This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          xZZ7GNSztya2dKSFQDvgEEVIlUjR3+juLu9MAWpYGuQ=
Subject key identifier:   17:0B:05:E8:A5:51:51:BF:B1:4F:5A:0F:F7:C8:5A:0E:E8:ED:17:FF
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       255CD69193E9088BF60F2CFEEB34C80B502773D5
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Thu 15 Jan 2026 18:28:36 +0000
ROA not before:           Thu 15 Jan 2026 18:23:36 +0000
ROA not after:            Thu 14 Jan 2027 18:28:36 +0000
asID:                     265175
IP address blocks:        2804:2bc8:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5c:d6:91:93:e9:08:8b:f6:0f:2c:fe:eb:34:c8:0b:50:27:73:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Jan 15 18:23:36 2026 GMT
            Not After : Jan 14 18:28:36 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:47:2b:e9:c9:4d:60:5c:c9:f7:a3:de:a7:
                    e3:b2:91:b4:a0:12:b4:e4:40:2e:8d:e4:0f:8c:fb:
                    77:92:73:fd:13:2a:dd:e9:49:28:01:08:1e:23:d3:
                    28:0a:38:3a:2e:c9:11:b3:1b:b3:fb:a4:f5:23:3d:
                    3b:9e:e4:4d:2d:e2:81:17:72:19:6b:27:fb:4c:6d:
                    48:27:9d:57:3b:dc:f6:60:8b:17:84:c0:9d:b6:3e:
                    59:fc:84:c5:dd:40:33:15:79:c1:87:a6:42:fc:ab:
                    29:02:b3:1b:3a:a8:0c:31:2f:50:1c:1c:2b:c4:d0:
                    76:80:11:c3:dc:52:97:96:23:23:2d:87:65:b2:cb:
                    0e:a4:3c:70:c3:a0:71:de:62:91:93:65:bf:bb:68:
                    8d:ed:f4:04:32:7b:26:7e:66:27:a9:a6:69:86:28:
                    b8:7c:d1:73:bb:37:16:a5:dc:9e:46:13:8d:b7:55:
                    27:09:76:c8:43:e8:a2:26:69:27:df:fb:60:05:fd:
                    cd:6d:38:c0:eb:d7:ca:fa:7c:4b:c4:c0:5f:ef:96:
                    4d:31:5e:15:ac:ee:76:a8:22:30:0f:61:50:75:ee:
                    3d:15:bf:7c:80:4a:aa:2c:c3:16:4f:92:bc:cc:af:
                    c2:b5:4c:31:e4:b3:ee:9d:5a:c2:8f:f7:0f:6b:c4:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0B:05:E8:A5:51:51:BF:B1:4F:5A:0F:F7:C8:5A:0E:E8:ED:17:FF
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a7:b5:64:e6:8a:3f:23:16:24:2e:a6:94:70:3d:50:21:57:b7:
         5d:2f:ce:c9:3c:e9:7a:ec:5c:7d:67:2d:71:fc:04:14:03:8d:
         65:04:9b:cd:f8:f6:2b:83:ce:4b:1d:74:7c:23:71:61:2b:43:
         41:ce:d7:81:ae:d7:73:dc:4c:37:29:9c:35:b9:52:74:d8:5f:
         9c:c7:de:6d:52:67:0b:fc:71:8e:78:60:5f:e7:16:dd:85:15:
         a3:1b:fa:e8:51:02:68:8d:c6:68:79:93:ff:d2:a2:77:29:2a:
         9f:3f:a5:cc:69:c3:5b:50:87:4c:1e:d9:63:57:b9:e1:c3:23:
         0f:ec:f2:4c:b2:99:ea:f2:31:72:95:d0:46:e9:4f:d6:1c:41:
         e0:c7:53:52:96:51:1b:ec:b5:29:76:27:42:ae:44:1d:d1:bb:
         42:98:12:20:1f:f8:f5:b5:9d:a2:2a:4d:8a:53:a7:4b:72:db:
         04:d5:bc:88:ca:f0:6f:8b:eb:fb:a4:16:37:c3:82:c2:bf:ce:
         d7:fb:5a:30:e6:e1:95:80:16:40:23:17:4c:37:ed:9d:6f:d5:
         28:a8:48:18:6b:c3:8f:58:2e:81:f9:2b:92:78:24:69:cf:4e:
         99:51:bc:f1:a5:9b:01:62:98:cf:00:0f:b9:3b:65:29:06:b9:
         b9:06:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:59:41 2026 by rpki-client