This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa
File:                     323830343a6461303a3a2f33322d3332203d3e203238353837.roa (raw, json)
Hash identifier:          ZKSpGCCvyF30wyWv/ZpyeatUE6P89RaAQwf2hI7+n2c=
Subject key identifier:   C9:04:7A:AC:05:87:C3:90:64:58:DC:85:C3:0B:A0:C9:5E:C3:27:DB
Certificate issuer:       /CN=6224D598AC5CA349B883EB86735F63566FE08004
Certificate serial:       774B868E3C37703C2B9A3AB55A9A370987E766
Authority key identifier: 62:24:D5:98:AC:5C:A3:49:B8:83:EB:86:73:5F:63:56:6F:E0:80:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6224D598AC5CA349B883EB86735F63566FE08004.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa
Signing time:             Mon 19 Jan 2026 18:19:55 +0000
ROA not before:           Mon 19 Jan 2026 18:14:55 +0000
ROA not after:            Mon 18 Jan 2027 18:19:55 +0000
asID:                     28587
IP address blocks:        2804:da0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/6224D598AC5CA349B883EB86735F63566FE08004.crl
                          rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/6224D598AC5CA349B883EB86735F63566FE08004.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6224D598AC5CA349B883EB86735F63566FE08004.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4b:86:8e:3c:37:70:3c:2b:9a:3a:b5:5a:9a:37:09:87:e7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6224D598AC5CA349B883EB86735F63566FE08004
        Validity
            Not Before: Jan 19 18:14:55 2026 GMT
            Not After : Jan 18 18:19:55 2027 GMT
        Subject: CN=C9047AAC0587C3906458DC85C30BA0C95EC327DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:5f:86:45:81:21:12:63:c2:29:ca:77:19:
                    a3:2c:e1:70:a2:6a:d4:3c:49:99:29:26:27:5f:8e:
                    d5:4f:89:ad:e5:26:ce:72:dd:e7:81:16:42:d6:cc:
                    d1:39:9a:e3:2c:26:46:e9:9b:ce:a4:ff:ca:36:43:
                    1f:b3:6d:1b:bb:e6:3c:dc:3c:94:a8:74:76:fb:75:
                    57:9a:0e:36:0c:be:32:a9:0a:1e:66:3b:b3:75:a9:
                    46:99:db:89:50:c5:dc:2d:38:69:c7:c0:b4:b3:b9:
                    77:8f:87:5a:9c:e5:c7:3c:2f:58:94:a2:71:88:b4:
                    14:21:98:61:23:62:a2:83:96:40:1d:5c:40:bb:55:
                    cb:05:2f:99:94:46:47:7c:dd:d8:ef:6c:08:aa:ac:
                    68:72:a5:e3:b2:4d:43:ea:08:0c:34:99:c9:9b:a3:
                    08:38:d5:df:c1:73:c1:74:c4:04:5e:77:f0:7c:62:
                    de:b6:c8:27:1c:fc:69:5e:4e:55:b0:02:ad:4e:ad:
                    3d:be:92:cc:d4:13:62:dc:b3:2e:06:26:e6:25:51:
                    50:0d:aa:a2:d8:4f:dd:4e:e2:97:6c:21:8a:c4:5d:
                    5d:5b:37:27:a1:5c:62:cb:31:93:8f:39:27:ae:2d:
                    75:36:d7:27:83:9a:43:5f:31:88:da:5f:c3:ca:5a:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:04:7A:AC:05:87:C3:90:64:58:DC:85:C3:0B:A0:C9:5E:C3:27:DB
            X509v3 Authority Key Identifier:
                keyid:62:24:D5:98:AC:5C:A3:49:B8:83:EB:86:73:5F:63:56:6F:E0:80:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/6224D598AC5CA349B883EB86735F63566FE08004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6224D598AC5CA349B883EB86735F63566FE08004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:1c:01:43:6d:14:89:46:47:b4:b5:8e:1d:a5:aa:db:59:76:
         10:0a:d8:5f:6d:14:cb:56:b2:bc:93:55:21:60:ca:72:9e:20:
         01:7a:06:9e:81:c3:7d:cd:bb:e4:90:7d:0c:47:e1:c6:d5:84:
         30:8f:fe:03:ce:25:e7:e1:75:7e:56:f2:84:76:d4:d2:9b:5a:
         43:aa:24:49:6d:6a:9a:d2:d5:f3:29:54:0b:a0:15:ec:d3:aa:
         46:8f:8a:de:81:fd:d5:ff:45:9a:a7:73:49:3f:c0:5c:88:ab:
         2c:a8:9e:ef:d4:7d:3b:0b:56:b5:12:b3:70:d9:65:67:9a:15:
         a6:2e:3e:4a:14:a6:50:cc:03:94:bf:55:32:c2:3c:b0:85:50:
         cc:81:ce:5b:a0:b5:62:a6:84:7e:84:4f:01:74:78:5c:2f:71:
         77:6b:75:df:f5:aa:68:0e:e6:bc:be:f5:9b:5f:c0:7a:d7:3a:
         85:41:13:05:e7:da:d5:d6:cb:2a:12:fd:3b:68:b1:e1:8f:fb:
         94:c3:8c:30:6f:63:1f:3a:e4:3e:e7:b6:c5:b2:b9:63:f0:91:
         64:bc:d2:7c:c9:51:46:94:27:da:36:08:6e:9b:6b:2f:d9:c7:
         d9:13:00:7b:2c:fd:6d:6a:6c:11:2e:02:c0:e8:0a:63:72:12:
         18:ea:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:25 2026 by rpki-client