This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa
File:                     323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa (raw, json)
Hash identifier:          bH1N4ymf++FJrZvh9xnvOgWJfe41p9iITBbax1VbUno=
Subject key identifier:   8C:FD:F0:00:CD:DA:DE:95:73:F5:89:38:F2:9A:5D:9D:4C:45:E9:48
Certificate issuer:       /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial:       5ED3B0C9BA8BF1AAA0AA6A9611017B46366DDDBA
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa
Signing time:             Fri 09 Jan 2026 20:00:21 +0000
ROA not before:           Fri 09 Jan 2026 19:55:21 +0000
ROA not after:            Fri 08 Jan 2027 20:00:21 +0000
asID:                     271519
IP address blocks:        2804:7ccc:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
                          rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d3:b0:c9:ba:8b:f1:aa:a0:aa:6a:96:11:01:7b:46:36:6d:dd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
        Validity
            Not Before: Jan  9 19:55:21 2026 GMT
            Not After : Jan  8 20:00:21 2027 GMT
        Subject: CN=8CFDF000CDDADE9573F58938F29A5D9D4C45E948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:78:76:b5:2d:0b:b5:c2:56:2d:5f:a4:11:
                    c8:29:42:e1:df:31:3c:4e:49:7e:09:05:03:4d:e3:
                    56:26:73:f2:7a:df:61:b3:3e:8e:d6:ed:d9:21:5e:
                    65:e1:fa:e3:9e:99:6e:7f:55:46:73:c2:35:1c:6e:
                    1c:78:94:db:18:dd:11:cf:dc:f9:60:75:4d:9b:12:
                    0d:ce:0e:ea:17:a3:55:c6:55:f1:e5:32:5c:8d:d5:
                    bf:f5:47:50:39:af:e3:a6:da:9e:05:dc:3a:f7:9a:
                    88:d2:36:be:8b:00:83:40:82:5f:db:fb:dd:ba:42:
                    43:58:8d:d3:65:04:74:ec:f6:ef:4b:25:40:fe:38:
                    ca:07:d2:a7:ff:65:46:f8:ed:59:a5:f0:3a:1f:90:
                    24:7d:31:4d:24:d0:9e:76:69:06:9b:9c:03:b5:a6:
                    fd:30:74:42:88:af:4a:e6:cd:23:76:eb:14:a9:8c:
                    58:92:0c:83:14:59:45:7a:35:62:47:da:80:ed:d7:
                    1b:55:1e:f1:12:bf:b1:b5:22:96:a7:9e:fb:b6:49:
                    fe:6c:e4:48:ce:7d:e2:e0:45:e7:63:e8:fb:5a:99:
                    79:8d:a6:70:22:b4:67:58:2c:de:07:b9:f7:52:1b:
                    49:c2:13:47:16:da:1a:6f:ca:1b:b7:21:23:18:ae:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FD:F0:00:CD:DA:DE:95:73:F5:89:38:F2:9A:5D:9D:4C:45:E9:48
            X509v3 Authority Key Identifier:
                keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ccc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:85:5c:83:c9:3b:41:ac:98:2e:4e:ec:a2:68:cc:e3:91:4b:
         5d:9a:37:31:d9:a3:18:b0:83:35:69:54:96:06:4c:c1:55:f4:
         ff:33:b7:10:1b:29:24:fb:52:05:fc:8a:e6:89:d3:68:2e:bb:
         5c:e6:ab:ec:c5:4b:65:2f:05:5a:6d:54:d3:99:28:46:d3:94:
         fb:5f:0e:e6:ce:d7:c8:a2:6a:ee:03:49:36:5e:fe:ec:9c:d6:
         43:19:ac:e7:d6:c2:24:d8:89:0b:6e:d9:44:01:8c:61:79:48:
         75:6d:4c:30:c3:4e:c5:93:27:d4:09:da:76:c8:a3:5a:e5:c0:
         48:d8:53:b4:bb:0b:f6:55:e5:49:67:85:8f:6b:74:58:39:49:
         e5:fc:a7:cb:19:45:a1:b7:34:22:a3:d6:74:6c:12:fb:d7:54:
         9e:07:3e:3a:fc:ca:74:03:31:9e:12:e9:fc:6c:3f:dc:63:a3:
         c9:bc:88:38:7b:1e:eb:08:c2:9c:14:a7:56:0c:98:3d:b5:b8:
         27:c7:0a:b5:9e:55:4b:ea:d4:0f:43:8b:ea:72:53:94:90:04:
         b7:72:92:7b:43:2f:08:ac:27:a8:10:42:cb:ff:8c:bb:7c:f9:
         be:e6:bb:61:93:0e:60:48:85:b4:59:a9:e5:85:d8:32:bf:3d:
         44:1a:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:52 2026 by rpki-client