This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa
File:                     323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier:          lcyUTKnUq4/c3rBNIzJiHxnDBsix0hkswaOQMhAgvN4=
Subject key identifier:   12:AE:06:0B:68:5E:26:FA:8C:3A:17:C0:3E:34:17:75:DE:6C:A3:DD
Certificate issuer:       /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial:       3725A51E3AB9C65005D0E798C9B40D1E10F953A2
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa
Signing time:             Tue 20 Jan 2026 19:28:18 +0000
ROA not before:           Tue 20 Jan 2026 19:23:18 +0000
ROA not after:            Tue 19 Jan 2027 19:28:18 +0000
asID:                     270285
IP address blocks:        2804:69b0:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:25:a5:1e:3a:b9:c6:50:05:d0:e7:98:c9:b4:0d:1e:10:f9:53:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
        Validity
            Not Before: Jan 20 19:23:18 2026 GMT
            Not After : Jan 19 19:28:18 2027 GMT
        Subject: CN=12AE060B685E26FA8C3A17C03E341775DE6CA3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:36:e6:71:1c:02:9d:13:f1:86:38:e2:c6:
                    a6:14:00:60:46:d1:72:d3:80:f6:e5:1b:a9:f7:a7:
                    f5:df:81:ab:95:be:ae:e3:37:02:27:ea:24:dc:5e:
                    12:56:66:8c:b9:ba:3d:bb:9b:96:9f:b0:bf:f0:d5:
                    6f:96:a1:f7:d4:80:92:e4:cb:a0:98:75:c9:5d:96:
                    31:51:c4:95:30:56:c8:ec:e0:53:73:08:32:e2:41:
                    14:68:dc:35:e3:52:d5:39:fc:57:eb:ce:3f:f4:9f:
                    07:9d:c9:70:f4:de:41:e4:93:79:7b:79:78:67:d1:
                    4f:74:be:ff:b8:a8:32:66:3e:cf:07:49:c5:61:d0:
                    d7:e9:66:95:92:94:62:ad:82:ec:8b:45:9f:08:60:
                    e5:80:61:79:bf:b9:60:ab:a0:ee:0a:7f:10:b5:db:
                    04:22:52:29:50:dd:da:5a:02:9a:14:99:c2:f3:56:
                    cb:ed:31:29:ca:e2:fc:6a:ce:6a:ac:31:45:ca:4d:
                    2c:f0:ad:71:9c:0c:c2:ee:b6:f0:d5:70:4f:34:5c:
                    c6:8a:f1:dc:36:92:40:43:11:91:78:02:e2:0d:9c:
                    18:db:9d:6e:e0:4d:82:0d:63:e0:93:c2:0a:6f:97:
                    f4:28:b5:82:36:eb:e3:2b:1a:4b:1a:6a:c0:65:5d:
                    af:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AE:06:0B:68:5E:26:FA:8C:3A:17:C0:3E:34:17:75:DE:6C:A3:DD
            X509v3 Authority Key Identifier:
                keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b0:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         be:6a:08:8b:d8:c1:0c:7c:6c:e9:e2:ae:d4:cd:ae:1c:2c:fc:
         ba:8d:0b:69:49:fe:29:2e:79:e8:ce:52:70:3c:cd:94:49:30:
         bd:37:58:a2:89:c1:98:eb:ae:6a:98:96:44:09:23:ff:25:c4:
         5f:c8:4c:a0:b5:47:9a:66:a6:d8:c0:21:28:65:c6:7e:21:6d:
         b7:03:e9:72:34:81:ea:67:2f:4a:6e:f5:25:24:e4:61:b2:98:
         b6:15:dc:b3:5f:e5:82:4b:1f:b8:81:4d:17:0a:a3:63:9e:78:
         dd:ae:ce:47:c2:8b:0c:b6:da:79:d3:b4:47:b1:80:6e:6d:97:
         2a:69:b9:28:8d:85:94:12:72:e2:74:16:ee:9f:70:95:45:d9:
         9e:ab:20:36:2c:92:72:ab:b4:06:be:b7:80:a1:b5:3d:9e:ec:
         21:a4:03:78:bb:2f:5a:20:9a:6e:f6:be:04:38:9d:b9:44:fc:
         a4:6b:12:1e:fd:b7:ff:b1:b5:ac:c6:6c:71:4f:dc:a8:4b:53:
         e6:7b:27:d4:eb:a0:e3:04:8d:86:ec:50:d7:a7:f8:8b:49:48:
         f5:14:0d:21:f2:fb:34:68:72:ed:88:4b:d6:80:5f:a2:09:c5:
         4a:9f:1a:03:91:26:70:d1:2a:f6:3a:24:55:24:75:1d:5f:4f:
         04:59:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:25 2026 by rpki-client