This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33342d3334203d3e20323635313735.roa
File:                     323830343a326263383a3a2f33342d3334203d3e20323635313735.roa (raw, json)
Hash identifier:          DxrIzdh4Srx16aFWTDEn4OnogpwoR8s6vknFT+ZK95A=
Subject key identifier:   7D:BE:E8:74:EB:78:87:DA:16:9C:16:DA:0B:F1:18:95:F3:B3:FE:6F
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       313D6B77FDBF8738E61B941AB5E87902AC348C5F
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33342d3334203d3e20323635313735.roa
Signing time:             Thu 15 Jan 2026 18:28:03 +0000
ROA not before:           Thu 15 Jan 2026 18:23:03 +0000
ROA not after:            Thu 14 Jan 2027 18:28:03 +0000
asID:                     265175
IP address blocks:        2804:2bc8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3d:6b:77:fd:bf:87:38:e6:1b:94:1a:b5:e8:79:02:ac:34:8c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Jan 15 18:23:03 2026 GMT
            Not After : Jan 14 18:28:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:fc:c7:80:f1:6b:8b:1c:87:06:f3:aa:51:
                    13:a2:82:41:17:c8:44:fc:10:35:0d:50:8d:bd:c2:
                    0b:5f:ff:65:54:f4:38:73:8d:a7:4c:78:4e:fc:74:
                    a2:84:75:9b:e9:96:55:31:92:91:ee:da:39:86:73:
                    79:73:1a:cb:16:3d:b3:3a:06:da:8a:b6:a3:48:63:
                    1b:84:0a:05:f7:ff:86:11:67:f3:8a:83:e4:3f:1a:
                    dc:d0:9b:82:48:aa:0c:28:98:80:cf:0a:b7:f2:13:
                    c5:f6:d6:70:64:be:91:fa:c7:1b:c1:ea:fb:7d:66:
                    f9:75:89:79:36:cc:4b:af:44:b3:08:4d:7e:b7:4f:
                    70:7e:ce:46:55:ee:80:7d:ec:e8:b9:39:7b:fa:5a:
                    17:38:55:be:1c:79:26:ff:e5:ae:ca:1d:a5:1e:d8:
                    5d:32:93:cc:bb:1f:73:f5:a0:af:7d:d7:09:2d:ee:
                    28:8e:a6:b1:30:c2:e0:18:15:31:e9:b0:31:a6:c2:
                    02:f3:bb:10:c4:db:b0:3d:de:77:5e:01:46:c7:ed:
                    d5:ab:48:c0:74:30:30:6f:be:9a:ea:63:b8:12:e0:
                    0e:ad:2d:1b:5f:8d:9b:45:a0:70:e5:9c:cf:4d:f3:
                    a1:d5:78:2b:cf:62:9e:4c:c4:cd:cf:58:45:e8:ab:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BE:E8:74:EB:78:87:DA:16:9C:16:DA:0B:F1:18:95:F3:B3:FE:6F
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33342d3334203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8::/34

    Signature Algorithm: sha256WithRSAEncryption
         ae:b6:b2:00:4c:38:ad:ae:ff:5c:9e:70:e8:88:2b:00:48:56:
         1c:df:dc:30:76:c0:6e:19:e7:57:4f:f6:5c:f9:ab:ef:33:46:
         51:9e:07:bb:da:9f:9c:98:e5:ec:5e:92:8b:49:68:5c:9b:fc:
         6b:5e:6a:8f:76:e6:e0:86:66:d9:3a:96:88:37:26:48:9b:76:
         21:87:74:4a:cc:6d:94:b5:48:c0:d9:4c:4f:80:15:59:42:e3:
         3f:77:fd:70:4c:7e:52:a2:b5:ce:60:65:c2:a4:35:5b:b4:43:
         69:39:6b:f1:1f:10:cb:cf:7b:3c:7a:bb:2e:46:a6:33:0c:cf:
         65:9b:10:e6:61:2c:2a:7f:f1:a1:99:b4:25:cd:6f:4d:1e:ec:
         8c:bf:b8:89:4e:1b:4f:88:4a:bc:43:29:f1:3d:b9:3d:5a:13:
         13:10:bb:57:81:c3:77:04:b0:ac:ee:e2:62:df:6b:14:d5:0f:
         84:83:8a:89:ad:33:58:25:a2:c5:b2:0d:04:b3:7d:9c:57:9d:
         69:47:da:4c:f5:82:64:1d:f9:a6:3c:85:e3:b8:93:ac:83:fc:
         23:2d:d8:b7:80:05:db:2c:74:03:23:97:b0:2c:14:fa:ae:cd:
         59:53:98:1d:f3:fc:dc:31:1f:4c:e5:31:65:37:50:70:6e:fe:
         ce:0a:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----