This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa
File:                     323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier:          MTExD/BJVhtwUW9HRapy/wJptR4BkQBR6k3vM1cRBV4=
Subject key identifier:   89:06:DC:7C:03:85:FC:9A:4B:0D:D4:49:AF:55:CF:C1:20:D1:83:9D
Certificate issuer:       /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial:       0E0A0BB9039B2A98FB4A22E3B6C08BE4F938EAAB
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa
Signing time:             Tue 20 Jan 2026 19:29:01 +0000
ROA not before:           Tue 20 Jan 2026 19:24:01 +0000
ROA not after:            Tue 19 Jan 2027 19:29:01 +0000
asID:                     270285
IP address blocks:        2804:69b0:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0a:0b:b9:03:9b:2a:98:fb:4a:22:e3:b6:c0:8b:e4:f9:38:ea:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
        Validity
            Not Before: Jan 20 19:24:01 2026 GMT
            Not After : Jan 19 19:29:01 2027 GMT
        Subject: CN=8906DC7C0385FC9A4B0DD449AF55CFC120D1839D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:95:96:8c:50:9d:c5:09:85:75:27:c5:2d:
                    33:38:bc:38:fb:12:7f:e6:c4:fd:66:9c:66:73:0a:
                    b0:b8:64:17:11:cf:75:3b:94:17:60:88:90:94:d2:
                    db:19:87:c8:f2:7d:5b:71:70:e7:57:e0:1b:72:2d:
                    fd:51:63:64:45:34:8d:27:48:9f:df:5a:70:e5:e9:
                    44:c8:36:00:37:f8:f4:fb:23:c4:2f:bb:1d:2c:a8:
                    84:1c:c8:f8:93:14:d7:45:00:f6:03:75:67:98:5f:
                    d1:3e:c5:c3:d6:22:21:41:f4:77:f6:f5:0e:15:bd:
                    b8:57:10:c4:5a:c2:33:b3:c7:62:f9:8d:0a:d0:66:
                    e4:80:bb:c0:ac:07:ab:8c:25:45:c3:c3:3d:f6:a4:
                    12:22:dc:5e:3d:f0:52:84:e4:c0:c7:54:56:69:f4:
                    f1:f3:fa:f7:07:38:d5:e7:8e:2d:83:e9:e4:23:1c:
                    43:14:22:82:54:fd:59:18:ea:ef:a4:34:96:6e:1a:
                    79:da:b8:10:45:5b:0c:b6:7e:6b:06:49:9c:64:da:
                    a0:a0:47:46:ba:b3:35:01:fd:66:ed:63:7e:d0:4f:
                    3d:6f:7f:e6:fc:98:dd:e6:9e:da:cb:31:db:25:9b:
                    8e:26:f1:a4:76:1a:95:4c:82:60:6d:5f:90:76:22:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:06:DC:7C:03:85:FC:9A:4B:0D:D4:49:AF:55:CF:C1:20:D1:83:9D
            X509v3 Authority Key Identifier:
                keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b0:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:9b:cf:04:63:5d:96:84:62:58:a1:1e:b5:87:7b:44:e5:
         b3:6a:17:96:cd:dd:fe:29:f6:a8:05:41:60:b2:f2:9c:f2:b9:
         87:93:1e:b9:e7:8a:2d:b0:f2:ad:4d:3d:09:0a:c7:eb:52:7f:
         fc:66:b7:ab:20:88:40:3d:2f:e1:27:48:90:8b:7d:cd:79:87:
         2c:80:84:83:2d:e6:26:47:7a:b6:27:30:81:a0:2c:15:c7:cb:
         8c:93:90:54:bd:c5:db:3e:76:ca:16:43:34:8f:39:98:33:19:
         6f:48:07:0f:e8:a4:dd:cf:06:a5:5d:3d:64:85:73:0e:0d:8d:
         50:7a:c4:4a:02:61:6e:90:4b:79:af:96:a8:27:94:94:60:36:
         cd:81:80:e2:77:1a:4e:28:3b:96:de:af:a7:bc:07:ea:21:b2:
         3e:01:bc:6b:d5:92:d6:fe:0b:5a:e3:58:5e:72:56:38:5d:aa:
         da:21:9e:43:e8:22:54:53:05:eb:97:66:bd:60:43:a3:ae:76:
         bf:49:7b:23:c0:b0:d2:f5:dc:30:7c:de:ba:86:cc:47:a3:4c:
         ef:99:06:7f:97:39:1a:2b:ee:61:6c:8a:1c:5c:92:18:1e:e2:
         18:a1:b2:86:39:e1:e0:17:a9:85:0f:ef:ae:36:e8:6f:fe:3e:
         37:d4:79:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:27 2026 by rpki-client