This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa
File:                     323830343a363931383a3a2f33322d313238203d3e20323730323438.roa (raw, json)
Hash identifier:          4V4h01FfAx+iTHBW/gtSviAVEB0dEPEPWE0iIn31+Zo=
Subject key identifier:   42:2C:5E:B3:50:84:F6:E7:24:CF:A5:6B:FB:F8:02:14:06:2F:4D:67
Certificate issuer:       /CN=69261AA9B8DE6E9204CD8B9BDB0AF7EFD9DB1974
Certificate serial:       26C341BC9EE7D000D6B9C0E3470A9638605B5600
Authority key identifier: 69:26:1A:A9:B8:DE:6E:92:04:CD:8B:9B:DB:0A:F7:EF:D9:DB:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69261AA9B8DE6E9204CD8B9BDB0AF7EFD9DB1974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa
Signing time:             Tue 06 Jan 2026 16:33:46 +0000
ROA not before:           Tue 06 Jan 2026 16:28:46 +0000
ROA not after:            Tue 05 Jan 2027 16:33:46 +0000
asID:                     270248
IP address blocks:        2804:6918::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/69261AA9B8DE6E9204CD8B9BDB0AF7EFD9DB1974.crl
                          rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/69261AA9B8DE6E9204CD8B9BDB0AF7EFD9DB1974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69261AA9B8DE6E9204CD8B9BDB0AF7EFD9DB1974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c3:41:bc:9e:e7:d0:00:d6:b9:c0:e3:47:0a:96:38:60:5b:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69261AA9B8DE6E9204CD8B9BDB0AF7EFD9DB1974
        Validity
            Not Before: Jan  6 16:28:46 2026 GMT
            Not After : Jan  5 16:33:46 2027 GMT
        Subject: CN=422C5EB35084F6E724CFA56BFBF80214062F4D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:e0:03:16:01:2e:78:a6:bb:33:8d:b9:fa:
                    8b:d5:7f:28:46:06:2d:d3:0c:de:9d:98:0e:46:b9:
                    17:70:a6:51:f9:74:16:51:c7:a0:8a:e2:fa:88:19:
                    81:bd:b6:a3:5c:75:06:2a:c6:fd:1a:72:61:aa:98:
                    4e:f3:34:f1:62:84:79:11:d9:1b:be:05:1d:05:9e:
                    95:02:4a:dd:39:3e:6e:75:77:b0:f5:2f:c4:3a:0c:
                    c6:b0:ed:22:97:88:f0:e9:97:5c:1d:57:d7:6c:15:
                    97:56:2b:2c:95:72:b0:1a:3c:e3:f2:aa:e9:66:c3:
                    42:54:a8:63:fe:45:dc:27:8d:3e:ac:27:f5:13:0d:
                    2d:80:19:ca:0f:96:cf:5d:10:45:e0:d3:96:a7:c4:
                    0b:5c:40:bf:a2:84:1c:d5:57:f9:88:bf:76:86:c6:
                    58:83:43:8e:cc:ac:09:6f:cb:c9:c5:b6:0b:05:e4:
                    bb:36:8d:c9:34:c2:aa:08:2d:b9:1e:5d:f7:cd:ab:
                    7e:80:b0:16:a9:3d:e0:ca:d2:7f:83:99:e5:8d:78:
                    96:d2:1e:cd:9c:d9:91:9c:68:24:40:73:d4:bd:86:
                    e2:ce:6f:81:b0:61:58:1d:77:d3:7e:c4:90:59:e0:
                    98:d1:66:b0:e7:f2:f2:4c:e6:82:19:90:93:5e:a0:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2C:5E:B3:50:84:F6:E7:24:CF:A5:6B:FB:F8:02:14:06:2F:4D:67
            X509v3 Authority Key Identifier:
                keyid:69:26:1A:A9:B8:DE:6E:92:04:CD:8B:9B:DB:0A:F7:EF:D9:DB:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/69261AA9B8DE6E9204CD8B9BDB0AF7EFD9DB1974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69261AA9B8DE6E9204CD8B9BDB0AF7EFD9DB1974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6918::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:6e:f8:30:35:2b:c9:f8:b3:23:3f:49:24:44:87:68:49:91:
         47:5c:38:f2:97:9f:ef:a8:73:02:a7:8e:45:32:99:3c:31:e7:
         92:0c:ee:39:ee:fa:09:bd:83:fc:89:20:d3:da:74:da:6c:ad:
         fd:01:a6:d6:4a:89:31:bf:b8:a0:9d:e5:67:52:0c:d1:c4:67:
         11:17:a3:75:42:97:47:d1:8f:da:23:3b:c1:a9:ed:5e:01:eb:
         6b:54:c5:7c:f3:7f:89:d6:17:c5:28:ee:dd:52:85:ce:5c:ba:
         bd:35:dc:e8:86:6b:a4:4c:8c:0d:d8:12:61:14:e2:47:04:58:
         d7:35:fd:3e:62:83:34:3c:49:5f:b9:c4:8c:0a:32:00:91:ef:
         45:45:05:08:52:52:58:7b:0d:17:fc:2c:9d:19:23:41:65:9c:
         e8:4a:ad:1d:b6:29:20:4d:e3:7a:bc:7a:df:54:a7:e5:6e:f4:
         d5:ce:5c:b7:58:da:2e:32:46:63:5c:ae:9c:e8:27:1b:6d:90:
         3d:37:25:51:51:76:89:9a:21:be:12:21:60:59:0f:87:65:ef:
         a5:b9:00:36:e5:73:5f:a5:16:c2:68:1f:a1:f9:43:a5:d0:32:
         6a:49:3d:21:75:1a:fc:13:27:78:2b:c3:72:ee:f8:48:af:2d:
         17:29:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:27:18 2026 by rpki-client