This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a3a2f33322d3332203d3e20323730323835.roa
File:                     323830343a363962303a3a2f33322d3332203d3e20323730323835.roa (raw, json)
Hash identifier:          U8r1mfEEatyxG7rKdn1e2cocQ8VzF68j2qcJtu1o9IA=
Subject key identifier:   E8:F4:53:5F:F2:04:82:E2:3A:C7:1B:8D:9B:6F:B2:A1:66:F4:66:E1
Certificate issuer:       /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial:       2930560B24BEEF6AF62F15D62CF7492AE4C28458
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a3a2f33322d3332203d3e20323730323835.roa
Signing time:             Tue 20 Jan 2026 19:28:03 +0000
ROA not before:           Tue 20 Jan 2026 19:23:03 +0000
ROA not after:            Tue 19 Jan 2027 19:28:03 +0000
asID:                     270285
IP address blocks:        2804:69b0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:30:56:0b:24:be:ef:6a:f6:2f:15:d6:2c:f7:49:2a:e4:c2:84:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
        Validity
            Not Before: Jan 20 19:23:03 2026 GMT
            Not After : Jan 19 19:28:03 2027 GMT
        Subject: CN=E8F4535FF20482E23AC71B8D9B6FB2A166F466E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:16:ef:cb:97:cf:29:70:4e:95:c2:b0:2a:7d:
                    2a:0b:c8:85:db:3d:da:86:3e:9e:f1:c5:0d:0b:e3:
                    0a:5c:50:5c:a2:c4:e6:95:91:bc:ff:8d:90:fb:4e:
                    69:05:de:0c:be:21:53:dd:14:67:a0:05:80:b8:ab:
                    d5:9d:d1:9a:be:40:c6:42:e1:ff:99:b0:14:29:14:
                    e5:bb:37:3a:3d:45:08:24:0b:98:ef:cc:da:dc:90:
                    3c:ba:43:ce:b7:04:40:db:d3:11:67:7c:7d:ff:68:
                    90:81:1b:ff:a0:ff:a1:4c:e2:2b:21:02:4e:23:fe:
                    e5:46:21:f9:b5:32:16:07:9d:e0:a8:27:03:f6:ca:
                    2c:f0:d6:1e:fb:98:55:4b:95:09:8c:88:76:33:4e:
                    61:2c:72:0e:7e:6f:08:bb:e3:e9:d5:1d:bd:f0:d9:
                    73:de:36:c1:15:12:da:37:b0:3a:f8:a1:44:f4:2c:
                    ea:5d:29:ae:c8:7a:ec:7b:4c:7e:40:5e:87:dc:25:
                    1c:8f:c9:1f:46:c9:5f:ae:33:23:53:8e:0d:4d:28:
                    41:1f:4d:db:29:e4:c5:2b:65:28:ce:8a:32:eb:a9:
                    7d:e6:f1:c0:20:36:05:b5:b8:c0:09:d4:94:f2:98:
                    8b:83:d2:8e:8b:a2:b2:28:90:84:ca:eb:95:a9:5e:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:53:5F:F2:04:82:E2:3A:C7:1B:8D:9B:6F:B2:A1:66:F4:66:E1
            X509v3 Authority Key Identifier:
                keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a3a2f33322d3332203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:77:d4:da:bd:2e:70:b1:3c:c1:b0:dc:e6:d2:25:ff:b3:38:
         aa:5b:06:75:e4:4b:f7:95:09:90:bc:32:d7:4b:65:75:ef:9f:
         55:36:77:94:a9:ff:4e:cc:e9:1c:79:a2:ef:81:4f:30:75:a3:
         37:79:d2:fb:9e:02:9e:cc:35:b2:f0:2a:37:68:e5:28:c3:f1:
         3a:ff:b3:87:9e:5c:29:20:98:35:51:be:1c:ea:34:b4:a7:f5:
         c1:85:98:9b:38:36:c7:fb:2c:6e:55:fc:10:bf:25:05:88:89:
         15:fd:bb:39:65:e8:8e:d5:d2:40:18:0c:8d:01:bc:d2:57:d1:
         df:80:df:02:97:cc:2a:3f:57:b7:ff:27:08:96:7d:42:8a:f5:
         6b:89:28:a4:e4:ec:ff:d1:95:b5:09:45:fa:1e:6e:12:9c:40:
         f1:23:b1:8e:76:cf:75:6e:b9:42:e0:1b:37:82:b2:c8:56:66:
         cc:ba:81:78:20:45:e1:db:a7:ff:9a:10:a1:e9:e3:56:c8:cc:
         d5:ee:e1:bb:e2:b4:15:42:91:2d:41:fe:e8:7d:31:74:1d:35:
         8d:aa:89:8c:f2:ef:54:aa:8f:cf:15:eb:34:db:a1:1f:f5:7c:
         bc:a1:69:18:6d:ac:b5:95:d6:8a:87:2a:35:d4:7f:d9:d3:bd:
         1f:12:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:26 2026 by rpki-client