This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a33303a3a2f34342d3434203d3e20323730323835.roa
File:                     323830343a363962303a33303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier:          0ZctkceEekamoBKIRXYluwoGaYsavgLr9pCbaGMw7o0=
Subject key identifier:   C9:FD:45:BA:D9:06:27:B1:12:89:1D:B7:6A:94:31:7F:D0:FD:71:01
Certificate issuer:       /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial:       55A48F65A44EEB0C35F6EFB86477ECD34552E77A
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a33303a3a2f34342d3434203d3e20323730323835.roa
Signing time:             Tue 20 Jan 2026 19:28:59 +0000
ROA not before:           Tue 20 Jan 2026 19:23:59 +0000
ROA not after:            Tue 19 Jan 2027 19:28:59 +0000
asID:                     270285
IP address blocks:        2804:69b0:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a4:8f:65:a4:4e:eb:0c:35:f6:ef:b8:64:77:ec:d3:45:52:e7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
        Validity
            Not Before: Jan 20 19:23:59 2026 GMT
            Not After : Jan 19 19:28:59 2027 GMT
        Subject: CN=C9FD45BAD90627B112891DB76A94317FD0FD7101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:4e:31:50:2b:0c:db:a3:93:4a:ee:28:5a:
                    ae:b0:c5:63:7b:49:ce:3e:74:e8:1e:d4:1b:4f:3a:
                    1e:85:cb:17:3a:de:fd:58:14:c3:14:9a:51:5f:4b:
                    a8:15:a7:89:1a:f2:7f:ce:42:b9:d9:21:56:0e:35:
                    71:53:70:6b:6a:cf:53:39:9e:74:4f:8c:71:90:7b:
                    f9:e0:76:e7:65:13:44:32:89:24:bd:8d:00:35:7c:
                    2d:11:c7:56:fe:5c:be:dd:d2:df:3c:06:6b:58:14:
                    78:86:47:a9:c0:3c:b6:d0:07:dd:0b:af:96:0c:a2:
                    57:ce:c1:f5:34:54:09:ee:39:73:3c:77:72:1a:72:
                    8d:1f:c8:34:69:59:b6:4b:1c:bc:52:b1:7e:73:e2:
                    74:cd:03:6a:fe:6f:90:d2:f3:36:a3:95:ac:1b:59:
                    47:94:d4:8a:63:cd:c1:92:9b:b6:07:42:13:e7:35:
                    15:63:2e:0b:8d:02:6c:58:2a:fc:7e:66:08:42:87:
                    98:b1:d8:0c:80:ca:05:b6:59:65:7c:6b:18:97:7e:
                    ec:f7:71:f1:1d:58:20:46:d7:2c:ec:e6:e1:c0:f6:
                    2f:0e:84:09:b9:3f:ce:25:11:fc:c7:ec:dd:92:b1:
                    52:bf:b0:13:c4:47:9e:3c:19:4c:13:31:f3:c6:05:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FD:45:BA:D9:06:27:B1:12:89:1D:B7:6A:94:31:7F:D0:FD:71:01
            X509v3 Authority Key Identifier:
                keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a33303a3a2f34342d3434203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b0:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:f9:4a:87:af:0e:07:ee:b6:af:45:63:4d:a5:7f:1d:e9:fa:
         b4:3d:92:c5:e7:3c:23:e5:9f:8c:a8:c9:6d:a9:37:07:fe:e3:
         cb:f9:e8:95:77:d8:64:8e:d0:49:34:92:7a:3c:9f:10:13:78:
         6d:b8:4f:7b:96:c8:f3:9b:9c:e7:84:18:4e:fe:f0:71:6d:e8:
         b6:c8:0f:4c:88:da:0d:2c:6d:b5:95:6a:5e:13:e1:53:2a:b5:
         e7:c2:bc:fa:10:42:de:94:98:82:1c:14:b6:2c:22:9d:8c:8c:
         d8:3e:5c:8d:a3:63:40:5d:14:6c:2d:48:45:ca:b6:9f:90:36:
         eb:b5:ca:7b:d7:18:a6:27:0e:82:fe:e4:fa:e8:6d:68:82:70:
         99:90:92:16:20:e3:c2:40:29:ab:2a:7b:17:6f:b2:fd:17:5b:
         e5:52:94:df:66:75:72:85:c1:3b:b7:f3:37:3c:3c:41:0b:6d:
         47:e5:e7:e0:dc:46:1d:bc:46:a1:e2:cb:01:fa:0a:e2:ae:ab:
         60:4f:d8:8c:48:b0:d6:ba:41:d7:ae:11:61:a0:1c:63:0b:4e:
         5d:40:45:0a:cc:8c:26:de:0e:6c:77:13:72:1a:47:d5:ea:74:
         79:d0:7e:ea:1d:ff:9a:00:47:c7:88:1d:64:e7:65:b5:54:ee:
         d1:66:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:25 2026 by rpki-client