This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/323830343a356631303a383030303a3a2f33332d3333203d3e20323639303734.roa
File:                     323830343a356631303a383030303a3a2f33332d3333203d3e20323639303734.roa (raw, json)
Hash identifier:          Cbk3eZl8k4dKdpAmbej/lAw2FneYAvPhFLnt4N4Hgtw=
Subject key identifier:   85:E7:21:B7:DD:29:3A:B5:48:5C:46:06:2B:05:D0:B3:1A:C6:9A:6B
Certificate issuer:       /CN=2ACA728EC56979778198C92FEFFB2A62A9A6CA70
Certificate serial:       25F865AC9CC7D9811D69C97E7A26B930AE2FC883
Authority key identifier: 2A:CA:72:8E:C5:69:79:77:81:98:C9:2F:EF:FB:2A:62:A9:A6:CA:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/323830343a356631303a383030303a3a2f33332d3333203d3e20323639303734.roa
Signing time:             Thu 15 Jan 2026 19:10:12 +0000
ROA not before:           Thu 15 Jan 2026 19:05:12 +0000
ROA not after:            Thu 14 Jan 2027 19:10:12 +0000
asID:                     269074
IP address blocks:        2804:5f10:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.crl
                          rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f8:65:ac:9c:c7:d9:81:1d:69:c9:7e:7a:26:b9:30:ae:2f:c8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA728EC56979778198C92FEFFB2A62A9A6CA70
        Validity
            Not Before: Jan 15 19:05:12 2026 GMT
            Not After : Jan 14 19:10:12 2027 GMT
        Subject: CN=85E721B7DD293AB5485C46062B05D0B31AC69A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:18:9b:3f:37:7c:7b:78:11:14:a0:fd:51:
                    46:95:b6:98:ca:f8:c1:60:37:93:d3:c3:f3:e8:34:
                    00:56:99:77:25:c4:cc:43:e1:65:52:be:da:0a:69:
                    a2:36:cd:60:3e:b7:f6:e6:79:e3:36:12:bd:1f:5c:
                    23:d5:13:92:3c:51:09:fd:ad:99:fe:bf:b2:06:ea:
                    fd:2c:a9:7b:1c:a0:4b:9a:8b:81:de:8e:ab:4e:11:
                    0a:7a:eb:3e:88:13:7d:d0:88:36:08:4f:49:d2:46:
                    77:11:b9:34:18:fe:40:66:2b:e8:c8:3b:07:d2:c8:
                    2e:cf:47:c2:a9:f9:17:c6:31:6a:db:da:ff:ae:31:
                    e1:b8:30:63:e1:b6:04:41:88:e2:c6:b4:19:cf:e4:
                    a9:a9:6c:d9:3d:d1:ca:8c:00:a1:e2:a1:fa:4e:57:
                    c3:38:af:c5:c3:d3:71:e8:59:3e:0b:e8:ad:59:2d:
                    1d:d2:a5:2d:85:c6:64:f4:a3:36:ce:fe:6c:9e:5b:
                    34:b7:30:5f:ee:54:cd:f1:a0:f9:ac:cd:f1:e3:93:
                    70:9e:a8:b3:91:c6:49:ec:bf:92:7e:5e:25:42:7c:
                    f3:2a:fb:f6:83:7c:3d:16:77:8f:7e:ca:55:92:fd:
                    a5:73:25:5b:ef:33:54:ca:08:67:57:eb:8d:1e:f2:
                    4d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E7:21:B7:DD:29:3A:B5:48:5C:46:06:2B:05:D0:B3:1A:C6:9A:6B
            X509v3 Authority Key Identifier:
                keyid:2A:CA:72:8E:C5:69:79:77:81:98:C9:2F:EF:FB:2A:62:A9:A6:CA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA728EC56979778198C92FEFFB2A62A9A6CA70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/323830343a356631303a383030303a3a2f33332d3333203d3e20323639303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:85:ae:fd:d4:4c:58:cf:ac:ae:8c:9b:46:48:69:59:15:79:
         09:32:58:46:7c:83:e4:dc:43:d2:98:b8:dc:30:6a:e8:02:4c:
         a7:74:0e:10:04:c7:c3:3f:43:f3:22:6c:c1:1d:8b:76:28:7f:
         9f:d1:64:13:6c:99:6c:37:ba:70:5b:d1:3c:28:22:d2:77:46:
         2e:03:9c:e8:66:8e:4c:28:d4:4d:0f:1c:43:c2:e6:08:63:ee:
         f4:2a:72:35:de:5a:8a:e3:74:c1:2b:f9:06:4c:b5:9c:70:db:
         1f:4c:6d:54:19:4a:5b:ed:d6:6a:a7:fe:06:50:b0:a1:63:22:
         d6:5b:6f:76:96:bf:fb:d7:77:7b:d8:1d:dc:58:1f:89:8c:24:
         53:46:4b:6c:10:fb:e4:60:c0:92:cb:d6:e6:b5:a8:21:60:a5:
         ab:e0:f3:f6:d2:40:e4:99:ed:53:40:a8:db:78:2f:12:1c:5b:
         26:e8:80:01:ba:8b:c8:2a:ee:d9:34:48:a4:8c:10:b9:23:24:
         c8:3c:2f:ee:c1:7d:2f:a0:4f:bf:49:db:73:0c:ed:b4:c1:bf:
         df:45:1f:6a:60:49:b7:27:e5:84:71:08:db:cd:58:ea:b5:18:
         7a:6b:29:b9:41:f9:9e:ad:9c:b9:76:82:ef:4d:34:71:c0:e3:
         1b:11:ce:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:20 2026 by rpki-client