This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33322d3333203d3e20323732353333.roa
File:                     323830343a383261633a3a2f33322d3333203d3e20323732353333.roa (raw, json)
Hash identifier:          7AAXzHy5OzAAUVFEDUOj7t4Wwxs8/i0q7wVzLnRflek=
Subject key identifier:   CF:BA:91:EC:42:90:23:26:08:37:D3:EE:14:6D:F3:DE:07:11:81:64
Certificate issuer:       /CN=589266404FC4F49C44EDD95659918140330CBF03
Certificate serial:       15CA702ED26C99B7902BCDD0E905D70BE4689AC3
Authority key identifier: 58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33322d3333203d3e20323732353333.roa
Signing time:             Thu 22 Jan 2026 13:35:40 +0000
ROA not before:           Thu 22 Jan 2026 13:30:40 +0000
ROA not after:            Thu 21 Jan 2027 13:35:40 +0000
asID:                     272533
IP address blocks:        2804:82ac::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl
                          rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ca:70:2e:d2:6c:99:b7:90:2b:cd:d0:e9:05:d7:0b:e4:68:9a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589266404FC4F49C44EDD95659918140330CBF03
        Validity
            Not Before: Jan 22 13:30:40 2026 GMT
            Not After : Jan 21 13:35:40 2027 GMT
        Subject: CN=CFBA91EC429023260837D3EE146DF3DE07118164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:2c:59:e4:5b:69:12:df:9d:7a:bf:1f:e6:
                    6f:ba:0e:89:a6:cf:0b:39:47:3c:7e:25:d6:dc:eb:
                    bb:42:fa:37:82:81:5e:14:41:42:33:98:a6:69:db:
                    91:b6:9c:04:26:d0:34:2e:fc:87:9d:29:95:85:b6:
                    0a:5a:97:07:51:8b:17:fc:c7:1c:23:d6:57:96:0d:
                    af:71:e9:3c:fd:dc:81:fd:f4:de:58:96:0b:af:71:
                    85:ce:29:61:4c:16:87:13:e7:42:cf:ed:d4:51:52:
                    c7:b5:a2:f7:79:55:05:89:04:67:e3:1a:79:a7:2c:
                    b7:0b:4c:3e:15:69:6b:9c:5e:02:31:3f:cf:73:7c:
                    e1:2a:c4:e3:3c:ba:ea:cb:ca:bf:6d:0f:fb:bb:f4:
                    cd:34:8d:67:6c:9f:d5:70:fc:b5:29:12:58:98:55:
                    be:0c:7f:cb:bb:7a:55:e2:3c:6c:6a:5a:73:d1:9c:
                    b0:3d:fb:fa:8b:d5:88:0e:79:11:39:c9:26:95:7c:
                    d1:d0:f3:19:cb:b2:54:49:95:e8:b7:4e:b5:7b:be:
                    bb:f3:45:94:a7:86:04:95:84:92:e2:7a:76:c7:7e:
                    95:99:7b:c4:ee:ca:78:a2:8f:4b:7c:f4:52:bf:5a:
                    3d:93:5b:ee:a8:0e:f9:dc:ea:55:f3:35:a9:0d:b5:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BA:91:EC:42:90:23:26:08:37:D3:EE:14:6D:F3:DE:07:11:81:64
            X509v3 Authority Key Identifier:
                keyid:58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33322d3333203d3e20323732353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:c8:13:ea:39:93:d0:9b:1e:d6:c0:5e:ec:2f:7c:02:bf:
         67:ae:1f:af:d6:01:b2:1c:10:7d:94:44:02:9b:fe:fb:c5:c7:
         eb:3a:1d:55:fc:be:19:36:36:98:0e:44:59:ab:d6:c5:58:27:
         75:ee:f3:a6:60:88:a6:cf:19:9e:1a:01:54:c1:5e:35:70:99:
         58:b5:14:cf:b5:e8:0e:2f:3a:61:f8:29:27:8e:04:72:97:f6:
         a6:48:c4:b2:d2:95:77:49:22:72:a6:cb:7d:e5:52:87:a7:5e:
         9b:51:22:e5:f5:1a:65:5b:db:66:af:49:0f:51:58:71:c2:37:
         0a:d8:18:56:5a:13:69:a3:d5:d8:dd:61:d7:32:c6:07:f5:fe:
         a1:3a:62:6c:38:0e:c0:b4:a1:70:2d:f9:57:63:84:11:09:26:
         c6:28:f4:28:eb:c8:ae:3f:f3:43:a2:17:d1:e1:4b:35:a8:99:
         1c:d1:67:4f:6a:cb:02:a2:00:95:64:f6:fc:44:22:73:75:3b:
         75:b7:ef:8b:3c:44:40:66:5f:d8:9f:66:ab:23:24:44:bd:9f:
         05:8a:ae:d4:95:0d:7e:98:1d:63:46:cf:70:4b:f1:2b:21:5d:
         22:e6:2d:8b:a4:ac:96:a0:d8:aa:f1:7b:de:03:37:aa:89:22:
         cc:64:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:48:44 2026 by rpki-client