This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/323830343a323561633a3a2f33322d313238203d3e20323634323934.roa
File:                     323830343a323561633a3a2f33322d313238203d3e20323634323934.roa (raw, json)
Hash identifier:          dZP7M0YnlCilpbm1kX5hkiJwX44LEd/J3UHP+qN3SwE=
Subject key identifier:   9D:D4:B4:90:AA:7D:C8:B4:D4:E9:54:AF:53:E9:A9:53:97:63:FA:E2
Certificate issuer:       /CN=134F37BD7F0154E037FB50124BEEA50F6B2BFC37
Certificate serial:       5750D6E4054F8878BB5AC56D4AB93B863CD69556
Authority key identifier: 13:4F:37:BD:7F:01:54:E0:37:FB:50:12:4B:EE:A5:0F:6B:2B:FC:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/323830343a323561633a3a2f33322d313238203d3e20323634323934.roa
Signing time:             Thu 15 Jan 2026 13:34:46 +0000
ROA not before:           Thu 15 Jan 2026 13:29:46 +0000
ROA not after:            Thu 14 Jan 2027 13:34:46 +0000
asID:                     264294
IP address blocks:        2804:25ac::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.crl
                          rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:50:d6:e4:05:4f:88:78:bb:5a:c5:6d:4a:b9:3b:86:3c:d6:95:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134F37BD7F0154E037FB50124BEEA50F6B2BFC37
        Validity
            Not Before: Jan 15 13:29:46 2026 GMT
            Not After : Jan 14 13:34:46 2027 GMT
        Subject: CN=9DD4B490AA7DC8B4D4E954AF53E9A9539763FAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:0b:0f:bd:20:98:77:09:41:86:2b:67:b3:
                    5a:12:43:e0:be:f2:62:e1:03:b0:3b:f7:d4:06:90:
                    46:70:74:74:f3:f2:75:e7:c5:c7:51:2b:6c:55:d6:
                    14:33:c8:32:e2:11:81:35:60:ae:01:86:29:da:0b:
                    1e:4d:a0:3d:3e:7b:fe:c0:d4:ed:6b:2e:1b:bf:05:
                    bc:97:17:09:e6:9a:fc:1a:64:20:1a:ba:a9:b2:8f:
                    b4:34:0f:51:b4:16:eb:b0:4e:82:4a:a8:23:3b:63:
                    0e:8b:de:45:28:8c:49:42:ee:fa:f4:68:b9:76:67:
                    99:02:71:ed:95:ae:71:e6:60:f9:00:cd:b0:11:b7:
                    95:77:ad:93:f0:e2:56:bd:cd:62:c2:dc:a3:ee:1a:
                    26:53:22:ba:d3:20:07:ba:4c:60:24:d9:9d:ee:f4:
                    75:24:a3:5a:6a:00:cd:ce:8c:b9:8a:2d:4f:46:d7:
                    36:b3:eb:ab:47:c6:d2:ac:c9:a4:74:7a:f8:fc:d4:
                    34:c5:5c:2f:9e:2f:f2:4f:8f:fa:be:16:d0:ae:7f:
                    68:d9:af:66:58:c5:3f:e1:d7:b0:b4:44:87:57:95:
                    a9:fb:2f:fd:23:2f:81:11:cf:d1:dd:39:e7:9c:bb:
                    d6:b2:3f:48:27:81:91:bd:cf:f4:50:39:99:bf:c1:
                    54:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D4:B4:90:AA:7D:C8:B4:D4:E9:54:AF:53:E9:A9:53:97:63:FA:E2
            X509v3 Authority Key Identifier:
                keyid:13:4F:37:BD:7F:01:54:E0:37:FB:50:12:4B:EE:A5:0F:6B:2B:FC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134F37BD7F0154E037FB50124BEEA50F6B2BFC37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/323830343a323561633a3a2f33322d313238203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:96:89:5f:f8:09:44:1e:e7:52:e8:a9:bd:d4:7d:8b:d4:99:
         e5:91:25:b7:12:46:aa:aa:67:60:d7:37:80:37:c3:42:2f:33:
         d5:6d:41:5a:21:cd:3c:63:34:92:af:c0:15:29:19:eb:b5:2a:
         9f:07:53:25:9f:fb:fb:c7:5b:6d:82:7e:2f:aa:2e:55:29:fc:
         fd:af:36:ed:5e:44:09:8b:6e:58:61:6a:01:62:8a:87:5c:94:
         3f:94:07:be:3b:ff:02:97:78:71:f0:e9:1c:bd:a9:8c:e9:18:
         6d:92:f3:86:d0:a4:bc:8b:9a:3a:06:9c:a6:63:fd:9f:18:f8:
         d7:e2:bb:9f:51:aa:e1:47:f2:4d:29:94:77:c2:bc:b4:da:ce:
         74:9f:7c:8b:47:7d:16:84:a5:2a:84:d4:2b:59:e9:4d:a2:b9:
         18:41:f5:bc:58:2f:0a:7a:89:18:ab:0a:0c:44:b9:5f:34:c5:
         e2:e8:53:2a:c6:a5:79:1a:d8:57:42:9f:f4:8d:23:60:41:45:
         d1:af:2d:9c:d3:9a:9b:a6:6c:1e:86:a7:b6:1b:20:e0:c7:56:
         c1:6b:91:da:34:c1:86:0c:bd:e5:c2:c3:01:0d:d7:c6:e0:b2:
         18:0e:4b:a9:9e:60:f6:d8:9b:e4:2f:25:d0:b2:e9:b6:aa:e0:
         fc:9f:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:05 2026 by rpki-client