This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa
File:                     323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa (raw, json)
Hash identifier:          d6ot4CnGiOiZXQmN106COHiei1nALiV5niAOl/Go6PA=
Subject key identifier:   6C:BD:9A:48:C4:9A:B7:95:A8:93:A5:B2:B0:F1:5F:85:4A:ED:E1:89
Certificate issuer:       /CN=9BFF670A0A74B3B2422C208B200EB041C1A3479B
Certificate serial:       54A7F94E836D2811A5D54774A43730A4441EB28E
Authority key identifier: 9B:FF:67:0A:0A:74:B3:B2:42:2C:20:8B:20:0E:B0:41:C1:A3:47:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BFF670A0A74B3B2422C208B200EB041C1A3479B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa
Signing time:             Wed 21 Jan 2026 22:44:22 +0000
ROA not before:           Wed 21 Jan 2026 22:39:22 +0000
ROA not after:            Wed 20 Jan 2027 22:44:22 +0000
asID:                     52700
IP address blocks:        2804:110c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/9BFF670A0A74B3B2422C208B200EB041C1A3479B.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/9BFF670A0A74B3B2422C208B200EB041C1A3479B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BFF670A0A74B3B2422C208B200EB041C1A3479B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a7:f9:4e:83:6d:28:11:a5:d5:47:74:a4:37:30:a4:44:1e:b2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFF670A0A74B3B2422C208B200EB041C1A3479B
        Validity
            Not Before: Jan 21 22:39:22 2026 GMT
            Not After : Jan 20 22:44:22 2027 GMT
        Subject: CN=6CBD9A48C49AB795A893A5B2B0F15F854AEDE189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:2d:f3:d5:3b:97:36:75:55:90:ef:9b:97:
                    32:05:52:19:1b:d7:63:af:a8:bb:3b:60:01:5a:ef:
                    9f:fb:8d:35:8e:7b:08:3a:e4:32:64:05:55:9b:e2:
                    f8:83:3f:e3:ae:8b:8e:ae:8f:5e:60:bd:ef:d1:f7:
                    80:c2:77:06:c7:96:91:aa:2a:04:70:e9:2e:87:db:
                    29:13:a0:46:cc:98:18:9c:28:04:ac:37:22:f4:dc:
                    eb:7a:fc:89:d9:07:5c:8c:96:6f:38:14:20:4b:9c:
                    83:4a:99:61:81:f1:4a:2a:a7:b9:d5:63:52:ec:7a:
                    d3:ab:f4:6a:de:ba:3d:ae:99:7a:e7:19:57:ad:3d:
                    e7:e9:cb:b9:c1:4c:f6:be:51:06:79:f4:0f:3c:1f:
                    08:4f:6c:a8:14:bc:08:b8:09:c4:45:87:8c:63:3a:
                    7f:e0:7d:6a:41:f2:93:eb:57:8b:9b:ba:ac:a0:2c:
                    22:ab:d1:d9:ae:e0:7c:dd:30:74:2a:15:2a:1d:ba:
                    99:7f:8d:15:ff:71:cc:57:5a:77:06:16:c4:fe:3a:
                    ad:39:db:98:73:0e:37:b5:88:c5:bb:ef:8f:2b:bb:
                    b6:e2:ca:7c:5d:46:9c:ed:eb:39:88:2b:de:ba:5a:
                    1e:78:7c:c0:56:4d:93:6e:f7:83:36:98:fa:7c:ac:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BD:9A:48:C4:9A:B7:95:A8:93:A5:B2:B0:F1:5F:85:4A:ED:E1:89
            X509v3 Authority Key Identifier:
                keyid:9B:FF:67:0A:0A:74:B3:B2:42:2C:20:8B:20:0E:B0:41:C1:A3:47:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/9BFF670A0A74B3B2422C208B200EB041C1A3479B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BFF670A0A74B3B2422C208B200EB041C1A3479B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:110c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:84:2d:71:7e:96:53:43:42:85:08:f7:9e:6b:ee:fb:6f:ee:
         48:c6:f9:6f:51:ad:d9:4a:19:1a:f3:2c:8a:37:51:b8:3d:3e:
         04:f8:b3:4a:85:e3:12:d1:4b:84:8c:7f:89:c8:aa:d5:36:fc:
         01:bb:d3:2f:32:01:6c:46:6c:1f:49:66:7f:d5:97:1c:ee:75:
         66:6e:f4:46:6e:68:35:1e:a1:dc:c2:b3:7a:25:f2:88:d7:01:
         f3:82:2e:f4:58:a8:f9:bb:08:54:92:09:46:86:09:c9:ef:ad:
         f7:e1:96:79:88:1d:55:69:97:d6:09:8e:8d:4b:e7:82:47:4d:
         e4:3c:3c:2a:60:17:88:dc:eb:1f:0f:04:79:23:28:f4:94:76:
         b5:48:a7:13:0c:ed:07:25:da:6f:11:d5:71:25:9f:93:4a:cf:
         6e:ca:a6:a6:9e:14:8e:c3:2c:7e:91:66:b3:27:fb:76:bf:8b:
         d2:b0:91:7d:16:dd:51:e9:08:75:47:64:4a:f4:49:b8:e8:61:
         c5:e9:af:82:db:2c:36:ef:ac:05:34:a2:ae:da:9a:53:d1:3e:
         ae:fe:a7:7e:7d:67:8f:b6:e3:8d:a2:3e:f2:8d:73:00:76:83:
         a8:00:8b:37:b6:ef:9b:70:71:de:cb:6a:95:3c:1d:71:f8:06:
         f9:c7:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:22 2026 by rpki-client