This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/323830343a383161303a3a2f33322d3438203d3e20323732343636.roa
File:                     323830343a383161303a3a2f33322d3438203d3e20323732343636.roa (raw, json)
Hash identifier:          bgCmG1vfpir+uFxNMoBLScuMFAIPxWVNc4hUpwo0a9M=
Subject key identifier:   1F:11:4A:34:B9:CC:86:EB:08:33:4C:73:BE:23:7F:0D:92:EC:5A:4C
Certificate issuer:       /CN=DC95AFE058A2A53884ABA1570BF0CB974924D055
Certificate serial:       0E300E052296FC7E0EA1CD9720F9E345D94476AD
Authority key identifier: DC:95:AF:E0:58:A2:A5:38:84:AB:A1:57:0B:F0:CB:97:49:24:D0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC95AFE058A2A53884ABA1570BF0CB974924D055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/323830343a383161303a3a2f33322d3438203d3e20323732343636.roa
Signing time:             Tue 06 Jan 2026 21:21:38 +0000
ROA not before:           Tue 06 Jan 2026 21:16:38 +0000
ROA not after:            Tue 05 Jan 2027 21:21:38 +0000
asID:                     272466
IP address blocks:        2804:81a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/DC95AFE058A2A53884ABA1570BF0CB974924D055.crl
                          rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/DC95AFE058A2A53884ABA1570BF0CB974924D055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC95AFE058A2A53884ABA1570BF0CB974924D055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 03:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:30:0e:05:22:96:fc:7e:0e:a1:cd:97:20:f9:e3:45:d9:44:76:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC95AFE058A2A53884ABA1570BF0CB974924D055
        Validity
            Not Before: Jan  6 21:16:38 2026 GMT
            Not After : Jan  5 21:21:38 2027 GMT
        Subject: CN=1F114A34B9CC86EB08334C73BE237F0D92EC5A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:ee:9d:27:2d:87:23:b4:55:e7:6e:6f:2f:
                    6b:89:30:98:c4:d0:32:13:25:68:d6:13:1e:5c:f1:
                    9b:7b:81:54:03:80:e2:f2:3f:51:1b:e9:54:ec:63:
                    9a:6f:29:79:87:02:1b:22:56:88:03:3b:fd:30:b3:
                    00:84:46:21:22:e9:d1:70:bd:dd:75:b4:f5:bc:97:
                    a7:30:22:58:46:ab:81:35:75:77:39:46:5e:52:a5:
                    64:6c:16:af:15:b0:c5:e5:5a:0f:a6:6a:33:6a:1f:
                    46:43:0f:e3:fc:58:75:e1:57:92:f7:60:9e:0a:e8:
                    bc:5c:b9:1b:e9:95:4f:52:ef:ab:60:fc:c3:7c:31:
                    da:41:5a:c6:84:69:a3:db:d1:22:1d:1b:df:a2:06:
                    26:89:90:60:39:46:cd:d4:10:8b:66:7c:ca:c9:a1:
                    f7:1c:81:ef:ad:a9:d5:bf:54:4a:7e:b3:7d:25:ba:
                    ad:d8:23:59:7f:c5:09:fa:e1:72:83:8c:22:b5:dd:
                    aa:75:10:77:2c:4c:1a:33:26:38:c3:7a:53:27:9a:
                    e6:fc:46:1c:cc:97:5f:78:32:c8:b0:ea:2a:6f:48:
                    f9:28:68:0d:b1:00:b3:36:c2:83:b5:0c:89:77:fa:
                    f4:b1:23:4d:a1:2e:d6:83:e2:bf:7b:73:c8:52:68:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:11:4A:34:B9:CC:86:EB:08:33:4C:73:BE:23:7F:0D:92:EC:5A:4C
            X509v3 Authority Key Identifier:
