This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/323830343a363637343a3a2f33322d3332203d3e20323639353539.roa
File:                     323830343a363637343a3a2f33322d3332203d3e20323639353539.roa (raw, json)
Hash identifier:          eBodHRopMSnsbbrrefJfzq/4uRcL15qHfr9Gf0LqnYg=
Subject key identifier:   BC:95:3E:6B:DA:EB:CD:0C:12:AC:76:69:16:79:7F:9A:E7:2E:D9:58
Certificate issuer:       /CN=EE9B455E1A3117465AC7C7127E3428C56D41A76D
Certificate serial:       5A726D4EB00A77BC3DF783C5F7D11413B591BBAF
Authority key identifier: EE:9B:45:5E:1A:31:17:46:5A:C7:C7:12:7E:34:28:C5:6D:41:A7:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9B455E1A3117465AC7C7127E3428C56D41A76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/323830343a363637343a3a2f33322d3332203d3e20323639353539.roa
Signing time:             Sat 17 Jan 2026 15:57:12 +0000
ROA not before:           Sat 17 Jan 2026 15:52:12 +0000
ROA not after:            Sat 16 Jan 2027 15:57:12 +0000
asID:                     269559
IP address blocks:        2804:6674::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/EE9B455E1A3117465AC7C7127E3428C56D41A76D.crl
                          rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/EE9B455E1A3117465AC7C7127E3428C56D41A76D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9B455E1A3117465AC7C7127E3428C56D41A76D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 00:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:72:6d:4e:b0:0a:77:bc:3d:f7:83:c5:f7:d1:14:13:b5:91:bb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9B455E1A3117465AC7C7127E3428C56D41A76D
        Validity
            Not Before: Jan 17 15:52:12 2026 GMT
            Not After : Jan 16 15:57:12 2027 GMT
        Subject: CN=BC953E6BDAEBCD0C12AC766916797F9AE72ED958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:80:a1:7c:07:7e:91:c5:bc:73:1b:c7:61:
                    8b:5f:bc:18:16:b8:4b:a1:2a:66:44:f7:54:fb:fe:
                    e9:ab:b2:9d:da:ce:ef:47:c0:c9:62:af:fe:8f:76:
                    78:8d:a5:d1:5d:5e:cf:fb:20:95:d1:ab:29:cc:7a:
                    43:43:a8:1a:55:ed:0d:b6:5e:9b:ab:a0:c4:2f:db:
                    0f:37:7c:e0:d8:96:40:07:13:4a:af:48:2e:37:21:
                    35:ae:e9:31:02:fa:ef:b3:90:ca:02:2b:3c:91:51:
                    97:10:84:31:f0:4f:b5:7a:22:1d:a6:a8:cf:6d:66:
                    59:3f:6e:dc:d1:7f:f8:55:2e:7a:c0:9d:13:b4:e4:
                    a3:06:ac:e3:11:9c:9f:05:c4:8d:9e:6e:67:29:41:
                    1c:eb:7c:5e:77:84:d1:81:55:25:48:df:9f:da:d8:
                    5d:73:d7:aa:fc:7e:87:b6:f6:3e:53:29:98:5d:8c:
                    00:99:37:bc:fa:0e:eb:9e:a7:a5:dc:a9:a1:10:28:
                    75:fb:f4:e7:f5:82:da:a9:47:74:70:1a:8b:05:f6:
                    ff:1e:2a:f1:08:5e:ec:d4:85:7a:d6:be:ff:20:1e:
                    c1:5f:a1:41:3b:b9:33:b0:ba:04:ec:5c:fa:93:13:
                    4a:e1:64:47:18:15:eb:f4:08:67:5f:2a:9f:0e:e6:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:95:3E:6B:DA:EB:CD:0C:12:AC:76:69:16:79:7F:9A:E7:2E:D9:58
            X509v3 Authority Key Identifier:
                keyid:EE:9B:45:5E:1A:31:17:46:5A:C7:C7:12:7E:34:28:C5:6D:41:A7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/EE9B455E1A3117465AC7C7127E3428C56D41A76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9B455E1A3117465AC7C7127E3428C56D41A76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/323830343a363637343a3a2f33322d3332203d3e20323639353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6674::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:ad:7f:72:e5:f5:a2:3e:9a:c8:9f:63:8b:96:c4:02:ba:64:
         38:e3:3e:12:8f:67:53:01:42:ac:05:e6:83:7e:b4:ca:0f:4b:
         c3:f6:be:b7:3a:bc:6a:b3:c4:d8:8c:2a:88:e0:fb:41:3d:8d:
         c5:71:14:16:4e:95:99:ce:f6:20:8b:1e:85:f9:1f:79:f6:9a:
         53:6b:e2:69:5c:50:d7:8b:53:30:18:17:d9:b3:f7:3d:b1:b9:
         a7:8d:93:59:39:08:6e:c1:64:d5:5f:13:c0:f0:94:f2:4e:2a:
         c6:f1:74:42:15:be:05:19:9a:04:29:e0:69:40:da:a7:7c:ce:
         fc:8a:e6:e3:f0:8c:88:f3:57:f2:8d:2f:e7:78:fc:85:48:c2:
         e8:bd:7e:a3:f6:5e:2f:b5:b2:a3:cc:37:3e:2e:c7:67:cc:de:
         95:9c:09:54:ac:c0:4b:b5:c3:99:65:e7:f3:53:6e:50:96:1c:
         77:57:e2:2e:a0:e8:03:5e:38:9e:07:f0:75:00:b6:93:4f:a5:
         c4:88:8c:9c:89:e0:b2:bc:75:08:3e:2d:f4:2f:05:09:a7:f9:
         17:e7:13:65:8f:5f:9a:77:db:3a:5b:b2:ce:8b:65:1c:7f:2c:
         66:25:4b:69:fc:bf:90:17:cf:f4:a6:48:9d:52:c4:77:62:6d:
         6a:ee:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:58 2026 by rpki-client