This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a383030303a3a2f33342d3334203d3e20323731303530.roa
File:                     323830343a373537633a383030303a3a2f33342d3334203d3e20323731303530.roa (raw, json)
Hash identifier:          zF+pG7uhwMLODe8A5EnVx72aRzBBIMsi4L0LyEE+Ny8=
Subject key identifier:   1B:66:AC:87:A3:16:8A:B4:A2:F2:40:66:43:8A:F6:E6:66:CB:C2:8A
Certificate issuer:       /CN=1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4
Certificate serial:       0A697CEA825C4F4C2B771EA640B5CF11A6FEF537
Authority key identifier: 1A:50:37:E7:59:D0:BF:A5:94:AD:13:E4:DD:55:F8:C4:B5:BF:3A:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a383030303a3a2f33342d3334203d3e20323731303530.roa
Signing time:             Mon 15 Dec 2025 14:17:26 +0000
ROA not before:           Mon 15 Dec 2025 14:12:26 +0000
ROA not after:            Mon 14 Dec 2026 14:17:26 +0000
asID:                     271050
IP address blocks:        2804:757c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:69:7c:ea:82:5c:4f:4c:2b:77:1e:a6:40:b5:cf:11:a6:fe:f5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4
        Validity
            Not Before: Dec 15 14:12:26 2025 GMT
            Not After : Dec 14 14:17:26 2026 GMT
        Subject: CN=1B66AC87A3168AB4A2F24066438AF6E666CBC28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:f9:ec:42:6b:e9:ba:1a:ff:37:8f:b0:bc:
                    61:60:58:1f:54:95:ac:be:55:86:cb:d8:b7:36:bd:
                    61:7a:1a:65:64:b5:56:4b:20:05:ec:68:84:2e:23:
                    20:c2:86:e7:53:fa:6c:68:de:ff:86:e2:6e:00:1b:
                    14:6a:76:a2:65:bb:77:e1:72:c2:35:14:0a:d4:00:
                    c4:06:cd:55:aa:3e:b2:3c:40:48:0f:af:a0:4d:a1:
                    fe:c8:bc:4f:a5:43:54:9f:ee:bb:57:3f:a5:90:c1:
                    b3:60:8e:1f:c0:10:b7:3e:25:9c:2d:ce:b1:df:c6:
                    7e:3d:6e:84:06:6d:bd:f1:d5:e9:f6:d1:b8:2b:34:
                    89:02:72:84:96:4a:7a:1e:59:0c:11:7a:af:c3:ae:
                    ac:eb:a5:da:3e:45:52:cb:f3:db:ef:4b:39:a6:ac:
                    e5:4f:56:28:7b:ff:6d:8e:c8:e2:4e:5b:74:6d:b1:
                    a7:d3:71:be:d5:0d:af:72:5f:5c:e2:54:59:44:e5:
                    f3:08:b5:4c:a2:7a:08:2d:e8:31:3c:80:00:22:fc:
                    89:37:55:94:94:39:6e:a8:bc:4e:c2:2f:90:5f:21:
                    04:f9:9d:f5:88:52:c0:7b:fa:a1:0a:35:ba:7a:03:
                    d4:1e:f6:9d:ae:33:9c:9a:35:c1:78:b4:63:dc:d8:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:66:AC:87:A3:16:8A:B4:A2:F2:40:66:43:8A:F6:E6:66:CB:C2:8A
            X509v3 Authority Key Identifier:
                keyid:1A:50:37:E7:59:D0:BF:A5:94:AD:13:E4:DD:55:F8:C4:B5:BF:3A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a383030303a3a2f33342d3334203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:757c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:20:9f:10:2f:29:17:5d:78:b9:f2:8b:b2:31:60:fc:23:ac:
         2c:c6:6c:1d:a6:09:30:63:e2:f3:b8:8d:29:87:e4:dc:8a:2f:
         db:d5:08:c9:b4:40:24:31:9a:bb:e8:13:b9:cf:f9:0c:e4:30:
         d3:94:6b:c2:3b:b9:3b:ac:07:b5:8f:5a:81:c9:e0:63:53:54:
         57:16:c9:8e:90:b4:12:5b:e9:15:ad:e5:c3:47:6b:2a:fc:89:
         b4:dd:ef:89:c3:8a:d8:fc:ea:38:3e:15:6e:eb:11:09:65:13:
         9a:a8:22:f3:72:b8:6f:d0:2c:1d:23:e4:2f:1c:61:f7:e5:9e:
         8e:24:f0:b5:22:cf:ac:3c:03:1d:58:5f:2b:4c:27:66:a3:cd:
         09:ad:ad:fd:ac:50:0e:ae:4d:a3:36:7a:63:dd:1b:35:5c:4a:
         b3:a3:f6:1c:10:04:dc:97:3f:7b:90:b4:ab:2a:54:15:37:db:
         50:b7:8d:f8:9f:95:0d:f5:fc:9b:8a:5d:80:b1:fb:39:34:73:
         6c:c1:46:72:1c:0c:95:13:0d:09:56:11:bd:c8:f1:c0:c7:dd:
         11:d1:15:86:b2:ea:f8:ee:8c:cb:4b:40:98:f8:26:41:27:e8:
         cf:be:0a:4e:9f:6b:d1:ed:05:b8:14:67:92:8c:e2:45:c0:c0:
         26:f6:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:28:08 2026 by rpki-client