This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a32303a3a2f34342d3434203d3e20323730323835.roa
File:                     323830343a363962303a32303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier:          Vjrx7S3N6W3Fi8XATVQfcKy0bB57hVQ0LE4UaVK2ifY=
Subject key identifier:   7A:7F:EE:1E:63:B4:58:72:77:31:54:F4:41:52:E7:58:00:2C:70:AB
Certificate issuer:       /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial:       7ADE63A907B49CCFB84FAF05E309D7F0A56D5F0A
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a32303a3a2f34342d3434203d3e20323730323835.roa
Signing time:             Tue 20 Jan 2026 19:28:57 +0000
ROA not before:           Tue 20 Jan 2026 19:23:57 +0000
ROA not after:            Tue 19 Jan 2027 19:28:57 +0000
asID:                     270285
IP address blocks:        2804:69b0:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:de:63:a9:07:b4:9c:cf:b8:4f:af:05:e3:09:d7:f0:a5:6d:5f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
        Validity
            Not Before: Jan 20 19:23:57 2026 GMT
            Not After : Jan 19 19:28:57 2027 GMT
        Subject: CN=7A7FEE1E63B45872773154F44152E758002C70AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:48:67:7f:ec:0f:36:99:67:34:84:49:eb:
                    16:52:ab:4e:a3:ca:4b:f6:2f:6b:70:2f:cb:f6:e9:
                    e7:c6:97:11:40:5a:e1:82:13:4b:a8:25:d0:60:32:
                    bb:dd:5b:b0:b8:01:55:5a:f0:27:0a:d9:35:5b:51:
                    29:99:01:81:e7:75:bc:1d:3d:5a:a6:e4:7b:e3:e9:
                    da:75:02:dc:dc:50:91:10:d7:2c:3a:8b:7b:ef:e7:
                    8b:bd:9f:b7:72:d4:f2:fa:47:e6:9f:4a:b8:ef:50:
                    27:71:c3:5b:3d:2c:9b:05:d2:83:7e:30:6c:f6:da:
                    2f:8a:03:94:13:4b:86:03:e5:51:4b:8b:93:67:45:
                    fc:d2:66:bf:10:6a:37:98:17:f0:81:63:71:31:dc:
                    7c:77:ca:02:2b:57:3b:ba:7f:53:9a:c7:46:ef:2a:
                    a6:bd:63:51:2f:ac:16:87:43:6c:a2:28:b1:1c:3d:
                    40:79:02:da:84:e9:2d:42:3a:c6:6e:2f:26:e7:e9:
                    28:2d:72:10:be:49:f0:82:cc:bb:32:97:23:77:d8:
                    a8:00:c5:be:03:de:7f:ca:61:bb:9e:e3:9a:3c:ce:
                    2c:5c:33:04:24:28:4c:e3:5d:42:5b:d8:16:aa:ce:
                    51:81:ec:76:ee:29:0a:8b:ce:7d:1d:1d:29:81:64:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7F:EE:1E:63:B4:58:72:77:31:54:F4:41:52:E7:58:00:2C:70:AB
            X509v3 Authority Key Identifier:
                keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a32303a3a2f34342d3434203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b0:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:d0:1b:91:54:a0:22:46:64:71:74:18:44:aa:b6:09:a1:00:
         18:ec:78:8f:af:94:f6:5c:2d:3a:e3:e7:ca:c8:15:ec:d8:98:
         59:a5:5f:fb:9c:f8:eb:5b:cb:42:06:01:73:6a:1a:42:05:53:
         d4:5b:a2:e0:c2:7b:5a:45:98:0e:e2:58:14:39:65:c8:48:c2:
         41:a0:96:57:68:e9:54:32:22:46:fa:1a:d4:ba:fb:6b:69:cd:
         5b:c7:b9:7f:14:11:f4:50:31:c1:ee:70:3a:94:c8:42:7b:da:
         7a:f2:b1:83:44:2d:d6:e3:a3:a9:c9:a0:49:22:30:fd:a1:4b:
         6e:fa:d6:32:e0:76:87:fd:d2:3e:a0:54:c5:b2:13:92:58:b2:
         1a:e4:31:bf:65:d5:7a:24:f6:97:0b:a3:ce:b7:0f:fc:88:70:
         3b:4a:df:1a:23:46:05:e2:72:33:db:7b:d9:a8:33:3d:03:5f:
         78:4d:0a:25:d1:19:48:23:0a:98:df:98:66:4c:6f:c3:30:45:
         63:85:76:a8:d8:7f:16:fb:3c:8f:46:65:49:e0:9d:13:5b:a4:
         97:57:ca:30:e0:be:44:7d:59:54:ca:da:8c:8c:c7:da:87:d9:
         49:b2:a3:80:21:5a:3c:61:2a:d1:25:8f:b6:48:19:3b:b2:0a:
         58:70:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:26 2026 by rpki-client