This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/323830343a313965633a3a2f33322d313238203d3e203631383237.roa
File:                     323830343a313965633a3a2f33322d313238203d3e203631383237.roa (raw, json)
Hash identifier:          CJguOvOlLQkymto1KjagFZsofI+4YDPOoEWMp97qjDk=
Subject key identifier:   BA:8C:DE:CC:B6:5C:10:AC:C0:42:71:54:21:06:4D:F5:48:CE:CC:F5
Certificate issuer:       /CN=FAB287B5E62AECE651D89597FB0C5EE6A8707015
Certificate serial:       675A0ED870DACD24BD736B12E8DDCDD9BF36D73E
Authority key identifier: FA:B2:87:B5:E6:2A:EC:E6:51:D8:95:97:FB:0C:5E:E6:A8:70:70:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAB287B5E62AECE651D89597FB0C5EE6A8707015.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/323830343a313965633a3a2f33322d313238203d3e203631383237.roa
Signing time:             Sat 10 Jan 2026 12:04:15 +0000
ROA not before:           Sat 10 Jan 2026 11:59:15 +0000
ROA not after:            Sat 09 Jan 2027 12:04:15 +0000
asID:                     61827
IP address blocks:        2804:19ec::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/FAB287B5E62AECE651D89597FB0C5EE6A8707015.crl
                          rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/FAB287B5E62AECE651D89597FB0C5EE6A8707015.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAB287B5E62AECE651D89597FB0C5EE6A8707015.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5a:0e:d8:70:da:cd:24:bd:73:6b:12:e8:dd:cd:d9:bf:36:d7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAB287B5E62AECE651D89597FB0C5EE6A8707015
        Validity
            Not Before: Jan 10 11:59:15 2026 GMT
            Not After : Jan  9 12:04:15 2027 GMT
        Subject: CN=BA8CDECCB65C10ACC042715421064DF548CECCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:d6:a7:37:2c:23:04:a0:ab:b1:00:9f:cc:
                    7e:5f:c5:56:a2:08:db:bc:25:7a:f0:f5:ca:2e:ae:
                    fc:1a:a7:e2:6b:0b:b8:7a:b8:d2:2a:0a:7d:64:76:
                    8c:07:68:cc:c4:d2:a2:1a:43:93:48:d7:25:b6:a6:
                    cf:78:90:62:b5:9e:23:61:14:35:d0:10:5d:ff:99:
                    53:8f:a6:82:8f:3b:2b:0c:1b:cd:b2:2c:de:a9:73:
                    25:e2:be:1d:36:fd:b5:1d:f5:26:95:f0:17:0d:18:
                    01:b9:02:ad:cd:ed:ea:25:e4:68:f1:9c:b6:f0:84:
                    3e:f0:b7:9e:cd:bb:ec:03:18:5f:3a:06:3c:6c:df:
                    a5:82:4e:e9:30:2a:e3:b0:9a:34:c4:3b:a1:04:e7:
                    fe:04:e2:fb:e6:c2:6b:de:73:1d:63:e1:c7:0c:3c:
                    d7:24:f5:40:1e:d6:45:be:27:47:67:d6:17:c2:96:
                    dd:e0:fc:0d:4a:1c:94:ad:01:e8:fc:52:67:06:89:
                    e8:d9:df:ab:bc:16:22:a8:81:66:c0:ca:ce:da:50:
                    f6:01:56:fc:6a:14:a9:d5:46:fe:e8:40:e3:21:68:
                    0b:68:21:f5:2f:3f:d1:5c:1c:70:b1:49:d1:19:7a:
                    15:c3:30:9a:f1:46:d6:69:6d:88:a5:8c:c6:ed:80:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8C:DE:CC:B6:5C:10:AC:C0:42:71:54:21:06:4D:F5:48:CE:CC:F5
            X509v3 Authority Key Identifier:
