNEUyQUQwMTQxNUNCNjI0QTMyNzRDRDQyN0Q5RTVERDMxQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDelc/qamihn1/cKlrojcWm9scn
GUrXduG3kZM+cOXrTQVTQQnc7T+yeeWvDcOfBS5/Il/2KZe88ypQruA6BNcjrqOJ
26Uy9XDNScLZIFaIiMKyOuRmtdhZ7Zh6ZothV/ke54GxrdvFm5a0wEZFwdlphM7V
eQMBe9+cfGF35oZtaWBS75mEHgMaGgQ9eakNS9Fk5Q6SL/vejJtcEmwqvScv0Wot
VCztDKLtrxWZjqSE7IpbnsgYm1xqLKld7mZDTD+8TAyobV8t6mGd+SfD9xUUTHWB
eVd40QjEw3Lre5uAtOUcAgEjoEkdKNgAb+9Dou4/cAyxZBo/xM2DH9Xg3T6LAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUE3uk4q0BQVy2JKMnTNQn2eXdMbIwHwYDVR0j
BBgwFoAUfrZt792UJzmMvoC47D0dW88zIaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFc2aTRqbUpkbmFiMUdFZ3EzTWJ0aUI1UkJTTlpUUUVzVlZpRTk0eFRK
cmkvMC83RUI2NkRFRkREOTQyNzM5OENCRTgwQjhFQzNEMUQ1QkNGMzMyMUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFQjY2REVGREQ5NDI3Mzk4
Q0JFODBCOEVDM0QxRDVCQ0YzMzIxQUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRXNmk0am1KZG5hYjFHRWdxM01idGlCNVJCU05aVFFFc1ZWaUU5NHhUSnJpLzAv
MzIzODMwMzQzYTM3NjE2NTM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMzMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEeuTAMA0GCSqGSIb3DQEBCwUA
A4IBAQCb+G1jY1AKRCyoRJn0duJIX7A9lpc6M7f1msC+jZCyow5KwbU07uWaRB44
FDXqo6H+4Tg6yDw1nTMufD9/fqKtDFNmjdrUUmxW/X1DKGbpFh1oUI7VOneI3Rb+
f1o9USqS8/iveur/C4OHN6+zhe/mLe9stf8HnTsg3Nm9T4QBEqLWhe0+LL0sGMr1
IymtJJXsEiK/zJQzMcqwohFlP6AIjIsvjejTSREZTJCLGV0rPJAxnwLDm8s1Xz6Y
0eWkKy1YDuNnxbpWPxoTb5kXddW8mnfIx7L9H6j4pnDp8MkMqETTvmJQv77GgGhB
huGY5TVAvtiPJgGpEaNoOkS6nOd3
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:21 2026 by rpki-client