This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a3a2f33342d3431203d3e20323730343138.roa
File:                     323830343a366262343a3a2f33342d3431203d3e20323730343138.roa (raw, json)
Hash identifier:          JQtSsBMQzuqLJCkO0W7vprVWzUsEivxLYKFVhZlXj3o=
Subject key identifier:   F5:70:50:89:EC:98:E1:0D:00:15:AA:E0:0A:AF:62:52:22:A1:33:2F
Certificate issuer:       /CN=30C3F67AD7202CD6EFF4D942412E7544462BF62A
Certificate serial:       6B96F77282012A9532504ECC07A00DAADF5FD5EA
Authority key identifier: 30:C3:F6:7A:D7:20:2C:D6:EF:F4:D9:42:41:2E:75:44:46:2B:F6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C3F67AD7202CD6EFF4D942412E7544462BF62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a3a2f33342d3431203d3e20323730343138.roa
Signing time:             Fri 09 Jan 2026 12:27:18 +0000
ROA not before:           Fri 09 Jan 2026 12:22:18 +0000
ROA not after:            Fri 08 Jan 2027 12:27:18 +0000
asID:                     270418
IP address blocks:        2804:6bb4::/34 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/30C3F67AD7202CD6EFF4D942412E7544462BF62A.crl
                          rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/30C3F67AD7202CD6EFF4D942412E7544462BF62A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C3F67AD7202CD6EFF4D942412E7544462BF62A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:96:f7:72:82:01:2a:95:32:50:4e:cc:07:a0:0d:aa:df:5f:d5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C3F67AD7202CD6EFF4D942412E7544462BF62A
        Validity
            Not Before: Jan  9 12:22:18 2026 GMT
            Not After : Jan  8 12:27:18 2027 GMT
        Subject: CN=F5705089EC98E10D0015AAE00AAF625222A1332F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:aa:a8:fb:69:c0:ff:8e:d0:9c:23:e2:3d:
                    13:8e:9d:ba:8f:da:fe:88:36:b4:2a:dd:dd:18:d3:
                    74:bc:4a:f4:10:ba:46:b2:aa:8c:de:d6:e5:94:27:
                    c8:9f:55:3e:7a:59:70:ef:a6:9f:42:5d:53:fe:d0:
                    40:45:c1:76:9d:ad:6d:32:41:c9:97:67:63:0c:e8:
                    d8:bf:8f:6a:42:7e:71:aa:6d:e3:93:13:e5:d4:fc:
                    14:94:e6:66:77:17:38:db:8c:4b:68:69:9d:10:06:
                    65:4c:2c:2d:63:ad:59:ee:fa:c9:a7:cd:44:23:12:
                    43:63:17:fe:92:b3:95:20:c4:ef:85:9d:2c:e0:3c:
                    f8:91:74:b6:38:e6:fc:7f:1a:37:f2:17:b4:c9:24:
                    e8:27:51:7e:4c:78:24:55:47:58:a1:13:35:3f:8b:
                    66:21:b0:c9:f9:84:2e:aa:1d:7c:f4:dd:7d:09:df:
                    70:5b:6d:4f:7b:76:ca:5f:fe:61:cf:b9:09:01:8b:
                    af:d3:2e:8f:e7:f7:3e:05:d5:94:ea:0f:c6:38:4d:
                    30:59:6c:6e:fc:24:a1:d4:a7:bc:70:a2:5e:f3:95:
                    b2:0d:96:b1:56:d2:9e:c0:7b:8a:5d:fd:f6:dc:51:
                    95:73:2f:27:f3:b0:75:7b:81:d4:72:a2:50:c7:f9:
                    d4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:70:50:89:EC:98:E1:0D:00:15:AA:E0:0A:AF:62:52:22:A1:33:2F
            X509v3 Authority Key Identifier:
