This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539383a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a336539383a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          WCwNFFplr59qx1JEfHeRkCOQuHYl93+cp+NWk5Xb+4Q=
Subject key identifier:   D9:7D:8B:EA:5B:76:5C:C0:82:B4:F3:F2:DD:05:FB:55:D0:42:31:41
Certificate issuer:       /CN=E93268A3714096FCDDC12A8EEEA393524021C87B
Certificate serial:       6BDEAC355AD4E1EA22EF47B9649CF928E8A2CD94
Authority key identifier: E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539383a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Thu 22 Jan 2026 19:02:46 +0000
ROA not before:           Thu 22 Jan 2026 18:57:46 +0000
ROA not after:            Thu 21 Jan 2027 19:02:46 +0000
asID:                     262713
IP address blocks:        2804:640:3e98::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:de:ac:35:5a:d4:e1:ea:22:ef:47:b9:64:9c:f9:28:e8:a2:cd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Validity
            Not Before: Jan 22 18:57:46 2026 GMT
            Not After : Jan 21 19:02:46 2027 GMT
        Subject: CN=D97D8BEA5B765CC082B4F3F2DD05FB55D0423141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:15:19:a0:df:0f:8d:70:9a:84:5a:aa:a6:
                    8e:f9:5f:f4:8f:33:88:18:59:c8:c4:d0:43:de:3d:
                    16:b2:29:6f:83:ac:2d:1d:8b:32:35:88:f2:e9:cf:
                    04:3a:65:0c:7f:ca:1d:b9:17:73:65:27:3f:e8:3b:
                    16:7f:3a:ad:e4:73:29:ee:ce:de:53:54:c6:4b:96:
                    10:88:9b:6a:78:ed:67:5f:12:8f:e3:73:c0:dd:78:
                    2e:a8:a0:d3:59:45:76:5c:08:12:aa:25:4c:79:fc:
                    81:e3:1c:34:18:db:db:51:78:bf:fd:69:3e:6e:30:
                    c7:b4:97:65:dc:2e:65:5c:fc:b9:8b:b7:75:0a:6c:
                    cc:e0:7c:d0:8f:ce:62:43:b7:60:7d:74:0a:c0:18:
                    75:55:1c:b1:a4:57:1e:82:0b:ab:20:37:ba:da:d7:
                    de:12:32:7e:f9:9b:50:36:73:98:a6:61:51:d5:54:
                    4f:66:a1:ff:fd:dc:da:d3:6d:09:99:48:28:09:ba:
                    be:35:60:9a:e0:d5:75:11:e3:3d:89:7f:24:b4:da:
                    1a:0e:6b:d1:d0:e9:f7:69:b4:ad:17:66:ff:08:67:
                    68:d7:6f:46:8b:f3:38:46:c8:2a:3d:c3:40:dc:5b:
                    2a:73:3a:58:07:1f:f5:22:c5:ef:73:af:71:23:8e:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:8B:EA:5B:76:5C:C0:82:B4:F3:F2:DD:05:FB:55:D0:42:31:41
            X509v3 Authority Key Identifier:
                keyid:E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539383a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:3e98::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:03:86:68:af:60:0b:de:5c:db:10:df:23:c3:5f:7e:08:95:
         e9:ca:38:08:07:37:e8:49:64:a9:49:f0:a2:12:23:d3:bc:1e:
         43:af:95:2a:54:ee:f5:49:72:6a:37:42:44:b2:19:9c:ec:21:
         65:e3:90:3b:8b:18:dd:b9:df:03:f1:ae:d2:ae:25:69:f1:5d:
         d1:72:8f:02:97:35:e4:6a:64:4b:3c:cf:27:56:2f:1c:d7:09:
         25:38:b8:95:ae:f2:27:88:6d:0b:24:db:b7:fd:50:72:a6:67:
         f9:36:4e:e1:59:7a:3a:3e:e2:fb:a3:54:83:a5:a5:18:8f:d8:
         ec:46:a2:6e:c7:59:67:b6:bc:d2:e4:f2:dc:72:a4:a7:05:cb:
         c7:69:c3:b8:76:cf:ad:d6:c0:41:0c:d8:fa:5a:28:1a:1f:74:
         d7:fb:35:10:db:34:75:53:07:ca:d1:81:12:57:88:ba:15:0f:
         df:a9:9c:fc:a2:d8:f5:ba:b1:74:d4:5d:01:16:27:52:c2:cb:
         a3:b5:93:18:f7:19:a5:01:44:8a:94:32:9c:fa:e5:d7:b6:0d:
         e7:3c:63:bf:b9:2a:6f:73:ed:5c:0b:10:04:7c:82:e6:f8:bb:
         b7:cd:7d:e9:fe:14:62:4b:ab:65:1e:b4:55:87:8f:44:82:17:
         c0:b6:20:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:29 2026 by rpki-client