                keyid:FA:B2:87:B5:E6:2A:EC:E6:51:D8:95:97:FB:0C:5E:E6:A8:70:70:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/FAB287B5E62AECE651D89597FB0C5EE6A8707015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAB287B5E62AECE651D89597FB0C5EE6A8707015.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kGfWrTVVrMsLHGW19ucnS1ndmYvzEkEqWu98pQbscBE/0/323830343a313965633a3a2f33322d313238203d3e203631383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:d8:30:b5:48:96:3e:26:c0:cf:44:7c:24:fd:17:a3:ce:bc:
         d8:8a:48:2a:e5:76:4b:cc:e2:80:7e:00:2d:49:4a:02:ca:f9:
         20:24:e3:91:0a:f4:6b:c8:2c:84:61:d0:27:ce:27:cc:c3:8b:
         78:55:77:15:75:d2:b1:1b:ee:f3:e1:3b:7b:af:ba:ae:f6:44:
         59:b9:e1:fd:15:d5:1c:77:c9:4f:dc:25:02:03:a0:ae:63:20:
         3c:b8:c9:10:2e:82:3a:74:c7:96:80:c1:e4:59:81:04:db:91:
         d1:9b:2d:cd:62:df:93:1a:5e:a2:82:6c:2b:c2:fe:a8:75:b7:
         b6:cf:7a:6d:05:b7:d9:7c:b7:78:64:ec:17:95:20:10:bf:75:
         55:cd:c6:13:48:4c:3b:12:fb:39:7b:59:5d:3e:d9:17:50:ae:
         3b:7b:73:f7:78:6f:fc:f0:f6:1f:b8:71:eb:f6:aa:51:c6:46:
         3d:e1:34:6d:cd:db:fb:5e:ef:cd:06:99:07:fc:c2:73:0d:c8:
         63:2b:78:fe:d9:63:24:26:8f:67:8d:4a:01:d2:4a:57:70:21:
         d9:8e:5f:d3:cd:ee:7c:52:6b:8f:5f:7c:98:f5:71:12:93:46:
         fd:ef:4c:ce:7a:92:b7:1f:94:98:af:75:73:ea:6c:62:a1:3d:
         19:76:7f:f7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZ1oO2HDazSS9c2sS6N3N2b821z4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFCMjg3QjVFNjJBRUNFNjUxRDg5NTk3RkIwQzVFRTZB
ODcwNzAxNTAeFw0yNjAxMTAxMTU5MTVaFw0yNzAxMDkxMjA0MTVaMDMxMTAvBgNV
BAMTKEJBOENERUNDQjY1QzEwQUNDMDQyNzE1NDIxMDY0REY1NDhDRUNDRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVW9anNywjBKCrsQCfzH5fxVai
CNu8JXrw9courvwap+JrC7h6uNIqCn1kdowHaMzE0qIaQ5NI1yW2ps94kGK1niNh
FDXQEF3/mVOPpoKPOysMG82yLN6pcyXivh02/bUd9SaV8BcNGAG5Aq3N7eol5Gjx
nLbwhD7wt57Nu+wDGF86Bjxs36WCTukwKuOwmjTEO6EE5/4E4vvmwmvecx1j4ccM
PNck9UAe1kW+J0dn1hfClt3g/A1KHJStAej8UmcGiejZ36u8FiKogWbAys7aUPYB
VvxqFKnVRv7oQOMhaAtoIfUvP9FcHHCxSdEZehXDMJrxRtZpbYiljMbtgAVXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuozezLZcEKzAQnFUIQZN9UjOzPUwHwYDVR0j
BBgwFoAU+rKHteYq7OZR2JWX+wxe5qhwcBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWtHZldyVFZWck1zTEhHVzE5dWNuUzFuZG1ZdnpFa0VxV3U5OHBRYnNj
QkUvMC9GQUIyODdCNUU2MkFFQ0U2NTFEODk1OTdGQjBDNUVFNkE4NzA3MDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQjI4N0I1RTYyQUVDRTY1
MUQ4OTU5N0ZCMEM1RUU2QTg3MDcwMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlrR2ZXclRWVnJNc0xIR1cxOXVjblMxbmRtWXZ6RWtFcVd1OThwUWJzY0JFLzAv
MzIzODMwMzQzYTMxMzk2NTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzgzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQZ7DANBgkqhkiG9w0BAQsFAAOCAQEAdNgwtUiW
PibAz0R8JP0Xo8682IpIKuV2S8zigH4ALUlKAsr5ICTjkQr0a8gshGHQJ84nzMOL
eFV3FXXSsRvu8+E7e6+6rvZEWbnh/RXVHHfJT9wlAgOgrmMgPLjJEC6COnTHloDB
5FmBBNuR0ZstzWLfkxpeooJsK8L+qHW3ts96bQW32Xy3eGTsF5UgEL91Vc3GE0hM
OxL7OXtZXT7ZF1CuO3tz93hv/PD2H7hx6/aqUcZGPeE0bc3b+17vzQaZB/zCcw3I
Yyt4/tljJCaPZ41KAdJKV3Ah2Y5f083ufFJrj198mPVxEpNG/e9MznqStx+UmK91
c+psYqE9GXZ/9w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:29:32 2026 by rpki-client