This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa
File:                     323830343a386233383a3a2f33322d3438203d3e20323733373139.roa (raw, json)
Hash identifier:          ZGPv3j+fg12djN2Mi6C9PIfTj4uu2+gX0NDl7bknT1Q=
Subject key identifier:   1A:64:C2:12:6E:5E:BB:F3:CA:AD:74:80:CD:99:9C:8F:F0:C4:5B:4F
Certificate issuer:       /CN=130DA06C9537B1DF6544F6290A638F863755DA73
Certificate serial:       395FE5C2085ADC2E8F7460FCE9FD5FC4F8134076
Authority key identifier: 13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa
Signing time:             Tue 06 Jan 2026 19:06:30 +0000
ROA not before:           Tue 06 Jan 2026 19:01:30 +0000
ROA not after:            Tue 05 Jan 2027 19:06:30 +0000
asID:                     273719
IP address blocks:        2804:8b38::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.crl
                          rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 08:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5f:e5:c2:08:5a:dc:2e:8f:74:60:fc:e9:fd:5f:c4:f8:13:40:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130DA06C9537B1DF6544F6290A638F863755DA73
        Validity
            Not Before: Jan  6 19:01:30 2026 GMT
            Not After : Jan  5 19:06:30 2027 GMT
        Subject: CN=1A64C2126E5EBBF3CAAD7480CD999C8FF0C45B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:45:73:7e:94:5f:80:b3:45:22:a8:ce:33:
                    c2:ef:87:6e:ec:2f:d5:98:57:d9:b1:98:40:50:be:
                    aa:9c:01:d1:1e:98:4b:cf:ae:a5:16:24:f5:1b:af:
                    58:eb:c5:9c:3e:37:ad:0d:e5:7d:cb:f8:84:76:d1:
                    12:9c:74:30:79:9a:04:75:6d:90:3c:de:22:e8:bd:
                    f7:8f:21:c7:13:9a:25:72:7d:ab:b5:11:c2:f4:72:
                    76:ef:7b:cb:c0:66:8a:b4:36:7e:0e:ca:78:43:fd:
                    c6:a0:31:c8:25:6f:ec:cb:e5:f9:0a:60:66:33:1f:
                    89:86:1f:a5:96:06:9d:49:7d:4d:29:92:7a:8c:79:
                    5e:01:fe:3c:b1:e9:59:19:a5:c1:a6:ca:ab:cc:45:
                    34:b7:1d:4c:78:bd:bb:90:18:d1:54:73:d4:96:b3:
                    19:b3:ef:bb:aa:70:0a:22:22:e8:1b:b6:86:c4:22:
                    1e:98:7e:7a:21:dd:dd:16:0b:06:fd:e4:4a:02:b1:
                    3a:57:23:62:c4:6d:e0:83:26:4e:47:53:db:23:20:
                    14:ca:58:f4:64:82:60:ac:d6:45:76:f3:d2:6c:47:
                    07:c0:f9:01:00:34:1e:1a:9a:d4:98:86:20:d2:b7:
                    2e:9b:58:04:f0:5f:3d:f5:91:a1:2b:b4:ea:03:25:
                    67:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:64:C2:12:6E:5E:BB:F3:CA:AD:74:80:CD:99:9C:8F:F0:C4:5B:4F
            X509v3 Authority Key Identifier:
                keyid:13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:80:a9:d7:c6:92:0b:1a:27:7b:30:ba:29:51:70:0a:0b:34:
