This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/323830343a313439383a3a2f33322d3333203d3e20323633333339.roa
File:                     323830343a313439383a3a2f33322d3333203d3e20323633333339.roa (raw, json)
Hash identifier:          lrt9m9KHUbukNCn8dOZrytK++O1RZkIyXXUxJyBraJg=
Subject key identifier:   5E:61:96:78:0C:92:0D:D0:32:EB:B0:9E:90:0B:69:70:59:ED:D1:D5
Certificate issuer:       /CN=335754947982AA4BA9BAB5FBEDF022101E9E7C37
Certificate serial:       77FDF7B5F6D17F38C06C2DB50B7F98B47CEB6826
Authority key identifier: 33:57:54:94:79:82:AA:4B:A9:BA:B5:FB:ED:F0:22:10:1E:9E:7C:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/335754947982AA4BA9BAB5FBEDF022101E9E7C37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/323830343a313439383a3a2f33322d3333203d3e20323633333339.roa
Signing time:             Wed 24 Dec 2025 19:59:21 +0000
ROA not before:           Wed 24 Dec 2025 19:54:21 +0000
ROA not after:            Wed 23 Dec 2026 19:59:21 +0000
asID:                     263339
IP address blocks:        2804:1498::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.crl
                          rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/335754947982AA4BA9BAB5FBEDF022101E9E7C37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fd:f7:b5:f6:d1:7f:38:c0:6c:2d:b5:0b:7f:98:b4:7c:eb:68:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335754947982AA4BA9BAB5FBEDF022101E9E7C37
        Validity
            Not Before: Dec 24 19:54:21 2025 GMT
            Not After : Dec 23 19:59:21 2026 GMT
        Subject: CN=5E6196780C920DD032EBB09E900B697059EDD1D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:ef:19:63:7c:ea:91:f9:f4:1f:ac:81:e5:
                    05:77:fe:42:03:f1:b1:2f:11:78:e3:e8:29:75:62:
                    f3:7c:29:80:5d:7b:85:c3:e3:c6:84:a0:a3:a0:93:
                    f6:9a:d0:14:85:76:d0:3e:08:b9:7d:c7:ef:a5:4e:
                    b6:73:b4:07:b4:f1:21:0c:97:39:8b:92:3f:04:97:
                    b0:c9:59:7c:5d:c9:57:39:80:5f:c4:dd:66:6e:c0:
                    86:6b:dd:c8:17:80:37:8e:14:e6:b0:40:25:f0:bc:
                    f8:59:ce:b6:1f:80:2a:4f:85:54:79:32:a0:92:71:
                    25:91:f0:c6:97:1e:53:3b:d4:9a:83:2c:fb:61:7b:
                    9c:85:a1:11:b5:e3:dd:9f:c4:f1:93:ee:aa:e2:ab:
                    81:f2:96:c3:34:1a:14:0d:2d:f6:89:38:fd:91:51:
                    83:28:c5:d6:26:9f:69:e0:7a:c1:1d:37:cc:b6:15:
                    48:5f:0b:43:c5:da:8e:04:9d:e5:1b:6c:22:2f:37:
                    22:0f:88:cb:15:96:3f:97:83:be:4b:89:1a:19:1f:
                    44:2f:0b:fd:2f:ba:aa:12:f8:17:3a:71:e5:19:d9:
                    5e:4c:0c:bb:e5:fb:df:72:ab:6b:10:1d:0b:b4:2c:
                    e5:07:6b:18:2b:3b:2d:12:6a:3e:45:87:9e:80:99:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:61:96:78:0C:92:0D:D0:32:EB:B0:9E:90:0B:69:70:59:ED:D1:D5
            X509v3 Authority Key Identifier:
                keyid:33:57:54:94:79:82:AA:4B:A9:BA:B5:FB:ED:F0:22:10:1E:9E:7C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/335754947982AA4BA9BAB5FBEDF022101E9E7C37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/323830343a313439383a3a2f33322d3333203d3e20323633333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1498::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:31:85:29:58:07:30:53:a8:d1:ba:fe:91:02:16:98:7a:86:
         5f:0a:eb:99:da:82:bd:f6:36:0b:4e:61:58:60:0e:99:72:02:
         27:8e:06:6d:4a:a8:56:df:6a:1e:9e:f2:55:d0:aa:84:0f:bb:
         c1:d8:95:c3:5b:c0:81:84:65:7d:77:b6:9d:7f:d8:fe:0b:2c:
         1b:c9:65:b3:35:f1:68:5c:16:f4:90:e1:d3:f2:73:9a:15:18:
         3f:71:d9:35:59:06:26:0a:e4:dd:e6:8d:59:e3:14:7b:14:ca:
         f4:d6:7f:4b:19:fc:f7:c6:7a:4f:5d:cd:c9:f9:cf:1d:51:19:
         6c:3c:ff:6b:55:93:3b:d0:70:13:48:0f:72:f7:30:8b:dc:10:
         1b:a1:3c:9c:05:18:56:3c:91:ae:0a:05:21:fb:99:ba:b6:a9:
         0a:cf:13:bd:34:e1:f3:c5:87:9c:5d:21:37:94:4b:d4:86:18:
         58:ea:43:c9:8b:48:40:29:5a:cb:05:ab:37:37:e4:e9:35:b9:
         3b:ce:20:af:29:df:9a:03:35:a3:8f:ee:b7:27:9c:f9:d0:b1:
         d2:fd:97:fe:fa:bd:fe:e4:e9:6a:e0:90:9e:df:ef:fb:32:59:
         7c:16:79:68:e4:60:df:47:a1:34:85:da:13:07:8d:ea:30:e5:
         b1:85:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:15 2026 by rpki-client