This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/323830343a333136343a3a2f33322d3438203d3e20323635303131.roa
File:                     323830343a333136343a3a2f33322d3438203d3e20323635303131.roa (raw, json)
Hash identifier:          g+9dg+D40GSNVGcSYe8+sgjj7d3122wbPttD8XZWVJg=
Subject key identifier:   4E:DE:64:8A:5F:15:C2:B4:6B:55:09:AE:11:A4:86:2A:57:CE:CB:E1
Certificate issuer:       /CN=84FD8F1989410A974714F8A8E867D28365445A3B
Certificate serial:       2A976DA1A4F7668BFE214640C290E215526D9A9E
Authority key identifier: 84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/323830343a333136343a3a2f33322d3438203d3e20323635303131.roa
Signing time:             Mon 05 Jan 2026 18:12:05 +0000
ROA not before:           Mon 05 Jan 2026 18:07:05 +0000
ROA not after:            Mon 04 Jan 2027 18:12:05 +0000
asID:                     265011
IP address blocks:        2804:3164::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl
                          rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:97:6d:a1:a4:f7:66:8b:fe:21:46:40:c2:90:e2:15:52:6d:9a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FD8F1989410A974714F8A8E867D28365445A3B
        Validity
            Not Before: Jan  5 18:07:05 2026 GMT
            Not After : Jan  4 18:12:05 2027 GMT
        Subject: CN=4EDE648A5F15C2B46B5509AE11A4862A57CECBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:b7:a1:a3:88:5e:ba:16:41:f2:40:3f:63:
                    46:08:0e:69:cc:08:ee:c2:9a:70:ef:f3:45:0e:b1:
                    a1:df:f2:36:cc:7e:f9:b4:45:a5:4c:60:6f:d8:14:
                    8f:9e:b7:e3:c2:d8:08:46:88:85:29:e8:a2:15:6e:
                    30:d5:e3:51:d9:42:07:bd:85:bb:fd:15:3f:f6:17:
                    1f:b7:c7:c1:cd:e6:17:95:b3:6c:0a:22:4c:ab:25:
                    22:ad:48:43:2d:9e:12:b8:e3:d9:57:55:e8:41:33:
                    68:3e:90:87:73:66:df:9c:d5:71:92:06:b8:c6:31:
                    50:3d:9e:4f:0e:16:f8:81:74:4f:41:cf:12:5e:c1:
                    86:03:a8:73:72:6e:ce:1e:07:75:3e:4c:30:21:38:
                    4d:ea:3d:90:f7:e9:c6:bf:e8:14:ec:a8:ec:72:4a:
                    8e:6a:c9:92:9f:29:b1:2e:34:f9:3f:ca:aa:30:aa:
                    97:89:ec:49:c8:f5:ba:0a:4e:2e:78:1b:c8:e1:04:
                    d4:08:a3:83:b5:38:ad:52:86:f5:1f:3c:67:74:47:
                    e7:82:bb:ac:08:e1:50:36:ef:ad:51:60:c4:71:d0:
                    26:d1:26:3e:15:d4:fc:5f:10:80:e5:f9:61:84:a9:
                    3b:3d:0f:87:1e:5e:07:28:27:e9:d1:f0:1d:c5:62:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DE:64:8A:5F:15:C2:B4:6B:55:09:AE:11:A4:86:2A:57:CE:CB:E1
            X509v3 Authority Key Identifier:
                keyid:84:FD:8F:19:89:41:0A:97:47:14:F8:A8:E8:67:D2:83:65:44:5A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/84FD8F1989410A974714F8A8E867D28365445A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84FD8F1989410A974714F8A8E867D28365445A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/323830343a333136343a3a2f33322d3438203d3e20323635303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3164::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:5a:27:ac:b8:24:1a:39:a5:e0:56:29:a6:c6:a7:03:3d:24:
         88:ea:57:ab:71:1c:5f:fe:30:a5:d8:c2:62:b2:29:ae:34:30:
         2b:9a:9f:d3:a5:05:47:86:24:c5:1d:33:18:31:08:97:19:f9:
         12:00:1b:b7:61:85:18:97:43:c2:2b:17:42:1e:d7:d6:d5:a3:
         3c:12:b3:95:02:ea:72:71:7a:f8:1c:51:64:be:b2:30:26:45:
         fc:0d:ea:01:fc:4c:55:fd:94:d3:b5:40:02:a4:de:d8:a7:6d:
         40:4a:cd:22:3a:58:c2:38:dd:b7:eb:b3:4b:76:d0:3c:5a:3d:
         51:98:1f:56:bc:c2:d3:a0:3f:ac:30:7a:66:b2:23:2d:c0:3c:
         c9:ac:e8:1e:98:ce:9c:61:06:83:75:75:7d:34:5c:2d:98:27:
         03:36:19:c4:e6:52:7f:4a:a3:3a:fb:47:d5:fe:86:e4:7a:88:
         6e:b2:d2:71:4d:7f:be:1d:54:16:4e:b5:ac:05:57:41:a7:01:
         f7:51:69:52:d0:73:d8:1b:b1:0d:a5:a6:0a:7b:a4:85:e4:5c:
         5a:df:7d:64:31:1f:25:e3:09:43:33:88:a7:78:fd:2d:d3:af:
         7c:c3:95:f3:8f:00:c5:92:96:bf:40:dd:30:bc:66:67:cb:4c:
         c7:ff:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:16 2026 by rpki-client