                keyid:30:C3:F6:7A:D7:20:2C:D6:EF:F4:D9:42:41:2E:75:44:46:2B:F6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/30C3F67AD7202CD6EFF4D942412E7544462BF62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C3F67AD7202CD6EFF4D942412E7544462BF62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a3a2f33342d3431203d3e20323730343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb4::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:6e:48:c1:5a:2e:b4:64:4d:7b:84:ec:a9:27:b2:7d:16:9f:
         e3:86:c7:85:23:2b:e8:a8:55:b7:3d:70:17:13:6c:36:93:91:
         0b:a8:c3:52:99:49:86:e1:73:c2:1c:91:35:4e:8a:2e:0b:7a:
         fa:89:7b:3a:e2:47:d6:2c:88:21:3d:26:37:a4:2c:c5:b6:6d:
         99:82:c1:bb:77:5c:60:22:5b:0c:73:19:fa:31:02:e1:2c:91:
         96:ce:ae:f8:c1:dc:43:a6:54:30:21:95:91:c1:1c:e2:a3:63:
         d1:ac:38:62:54:40:76:0d:be:71:d3:e6:b4:0b:15:65:2c:0e:
         66:aa:dc:38:d1:5c:a3:91:ec:8e:3f:8e:e6:83:ea:9a:09:71:
         43:30:c8:d0:ee:a3:99:ac:d6:f9:10:48:18:0f:37:45:3b:24:
         76:30:a3:05:95:4c:57:6d:89:23:a0:64:ea:6b:60:9b:56:55:
         fc:da:9a:ab:ae:b5:66:71:6c:ad:df:39:40:13:d6:7b:38:13:
         01:e1:15:b5:2f:bc:16:4b:c7:d6:33:1f:84:7a:55:99:a0:a4:
         46:cf:76:94:de:af:c1:65:09:bf:aa:34:09:46:12:d4:60:82:
         40:af:91:99:08:09:49:db:7f:ca:bc:ae:dc:a0:66:30:4b:4c:
         3c:37:30:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa5b3coIBKpUyUE7MB6ANqt9f1eowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBDM0Y2N0FENzIwMkNENkVGRjREOTQyNDEyRTc1NDQ0
NjJCRjYyQTAeFw0yNjAxMDkxMjIyMThaFw0yNzAxMDgxMjI3MThaMDMxMTAvBgNV
BAMTKEY1NzA1MDg5RUM5OEUxMEQwMDE1QUFFMDBBQUY2MjUyMjJBMTMzMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGuKqo+2nA/47QnCPiPROOnbqP
2v6INrQq3d0Y03S8SvQQukayqoze1uWUJ8ifVT56WXDvpp9CXVP+0EBFwXadrW0y
QcmXZ2MM6Ni/j2pCfnGqbeOTE+XU/BSU5mZ3FzjbjEtoaZ0QBmVMLC1jrVnu+smn
zUQjEkNjF/6Ss5UgxO+FnSzgPPiRdLY45vx/GjfyF7TJJOgnUX5MeCRVR1ihEzU/
i2YhsMn5hC6qHXz03X0J33BbbU97dspf/mHPuQkBi6/TLo/n9z4F1ZTqD8Y4TTBZ
bG78JKHUp7xwol7zlbINlrFW0p7Ae4pd/fbcUZVzLyfzsHV7gdRyolDH+dTvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9XBQieyY4Q0AFargCq9iUiKhMy8wHwYDVR0j
BBgwFoAUMMP2etcgLNbv9NlCQS51REYr9iowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5
YUcvMC8zMEMzRjY3QUQ3MjAyQ0Q2RUZGNEQ5NDI0MTJFNzU0NDQ2MkJGNjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwQzNGNjdBRDcyMDJDRDZF
RkY0RDk0MjQxMkU3NTQ0NDYyQkY2MkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVLMUI1RGlNc2hwQ3R4d3pqV1U5V3hjeVJEWkcyeEo4REpHcnlxQkw2eWFHLzAv
MzIzODMwMzQzYTM2NjI2MjM0M2EzYTJmMzMzNDJkMzQzMTIwM2QzZTIwMzIzNzMw
MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARrtAAwDQYJKoZIhvcNAQELBQADggEBAKFuSMFa
LrRkTXuE7Kknsn0Wn+OGx4UjK+ioVbc9cBcTbDaTkQuow1KZSYbhc8IckTVOii4L
evqJezriR9YsiCE9JjekLMW2bZmCwbt3XGAiWwxzGfoxAuEskZbOrvjB3EOmVDAh
lZHBHOKjY9GsOGJUQHYNvnHT5rQLFWUsDmaq3DjRXKOR7I4/juaD6poJcUMwyNDu
o5ms1vkQSBgPN0U7JHYwowWVTFdtiSOgZOprYJtWVfzamquutWZxbK3fOUAT1ns4
EwHhFbUvvBZLx9YzH4R6VZmgpEbPdpTer8FlCb+qNAlGEtRggkCvkZkICUnbf8q8
rtygZjBLTDw3MHI=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:48 2026 by rpki-client