         c3:bd:0c:e6:17:aa:3f:90:b3:a0:e2:a7:82:e4:b4:07:c7:61:
         f6:16:87:c8:69:8e:fd:5b:f3:c5:61:db:d7:93:0c:85:c4:eb:
         d0:a1:80:e9:58:26:ac:b7:34:26:e8:85:58:af:3a:3c:65:40:
         c6:08:cb:31:96:9b:89:4e:01:19:d5:2c:29:e8:1f:2e:77:ca:
         94:f1:d4:b7:38:f6:ff:02:30:ba:c4:5f:71:90:3e:35:9e:4d:
         dc:ef:4a:bd:d9:5d:df:d9:1c:e1:45:24:56:19:7a:9c:c5:80:
         e8:d6:e2:16:52:74:2a:53:6c:2c:be:83:f8:bd:69:29:de:17:
         25:65:ac:46:66:c2:a6:d8:fc:b7:f7:ca:a8:8d:5b:c9:19:d7:
         59:b0:2e:60:74:1f:81:70:07:2e:6d:1d:31:b4:4d:88:ce:9a:
         b0:64:ed:92:83:ec:28:27:39:e8:f7:28:b2:80:32:6c:e8:c9:
         7f:28:8f:57:5f:08:db:17:43:11:03:1f:36:61:41:98:cd:8a:
         d8:20:1a:e5:bf:b9:f8:21:06:cf:12:d8:c7:91:90:35:42:98:
         e6:b5:e8:17:be:be:95:c3:45:3a:9b:aa:01:6a:ac:8b:10:ec:
         27:3b:58:b7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOV/lwgha3C6PdGD86f1fxPgTQHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwREEwNkM5NTM3QjFERjY1NDRGNjI5MEE2MzhGODYz
NzU1REE3MzAeFw0yNjAxMDYxOTAxMzBaFw0yNzAxMDUxOTA2MzBaMDMxMTAvBgNV
BAMTKDFBNjRDMjEyNkU1RUJCRjNDQUFENzQ4MENEOTk5QzhGRjBDNDVCNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmkVzfpRfgLNFIqjOM8Lvh27s
L9WYV9mxmEBQvqqcAdEemEvPrqUWJPUbr1jrxZw+N60N5X3L+IR20RKcdDB5mgR1
bZA83iLovfePIccTmiVyfau1EcL0cnbve8vAZoq0Nn4OynhD/cagMcglb+zL5fkK
YGYzH4mGH6WWBp1JfU0pknqMeV4B/jyx6VkZpcGmyqvMRTS3HUx4vbuQGNFUc9SW
sxmz77uqcAoiIugbtobEIh6Yfnoh3d0WCwb95EoCsTpXI2LEbeCDJk5HU9sjIBTK
WPRkgmCs1kV289JsRwfA+QEANB4amtSYhiDSty6bWATwXz31kaErtOoDJWd5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGmTCEm5eu/PKrXSAzZmcj/DEW08wHwYDVR0j
BBgwFoAUEw2gbJU3sd9lRPYpCmOPhjdV2nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEF0YkFBMzhTVEI5WmFDTXRScEV5cEZOcVBxYkNLQzF5OVdZY3B4Zmpl
bmMvMS8xMzBEQTA2Qzk1MzdCMURGNjU0NEY2MjkwQTYzOEY4NjM3NTVEQTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMERBMDZDOTUzN0IxREY2
NTQ0RjYyOTBBNjM4Rjg2Mzc1NURBNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhBdGJBQTM4U1RCOVphQ010UnBFeXBGTnFQcWJDS0MxeTlXWWNweGZqZW5jLzEv
MzIzODMwMzQzYTM4NjIzMzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzczMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASLODANBgkqhkiG9w0BAQsFAAOCAQEAIoCp18aS
CxonezC6KVFwCgs0w70M5heqP5CzoOKnguS0B8dh9haHyGmO/VvzxWHb15MMhcTr
0KGA6VgmrLc0JuiFWK86PGVAxgjLMZabiU4BGdUsKegfLnfKlPHUtzj2/wIwusRf
cZA+NZ5N3O9Kvdld39kc4UUkVhl6nMWA6NbiFlJ0KlNsLL6D+L1pKd4XJWWsRmbC
ptj8t/fKqI1byRnXWbAuYHQfgXAHLm0dMbRNiM6asGTtkoPsKCc56PcosoAybOjJ
fyiPV18I2xdDEQMfNmFBmM2K2CAa5b+5+CEGzxLYx5GQNUKY5rXoF76+lcNFOpuq
AWqsixDsJztYtw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:33 2026 by rpki-client