This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e20313938393439.roa
File:                     323830343a343864633a3a2f33322d3430203d3e20313938393439.roa (raw, json)
Hash identifier:          jUCGVqqxnj7+4OBnHwFkA1K6oku4Pp8BjipYS7uXE3k=
Subject key identifier:   FA:EA:02:14:BD:75:D9:0D:8C:E3:2C:DD:D3:45:98:D0:B2:32:12:67
Certificate issuer:       /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial:       790AF470E4C8E0F84479E30BCD6B946D26CD06A8
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e20313938393439.roa
Signing time:             Fri 23 Jan 2026 16:56:45 +0000
ROA not before:           Fri 23 Jan 2026 16:51:45 +0000
ROA not after:            Fri 22 Jan 2027 16:56:45 +0000
asID:                     198949
IP address blocks:        2804:48dc::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
                          rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 06:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0a:f4:70:e4:c8:e0:f8:44:79:e3:0b:cd:6b:94:6d:26:cd:06:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
        Validity
            Not Before: Jan 23 16:51:45 2026 GMT
            Not After : Jan 22 16:56:45 2027 GMT
        Subject: CN=FAEA0214BD75D90D8CE32CDDD34598D0B2321267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c1:ad:26:94:b4:fc:a6:e9:64:27:4f:5e:b1:
                    72:a2:9a:2b:88:cc:f6:57:ae:dc:89:e8:64:d0:bc:
                    8f:42:c1:ca:92:54:25:8d:07:70:d9:22:10:34:cc:
                    bd:30:ea:54:ba:54:5b:a1:a9:b4:74:9b:16:cb:d9:
                    3c:cf:ff:4c:ad:10:3f:9a:48:5d:a3:96:2b:49:4a:
                    96:1a:76:ba:f4:47:b0:7f:f1:37:bd:d0:af:d6:90:
                    8b:43:af:1e:e9:f3:40:5e:76:33:2e:54:c2:42:54:
                    ad:0a:0d:31:58:96:75:a9:20:99:20:04:64:fd:b2:
                    13:91:9b:0a:31:16:53:06:b0:a4:6b:79:0c:cf:06:
                    9e:dd:62:41:03:b5:b6:24:f3:6a:ed:c6:71:83:a7:
                    71:79:77:a2:78:96:d7:94:80:cf:ff:58:01:72:b0:
                    94:a1:0c:81:76:07:17:58:15:b3:21:55:91:df:2b:
                    26:f9:36:54:c4:fc:83:bd:b4:30:a0:cc:3e:b9:39:
                    a3:af:8d:d5:b2:3c:e1:1b:95:f0:d4:36:3c:b1:52:
                    36:24:ca:1c:60:d3:70:b0:fd:2a:a4:14:aa:2d:c6:
                    62:11:67:cd:cd:c2:20:62:23:cc:03:97:3f:50:05:
                    c8:b4:32:76:79:c4:00:d9:b6:b7:7e:b6:f6:2c:33:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EA:02:14:BD:75:D9:0D:8C:E3:2C:DD:D3:45:98:D0:B2:32:12:67
            X509v3 Authority Key Identifier:
                keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:a0:cd:de:57:85:fd:66:8e:f5:82:0b:e9:47:2a:67:e1:57:
         63:ff:6a:8c:c4:62:3a:8f:ec:62:51:4b:61:71:14:82:df:dd:
         b4:f5:2b:6b:e6:f1:08:f8:fb:a0:62:eb:ec:91:b4:75:99:03:
         95:3c:2f:74:3c:49:03:9a:d3:3a:7a:4b:17:31:bf:93:e3:38:
         64:18:40:52:98:89:ed:b0:a7:98:6b:42:40:26:9b:78:36:88:
         1d:06:69:2d:bd:81:90:ed:e7:5b:3d:ae:73:21:9e:62:07:cd:
         51:77:f9:11:37:fb:1a:70:88:ca:fa:50:01:ad:3b:78:1c:81:
         6b:e0:1b:00:1d:d6:08:28:98:a8:3e:1e:f8:97:4e:f9:46:81:
         02:84:70:b9:8c:23:c2:e5:d8:01:bd:58:b3:80:4b:ab:fd:3e:
         90:20:c4:ea:ec:8e:80:55:df:ad:49:91:65:fc:0b:0d:1d:79:
         9c:50:76:98:91:e7:3c:7e:12:55:28:da:a7:65:0c:a9:dc:ab:
         50:8a:2e:ff:7f:58:51:52:d8:41:12:f4:e1:b9:11:df:95:d9:
         99:3e:e0:b1:9f:11:0c:b3:b6:55:dc:cd:68:26:ee:ef:b2:58:
         55:3a:36:37:84:7a:7b:4d:c6:4a:90:76:0e:33:01:8b:1e:1e:
         6a:e8:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:45 2026 by rpki-client