This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/323830343a336337383a3a2f33322d313238203d3e20323636323134.roa
File:                     323830343a336337383a3a2f33322d313238203d3e20323636323134.roa (raw, json)
Hash identifier:          q6WbJNN1aiTPy+zxBy3chpvuyj5K2Bh4xych3ych+bk=
Subject key identifier:   01:C1:28:AA:F0:89:7A:1C:AD:FA:0F:9D:46:FD:69:9F:1A:D5:70:8B
Certificate issuer:       /CN=C0FC918D9660D5EA6D1D6941F6E21C9277A230FB
Certificate serial:       7F0E3910B12EC3AD3B51D6F9BA61793A9168FC12
Authority key identifier: C0:FC:91:8D:96:60:D5:EA:6D:1D:69:41:F6:E2:1C:92:77:A2:30:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/323830343a336337383a3a2f33322d313238203d3e20323636323134.roa
Signing time:             Mon 05 Jan 2026 18:49:12 +0000
ROA not before:           Mon 05 Jan 2026 18:44:12 +0000
ROA not after:            Mon 04 Jan 2027 18:49:12 +0000
asID:                     266214
IP address blocks:        2804:3c78::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.crl
                          rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0e:39:10:b1:2e:c3:ad:3b:51:d6:f9:ba:61:79:3a:91:68:fc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0FC918D9660D5EA6D1D6941F6E21C9277A230FB
        Validity
            Not Before: Jan  5 18:44:12 2026 GMT
            Not After : Jan  4 18:49:12 2027 GMT
        Subject: CN=01C128AAF0897A1CADFA0F9D46FD699F1AD5708B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:a5:8a:fd:19:a4:99:36:7b:b5:ab:d2:08:
                    43:75:11:67:68:69:a6:8d:0a:53:4d:97:29:d3:ed:
                    76:5a:cc:8e:99:61:53:c1:85:b6:d0:67:73:d1:e5:
                    c2:b3:af:39:aa:13:92:31:0b:dd:14:2d:68:78:86:
                    00:43:28:0c:58:df:60:73:65:80:24:96:77:24:31:
                    f7:73:8d:09:f2:a4:5b:49:7b:2e:b9:eb:ed:1b:eb:
                    6b:1d:72:e7:b8:e5:48:d0:a2:ba:be:f3:7b:f8:09:
                    01:c8:f3:56:be:6d:c9:aa:86:7a:c8:d0:4a:32:5e:
                    95:3a:6b:1c:59:77:77:3b:3a:66:7f:f9:58:8a:c4:
                    0f:2e:e0:4a:9a:84:35:6d:e8:9b:7e:ab:b2:51:0f:
                    c2:56:ba:63:72:8e:99:00:28:a7:71:75:05:07:8d:
                    2b:b0:14:1b:d5:4a:61:29:d9:d5:39:69:a3:20:e5:
                    00:81:f6:85:30:6e:a2:fd:3c:91:51:88:f3:6e:d4:
                    95:f7:c8:80:42:9a:ba:98:a1:ed:3d:87:c5:ee:47:
                    66:f5:e5:58:4b:d0:40:f4:b0:fc:70:d5:68:c1:9b:
                    a7:2f:ac:dc:34:ff:b7:4f:cb:68:51:e6:c4:1f:c0:
                    ca:84:52:e0:dc:fa:82:36:52:90:04:c7:0d:4d:46:
                    a2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C1:28:AA:F0:89:7A:1C:AD:FA:0F:9D:46:FD:69:9F:1A:D5:70:8B
            X509v3 Authority Key Identifier:
                keyid:C0:FC:91:8D:96:60:D5:EA:6D:1D:69:41:F6:E2:1C:92:77:A2:30:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0FC918D9660D5EA6D1D6941F6E21C9277A230FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/323830343a336337383a3a2f33322d313238203d3e20323636323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c78::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:30:e4:1a:49:4b:12:fb:d5:3a:31:9a:83:d1:11:a4:90:87:
         a5:e5:83:12:4f:ac:04:e2:5b:76:98:fc:91:5f:14:a2:67:ed:
         ae:0b:4f:16:22:a9:7e:e0:63:95:ac:db:3e:bd:15:bd:d9:ed:
         43:21:18:a4:01:79:99:a2:dc:90:31:b8:f4:7b:7b:c2:1c:a4:
         da:53:6e:70:d5:e1:8e:f0:ab:55:a8:48:cc:ce:3e:a0:eb:dd:
         8c:51:11:d8:f1:f0:c2:ed:c0:36:91:a6:e4:95:e0:36:4d:98:
         00:68:5c:f6:4e:70:b2:dd:74:e2:cf:25:68:00:23:0b:49:0e:
         5a:9e:e8:f8:5e:d6:0b:e8:27:00:6d:5d:2b:c3:ed:84:82:df:
         b2:ff:c4:07:a2:12:54:44:40:c2:2e:75:80:6d:1b:3e:c9:dc:
         ce:38:55:45:71:0c:af:52:c4:18:16:5b:e3:dd:85:dd:7f:2d:
         83:2e:ab:71:ce:a8:5d:b7:d7:48:1c:36:c0:03:24:9f:d1:d8:
         33:24:76:5d:43:f1:e5:64:2b:8e:24:24:7d:b2:a9:e1:23:cf:
         c1:a0:8c:b9:c7:0f:71:0f:10:21:ae:2f:d7:0a:1f:7b:99:93:
         46:cf:8e:6e:4e:7a:24:c8:f5:c2:62:19:67:37:84:71:08:c8:
         31:32:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:23 2026 by rpki-client