                keyid:DC:95:AF:E0:58:A2:A5:38:84:AB:A1:57:0B:F0:CB:97:49:24:D0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/DC95AFE058A2A53884ABA1570BF0CB974924D055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC95AFE058A2A53884ABA1570BF0CB974924D055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/323830343a383161303a3a2f33322d3438203d3e20323732343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:a0:dd:3e:53:e1:3e:c9:5b:22:3c:7a:f8:ca:ca:cc:89:9b:
         22:76:1a:f4:d6:28:d7:60:87:1c:87:df:5b:27:64:f3:9c:30:
         09:fd:3b:4b:a1:a7:0d:4e:17:b8:cb:ff:c8:56:40:ce:63:eb:
         30:57:47:d3:f8:12:1d:07:3a:84:f5:7d:d4:5e:ad:76:73:64:
         ca:e8:4c:63:31:55:01:b0:6b:a0:ed:8f:d1:4d:49:a3:36:63:
         e6:1c:4e:cc:a7:3c:60:40:0a:39:6f:04:12:f8:71:10:e9:d9:
         18:c6:17:5a:81:d3:7b:3a:89:04:81:47:7e:db:c0:4c:cf:82:
         fe:5d:72:39:f0:bc:34:d4:68:70:d3:2b:45:0c:a0:ac:b3:4a:
         34:4d:db:77:28:ff:18:cb:31:b4:14:3a:96:dd:43:f9:6d:e0:
         7a:3a:4d:88:5d:be:84:3e:0c:74:fe:85:b7:03:2b:61:ae:3e:
         de:45:61:53:f5:55:06:26:73:11:0b:78:9b:bc:ef:2c:cb:cb:
         3f:c2:4b:88:36:7f:31:10:af:b2:c0:8b:9d:7f:c8:78:ff:9f:
         a5:fd:5f:b0:c4:de:a0:a3:20:77:cf:0f:21:4e:a7:bc:3d:da:
         99:3d:cf:79:56:aa:ea:f3:35:6f:8a:24:17:86:e8:3f:7f:c9:
         bb:ea:a2:a5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDjAOBSKW/H4Ooc2XIPnjRdlEdq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM5NUFGRTA1OEEyQTUzODg0QUJBMTU3MEJGMENCOTc0
OTI0RDA1NTAeFw0yNjAxMDYyMTE2MzhaFw0yNzAxMDUyMTIxMzhaMDMxMTAvBgNV
BAMTKDFGMTE0QTM0QjlDQzg2RUIwODMzNEM3M0JFMjM3RjBEOTJFQzVBNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ru6dJy2HI7RV525vL2uJMJjE
0DITJWjWEx5c8Zt7gVQDgOLyP1Eb6VTsY5pvKXmHAhsiVogDO/0wswCERiEi6dFw
vd11tPW8l6cwIlhGq4E1dXc5Rl5SpWRsFq8VsMXlWg+majNqH0ZDD+P8WHXhV5L3
YJ4K6LxcuRvplU9S76tg/MN8MdpBWsaEaaPb0SIdG9+iBiaJkGA5Rs3UEItmfMrJ
ofccge+tqdW/VEp+s30luq3YI1l/xQn64XKDjCK13ap1EHcsTBozJjjDelMnmub8
RhzMl194Msiw6ipvSPkoaA2xALM2woO1DIl3+vSxI02hLtaD4r97c8hSaP6pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHxFKNLnMhusIM0xzviN/DZLsWkwwHwYDVR0j
BBgwFoAU3JWv4FiipTiEq6FXC/DLl0kk0FUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWRKRTZNQ2g3bmFNa1JXSnlkOWltcU1kVnBXNng0dkdIaVgyNFhaRTlW
ZXcvMC9EQzk1QUZFMDU4QTJBNTM4ODRBQkExNTcwQkYwQ0I5NzQ5MjREMDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDOTVBRkUwNThBMkE1Mzg4
NEFCQTE1NzBCRjBDQjk3NDkyNEQwNTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVkSkU2TUNoN25hTWtSV0p5ZDlpbXFNZFZwVzZ4NHZHSGlYMjRYWkU5VmV3LzAv
MzIzODMwMzQzYTM4MzE2MTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzQzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASBoDANBgkqhkiG9w0BAQsFAAOCAQEAWqDdPlPh
PslbIjx6+MrKzImbInYa9NYo12CHHIffWydk85wwCf07S6GnDU4XuMv/yFZAzmPr
MFdH0/gSHQc6hPV91F6tdnNkyuhMYzFVAbBroO2P0U1JozZj5hxOzKc8YEAKOW8E
EvhxEOnZGMYXWoHTezqJBIFHftvATM+C/l1yOfC8NNRocNMrRQygrLNKNE3bdyj/
GMsxtBQ6lt1D+W3gejpNiF2+hD4MdP6FtwMrYa4+3kVhU/VVBiZzEQt4m7zvLMvL
P8JLiDZ/MRCvssCLnX/IeP+fpf1fsMTeoKMgd88PIU6nvD3amT3PeVaq6vM1b4ok
F4boP3/Ju+qipQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:39:52 2026 by rpki-client