This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/323830343a353864303a3a2f33322d3336203d3e20323638313531.roa
File:                     323830343a353864303a3a2f33322d3336203d3e20323638313531.roa (raw, json)
Hash identifier:          GqMm8NNFLr5JuLBOAeiL74wqbaAr3JHCNftTnAcvSZ0=
Subject key identifier:   55:C8:F4:30:37:B3:F3:D6:1D:4D:FE:97:2B:28:56:D1:C3:9F:38:38
Certificate issuer:       /CN=AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D
Certificate serial:       59EA0B3E4D8D563317789C78E795C6E9B256FD3A
Authority key identifier: AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/323830343a353864303a3a2f33322d3336203d3e20323638313531.roa
Signing time:             Thu 15 Jan 2026 22:26:25 +0000
ROA not before:           Thu 15 Jan 2026 22:21:25 +0000
ROA not after:            Thu 14 Jan 2027 22:26:25 +0000
asID:                     268151
IP address blocks:        2804:58d0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.crl
                          rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ea:0b:3e:4d:8d:56:33:17:78:9c:78:e7:95:c6:e9:b2:56:fd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D
        Validity
            Not Before: Jan 15 22:21:25 2026 GMT
            Not After : Jan 14 22:26:25 2027 GMT
        Subject: CN=55C8F43037B3F3D61D4DFE972B2856D1C39F3838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:e3:6c:32:e2:bc:9a:7b:7b:2f:42:f6:53:
                    21:65:94:ee:cf:85:67:36:fa:bd:c4:c1:a7:a5:78:
                    3e:89:5f:f2:0d:53:7e:4b:65:10:c5:f0:88:8d:eb:
                    f6:b1:fd:e9:0c:f4:ee:02:33:18:c9:83:67:d0:b1:
                    2d:5b:53:1b:22:11:6c:d0:8c:ca:8a:3f:ac:9a:02:
                    f4:76:4f:07:87:e3:24:06:be:02:23:60:56:1e:f2:
                    83:2f:10:73:bd:64:e3:a1:a0:ca:20:a6:a7:ff:f9:
                    00:7d:5e:55:f0:83:03:ab:d2:ad:b9:d9:9a:ef:4f:
                    fa:5d:84:bf:04:a4:ea:29:b6:79:d2:30:89:52:bb:
                    0f:59:3e:85:04:a9:64:0c:8d:18:c0:b1:19:8f:cb:
                    86:89:15:43:d0:a5:18:f3:4f:45:af:9c:f4:9c:a2:
                    d3:3e:b9:2f:c8:3e:10:f8:71:10:90:16:f5:f9:2e:
                    5f:1d:49:7c:5d:7a:61:0a:4b:4e:ce:df:cb:6f:8f:
                    46:f0:4a:0e:6a:fd:cf:c0:51:a0:5e:ce:b4:77:53:
                    48:9c:a3:02:67:41:39:51:15:3a:61:23:fa:0e:51:
                    b0:78:11:98:6c:93:94:06:c1:ff:c7:24:e0:9d:51:
                    5d:eb:74:f3:0d:0e:3c:53:11:fa:4b:23:74:77:99:
                    26:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:F4:30:37:B3:F3:D6:1D:4D:FE:97:2B:28:56:D1:C3:9F:38:38
            X509v3 Authority Key Identifier:
                keyid:AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/323830343a353864303a3a2f33322d3336203d3e20323638313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:95:4f:dd:92:0c:c8:bc:10:f5:8d:77:9c:dd:4c:f2:45:c0:
         d3:c2:db:7a:57:96:17:4a:f9:91:13:50:39:57:f5:ee:fa:5c:
         e1:11:ae:da:34:2b:5c:4c:a2:d6:d0:c2:87:24:2a:ca:36:67:
         fd:89:d1:0f:b7:9f:c7:b3:48:5d:ca:36:68:f7:00:fd:76:cb:
         f7:38:c9:15:88:d7:5f:1f:eb:01:b2:65:26:2b:6d:ed:12:8b:
         e1:cf:47:0b:93:e1:d2:5c:6a:ed:6e:05:8f:c1:d0:dc:65:d3:
         f2:a9:6c:24:8a:6f:ac:b8:59:92:85:45:aa:a7:fa:d8:01:b0:
         d0:0a:db:54:1c:c8:9c:36:c1:dc:93:61:0d:7b:2a:15:e5:b1:
         62:e5:3b:fa:22:10:1a:48:c9:b7:1b:33:03:fb:7b:68:74:fd:
         72:00:0d:d8:51:ce:d2:ab:34:16:37:e1:48:2e:17:37:d3:5c:
         99:42:12:e8:fd:66:1f:ab:7b:15:bc:c0:58:95:37:29:f9:85:
         0f:b1:a5:b3:c6:c4:7b:c1:28:c5:77:3f:52:95:4e:dd:54:83:
         a2:1d:8a:f8:91:c4:16:0f:be:0f:a5:01:7d:7b:2d:51:7d:e8:
         de:53:73:5f:20:22:26:c5:56:91:c4:ac:2f:48:05:3b:4f:03:
         5f:79:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:57:37 2026 by rpki-client