This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a633030303a3a2f33342d3334203d3e20323730343138.roa
File:                     323830343a366262343a633030303a3a2f33342d3334203d3e20323730343138.roa (raw, json)
Hash identifier:          i6nfIbDxUDRtgTVkwkzJnCrARwnTeQGGvFzyRBoyJGY=
Subject key identifier:   0D:E5:67:71:1E:2F:CC:C7:AA:63:29:A1:1E:18:78:1F:D1:DD:9E:33
Certificate issuer:       /CN=30C3F67AD7202CD6EFF4D942412E7544462BF62A
Certificate serial:       56358B06EA113ECA0FEE0EE6AAAA33F85955B54C
Authority key identifier: 30:C3:F6:7A:D7:20:2C:D6:EF:F4:D9:42:41:2E:75:44:46:2B:F6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C3F67AD7202CD6EFF4D942412E7544462BF62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a633030303a3a2f33342d3334203d3e20323730343138.roa
Signing time:             Fri 09 Jan 2026 12:27:39 +0000
ROA not before:           Fri 09 Jan 2026 12:22:39 +0000
ROA not after:            Fri 08 Jan 2027 12:27:39 +0000
asID:                     270418
IP address blocks:        2804:6bb4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/30C3F67AD7202CD6EFF4D942412E7544462BF62A.crl
                          rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/30C3F67AD7202CD6EFF4D942412E7544462BF62A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C3F67AD7202CD6EFF4D942412E7544462BF62A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:35:8b:06:ea:11:3e:ca:0f:ee:0e:e6:aa:aa:33:f8:59:55:b5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C3F67AD7202CD6EFF4D942412E7544462BF62A
        Validity
            Not Before: Jan  9 12:22:39 2026 GMT
            Not After : Jan  8 12:27:39 2027 GMT
        Subject: CN=0DE567711E2FCCC7AA6329A11E18781FD1DD9E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:9e:16:a1:15:b3:6f:da:c2:bc:72:d3:72:
                    5c:ae:91:e1:fb:18:d8:f1:aa:89:f4:5c:dc:31:99:
                    2f:0f:0f:e7:dc:10:40:06:05:24:50:8e:ae:9d:e9:
                    62:1e:de:0f:12:75:d6:84:37:89:52:07:cc:5d:03:
                    ec:80:b6:87:92:43:5e:29:81:31:18:37:53:e1:34:
                    3b:18:e1:6e:23:1f:8c:a9:83:4a:0d:17:0b:4b:5f:
                    e8:34:31:54:d2:75:f4:64:bf:55:f8:bd:92:11:aa:
                    89:49:e9:0d:27:19:35:e7:53:49:0c:3e:d1:55:c6:
                    a9:4d:2d:55:b5:ba:c6:ec:26:4b:e3:4d:88:5e:72:
                    27:a3:32:9a:66:dd:14:1a:6f:37:b0:13:fc:8c:ec:
                    dc:02:a7:50:3a:10:30:47:d9:26:a7:55:95:5c:2b:
                    03:6b:4f:c6:36:80:df:4e:7d:85:cc:9d:31:08:5a:
                    6f:8d:9c:41:a8:e6:de:c8:31:70:9c:36:90:e0:a4:
                    e2:3f:77:2d:de:bf:3d:91:a4:b0:f8:c2:a2:da:cd:
                    6f:50:9e:e9:35:99:95:49:f1:dc:c6:76:84:6f:9d:
                    b2:c0:31:d6:db:0d:8e:57:5c:70:58:e2:85:5c:8f:
                    d1:ab:58:b5:39:b3:e6:cc:a2:10:44:f4:4e:d5:c7:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E5:67:71:1E:2F:CC:C7:AA:63:29:A1:1E:18:78:1F:D1:DD:9E:33
            X509v3 Authority Key Identifier:
                keyid:30:C3:F6:7A:D7:20:2C:D6:EF:F4:D9:42:41:2E:75:44:46:2B:F6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/30C3F67AD7202CD6EFF4D942412E7544462BF62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C3F67AD7202CD6EFF4D942412E7544462BF62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a633030303a3a2f33342d3334203d3e20323730343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0d:b8:f0:4d:05:32:11:5a:0d:f8:cd:b4:a4:70:4b:56:16:1b:
         3f:4c:0f:28:ae:2b:40:73:70:bc:61:81:92:b5:53:09:4e:6e:
         b2:47:5d:b0:43:b4:c8:66:55:7c:6d:82:7c:5c:5b:e5:36:4d:
         01:0f:2c:66:5e:b4:ca:1a:dc:3e:53:77:30:cd:da:c2:a9:8e:
         35:09:01:aa:5c:70:d2:51:0f:de:ad:1b:3d:24:30:b7:67:5d:
         36:a7:2c:32:52:8c:fb:68:5f:0c:34:f3:49:0d:31:05:d7:48:
         12:2e:bc:6f:86:20:f3:f7:47:44:a8:37:f9:d9:16:02:c9:f2:
         0e:5d:d5:ab:2a:a1:7a:29:ce:dd:68:c3:64:b0:41:94:14:86:
         db:7e:7a:41:11:dd:a2:57:b1:82:64:6a:21:c2:b3:8f:1e:d1:
         ae:35:85:4d:fe:cf:a0:c6:10:7c:35:d1:99:4e:98:1f:ea:fe:
         1c:ec:80:ee:f7:36:60:e1:86:c5:46:5d:81:bc:3a:b5:1c:37:
         66:a4:ac:dd:84:06:86:be:6b:f4:44:c9:5c:ce:06:0d:bd:68:
         1c:11:38:3a:50:16:3f:72:9e:3e:34:8f:f9:1d:c0:d0:5a:6d:
         06:ac:e4:17:93:81:18:f7:c7:3e:78:00:20:f2:67:56:1d:cd:
         51:36:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:26:03 2026 by rpki-client