This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/323830343a363033303a3a2f33322d3438203d3e20323639313531.roa
File:                     323830343a363033303a3a2f33322d3438203d3e20323639313531.roa (raw, json)
Hash identifier:          WGog1LOFANsGc+ss5QpkU+svmqG94tTwmeoyKMABIx4=
Subject key identifier:   B9:4D:FB:67:6E:83:D9:40:D2:C3:C4:55:A2:DB:0E:F3:E2:DE:CE:4F
Certificate issuer:       /CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Certificate serial:       5267670482D2719CF48175CBD5910D6F3DF8FA86
Authority key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/323830343a363033303a3a2f33322d3438203d3e20323639313531.roa
Signing time:             Thu 01 Jan 2026 18:51:22 +0000
ROA not before:           Thu 01 Jan 2026 18:46:22 +0000
ROA not after:            Thu 31 Dec 2026 18:51:22 +0000
asID:                     269151
IP address blocks:        2804:6030::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl
                          rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 19:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:67:67:04:82:d2:71:9c:f4:81:75:cb:d5:91:0d:6f:3d:f8:fa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
        Validity
            Not Before: Jan  1 18:46:22 2026 GMT
            Not After : Dec 31 18:51:22 2026 GMT
        Subject: CN=B94DFB676E83D940D2C3C455A2DB0EF3E2DECE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:1b:61:67:ca:12:fe:83:45:2e:7f:08:9b:
                    0f:e3:78:08:08:31:5f:7c:9f:ab:b7:d0:0f:2e:d1:
                    62:67:9e:25:8c:75:bd:b3:40:64:04:77:ca:ed:f1:
                    63:bb:b5:37:c5:be:2d:a6:f4:36:90:07:d1:f1:62:
                    01:59:1b:e8:fe:2f:d2:4d:ae:50:68:c4:ff:42:dc:
                    1a:fd:14:2e:84:ce:43:4f:82:43:73:d4:df:26:5e:
                    29:03:1a:eb:35:4c:49:37:98:02:84:59:c3:60:c0:
                    f2:80:dd:84:c5:13:28:96:78:9f:ee:e3:f1:c6:b1:
                    28:32:b5:a5:2d:16:60:41:bb:8d:34:4d:6f:f3:eb:
                    24:e0:4c:01:be:35:3f:f1:53:37:91:d6:0a:d0:fa:
                    17:8e:31:87:38:c9:e5:2f:fd:c3:ad:67:58:3b:7a:
                    86:e3:f9:40:ba:04:4b:57:b1:5c:86:02:a5:cf:d0:
                    5b:89:0f:5c:10:97:83:cd:e3:3e:e2:6a:0a:d1:7e:
                    d7:92:94:c5:1e:d8:bf:31:7c:8d:d4:d6:73:9c:31:
                    ab:63:ba:de:9c:b4:a6:fc:3e:5c:8d:2d:eb:31:76:
                    c4:37:4b:86:7f:d4:48:08:95:99:8d:b9:52:02:61:
                    48:4b:30:52:ba:01:27:8c:09:a9:37:79:c4:2d:f4:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4D:FB:67:6E:83:D9:40:D2:C3:C4:55:A2:DB:0E:F3:E2:DE:CE:4F
            X509v3 Authority Key Identifier:
                keyid:32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/323830343a363033303a3a2f33322d3438203d3e20323639313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6030::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:ef:d0:74:f7:4e:5a:31:7f:c4:06:d9:65:8a:39:9c:ad:
         39:8c:0e:0a:e8:94:a6:d3:18:17:5a:73:1a:98:e9:c2:b5:d2:
         37:84:42:5b:0c:74:83:d8:6a:9e:d1:97:1d:b1:08:29:54:4f:
         35:df:16:10:35:51:20:ad:ab:78:57:ad:29:b3:97:f4:43:be:
         dd:dd:2a:7f:2c:11:66:d5:93:8a:51:58:e0:92:f8:3d:45:30:
         82:a9:f1:1f:04:62:d1:49:21:4d:ce:be:a5:dc:e9:d1:87:db:
         88:ee:16:50:97:a9:e9:96:d0:5b:b2:2f:f6:d5:2b:44:97:14:
         07:d3:db:88:07:1c:dc:56:50:67:61:2a:76:36:fd:46:a7:42:
         d2:a2:0d:03:c7:cc:c3:ba:c5:35:d3:aa:51:13:ca:95:01:c8:
         9b:0a:9a:cc:93:65:09:d8:57:38:a9:3f:70:2f:04:06:6c:2e:
         80:da:58:f7:cf:88:a5:10:cb:57:cd:85:71:9f:a2:1f:28:10:
         09:b1:a0:24:e4:ee:7d:14:14:bb:ec:e2:a3:db:93:a2:53:6c:
         51:96:b4:94:4c:f1:21:aa:1b:a3:c4:c2:20:a6:8e:97:bb:dc:
         1e:2d:1d:03:7d:58:e5:30:21:bb:fb:54:13:ec:b7:3a:55:b2:
         4f:ec:f6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:44 2026 by rpki-client