This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a3a2f33332d3333203d3e20323633323935.roa
File:                     323830343a313639383a3a2f33332d3333203d3e20323633323935.roa (raw, json)
Hash identifier:          YN/LQSBe4sYggTqStIQqeHobKk+twFAz0ol2Xzc/GQU=
Subject key identifier:   3D:58:38:32:13:F0:FD:B3:72:1B:09:58:F3:8A:FA:3C:CF:F8:DA:08
Certificate issuer:       /CN=613CBF79379A94E8C375A67BDA9A9B4B955F4EAA
Certificate serial:       57215D2CEABCB11DD5F5BE9A55FE602BCDD5956F
Authority key identifier: 61:3C:BF:79:37:9A:94:E8:C3:75:A6:7B:DA:9A:9B:4B:95:5F:4E:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a3a2f33332d3333203d3e20323633323935.roa
Signing time:             Fri 02 Jan 2026 19:42:32 +0000
ROA not before:           Fri 02 Jan 2026 19:37:32 +0000
ROA not after:            Fri 01 Jan 2027 19:42:32 +0000
asID:                     263295
IP address blocks:        2804:1698::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.crl
                          rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 09:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:21:5d:2c:ea:bc:b1:1d:d5:f5:be:9a:55:fe:60:2b:cd:d5:95:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613CBF79379A94E8C375A67BDA9A9B4B955F4EAA
        Validity
            Not Before: Jan  2 19:37:32 2026 GMT
            Not After : Jan  1 19:42:32 2027 GMT
        Subject: CN=3D58383213F0FDB3721B0958F38AFA3CCFF8DA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:64:4d:9f:2b:e7:42:83:65:3f:c9:a8:a7:
                    46:13:16:69:d7:aa:cf:f5:a8:af:3d:96:9a:09:37:
                    9d:cd:5d:3a:a8:6f:c6:d6:91:1d:d5:72:b1:27:e5:
                    74:6b:b1:97:50:ac:eb:89:36:aa:3d:e8:2f:36:26:
                    d3:f0:2b:6f:2a:9f:56:3a:13:3b:e9:36:1a:d7:6c:
                    63:b4:f6:da:6e:3d:f6:4f:f6:35:ac:ee:6e:04:6a:
                    46:c8:ca:c4:10:13:46:67:3d:be:dc:7d:b4:3d:2d:
                    0f:d5:09:8f:e4:0f:1c:bf:1e:d7:30:eb:06:ec:4b:
                    c2:80:97:bc:b6:8b:59:28:e2:e0:2f:23:78:9a:9a:
                    ff:86:6b:87:7d:67:a4:23:31:b4:7b:4d:32:4a:14:
                    2f:e8:86:2d:21:16:55:8c:ea:2c:1a:ef:fc:c6:71:
                    eb:1e:f7:e4:8c:a1:43:6d:bb:b0:bf:bf:9a:31:30:
                    76:f0:2d:6f:63:c3:d2:88:b4:45:dc:24:8b:8f:26:
                    09:ff:90:17:1c:a4:86:ad:20:ee:2b:3e:08:71:60:
                    1b:4f:e2:95:68:94:72:96:9b:b7:19:c0:49:f1:6c:
                    b5:9f:5e:2d:36:e9:31:b5:83:3a:6d:a6:ce:20:e6:
                    df:2b:9d:0a:3b:99:07:34:f9:80:77:80:93:92:bf:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:58:38:32:13:F0:FD:B3:72:1B:09:58:F3:8A:FA:3C:CF:F8:DA:08
            X509v3 Authority Key Identifier:
                keyid:61:3C:BF:79:37:9A:94:E8:C3:75:A6:7B:DA:9A:9B:4B:95:5F:4E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613CBF79379A94E8C375A67BDA9A9B4B955F4EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a3a2f33332d3333203d3e20323633323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1698::/33

    Signature Algorithm: sha256WithRSAEncryption
         cf:96:4c:a1:97:f0:9f:e4:8c:d3:0f:88:a4:8e:47:61:7a:8f:
         c8:d1:c6:b9:4d:a0:20:9f:29:0f:60:ea:32:79:bc:6f:d4:b3:
         62:b4:6f:9d:9e:11:a9:5a:d9:4b:99:f9:92:f7:74:ee:87:26:
         9e:df:a5:bb:85:63:ec:03:a7:7f:03:e5:c0:9e:2d:6c:37:30:
         36:04:0c:a6:7d:43:87:d9:a0:a6:2c:ca:11:27:2d:b2:2d:8f:
         fc:3c:92:81:8e:bc:f9:0a:ae:fe:07:bb:22:56:89:a6:96:93:
         16:b9:36:c8:d1:cd:42:7b:de:02:ad:f8:15:16:bf:36:33:a6:
         c5:49:6b:eb:dd:19:e9:03:44:de:cd:04:7d:fb:3b:73:a2:af:
         5f:4e:6b:33:ef:ed:2a:7f:40:74:24:5b:68:3f:dc:88:ca:6e:
         27:e4:e2:6c:7c:78:27:ee:50:1d:89:94:2a:70:3a:06:e9:67:
         28:24:b5:b4:73:5c:b5:07:d3:a3:37:72:de:fa:ed:dd:01:ba:
         9b:77:24:0a:ea:3e:1f:cc:9a:4b:ae:19:f0:ce:f8:57:30:bd:
         b4:5d:00:d8:ba:8f:2f:2d:41:c3:90:0d:73:0c:95:77:13:e3:
         a7:23:82:b3:b9:a9:2c:95:a0:f3:da:ad:c6:4f:07:8e:0b:e5:
         13:c5:7c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:58:19 2026 by rpki-client