This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3438203d3e20323637313734.roa
File:                     323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (raw, json)
Hash identifier:          ewmKqfog/fgeU/jH2g0Duy320j/78TqpSnYLXJn75r0=
Subject key identifier:   87:7E:E8:C1:31:E7:38:95:53:F3:D9:BB:90:03:E6:19:8C:CD:2E:11
Certificate issuer:       /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial:       6A9F2A89D65D6346E3D349CF19284C932CE58748
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3438203d3e20323637313734.roa
Signing time:             Wed 07 Jan 2026 18:53:06 +0000
ROA not before:           Wed 07 Jan 2026 18:48:06 +0000
ROA not after:            Wed 06 Jan 2027 18:53:06 +0000
asID:                     267174
IP address blocks:        2804:4944::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
                          rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9f:2a:89:d6:5d:63:46:e3:d3:49:cf:19:28:4c:93:2c:e5:87:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
        Validity
            Not Before: Jan  7 18:48:06 2026 GMT
            Not After : Jan  6 18:53:06 2027 GMT
        Subject: CN=877EE8C131E7389553F3D9BB9003E6198CCD2E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:28:fb:f6:35:19:4b:52:30:85:d6:1f:62:
                    04:58:66:ec:eb:cf:f8:fa:93:d7:09:21:d1:7e:ee:
                    5b:d1:c3:e1:0f:f6:67:9a:dd:ed:0a:c4:82:27:4e:
                    8a:e7:74:95:ee:fa:5c:1e:ea:84:bd:d5:43:57:aa:
                    a3:f3:7d:bf:23:5c:c7:04:74:fb:21:fb:5a:6e:89:
                    2f:56:eb:e0:0d:2f:7c:37:ee:b8:66:de:99:1c:08:
                    f0:e7:5d:3d:47:bd:2d:73:30:b0:2b:29:2c:21:8f:
                    17:65:fa:48:ea:ee:01:07:7b:00:8e:f7:2d:73:b3:
                    93:48:52:41:72:62:5f:44:74:7d:8e:f5:9b:5d:5c:
                    f9:05:09:e8:8f:a3:a5:a5:18:4a:72:73:e1:31:71:
                    17:08:54:be:0c:36:4e:8b:81:45:05:5c:bc:b6:a8:
                    cd:c7:4c:44:ee:ea:b7:de:50:41:41:aa:3d:11:1c:
                    d7:f8:9b:be:31:5b:09:ab:38:85:c2:92:6c:a0:21:
                    d5:ce:f4:51:d6:77:e3:72:71:84:20:cd:94:7c:b8:
                    66:69:88:10:6c:9b:90:3d:a2:65:bb:1a:fe:88:b2:
                    8b:4f:8d:0f:e4:27:9a:26:3c:42:db:19:2d:2d:96:
                    ae:f1:81:dd:93:69:d2:34:4b:55:f0:60:67:1f:e4:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7E:E8:C1:31:E7:38:95:53:F3:D9:BB:90:03:E6:19:8C:CD:2E:11
            X509v3 Authority Key Identifier:
                keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3438203d3e20323637313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4944::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:bb:8b:ca:2e:18:1a:85:7e:8a:7e:69:fd:f5:65:cd:d0:d2:
         e0:ae:b8:60:46:2d:43:fc:28:c1:9b:05:36:bc:17:8e:38:2c:
         f8:b7:e8:4f:52:d2:0b:14:d7:dc:ce:be:28:67:fd:de:fb:35:
         9e:29:16:a6:9d:ab:80:ba:28:d0:fa:de:54:86:db:5b:05:f9:
         09:81:b5:07:03:60:98:62:ad:de:7f:2a:43:95:b8:58:ce:73:
         c9:a6:32:4e:16:90:c2:64:83:a0:20:e2:2e:15:59:05:79:a5:
         d6:53:f0:e6:e4:95:1e:c0:8e:98:f2:a1:6d:75:e5:69:32:e0:
         85:f8:59:79:13:c6:50:c9:51:7d:29:6b:26:e0:d4:3b:e9:dc:
         59:17:1f:dc:52:94:51:de:c7:c0:13:86:96:16:54:80:ae:ee:
         ca:c6:bc:a2:8d:ba:5b:df:f9:4d:5a:77:7d:6e:58:f2:96:83:
         07:a7:d9:ac:1d:d9:92:6a:60:ab:6c:dc:16:f8:fa:57:17:35:
         cd:96:b7:d0:22:13:e5:9c:16:bb:dc:82:86:b2:86:3b:a1:40:
         73:3c:a9:6f:3f:5a:96:2a:81:e3:0e:46:18:12:5c:93:15:de:
         4e:38:15:a5:d8:39:54:ac:0e:76:97:cb:05:db:86:33:fe:7b:
         15:eb:e1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:32:09 2026 by rpki-client