This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa
File:                     323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa (raw, json)
Hash identifier:          8n/gR1B4AuDCXhEHDUWgjoby/gaXMi9/4AVATgAz3gk=
Subject key identifier:   B1:97:1E:FA:DB:71:45:B0:1A:4B:B9:AB:37:1E:38:80:13:A6:C8:B8
Certificate issuer:       /CN=D7845391014F7F9470788EC727561382C9EE8439
Certificate serial:       02CD634A8EA2C96837FFE074481447907ECB7821
Authority key identifier: D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa
Signing time:             Mon 12 Jan 2026 12:31:51 +0000
ROA not before:           Mon 12 Jan 2026 12:26:51 +0000
ROA not after:            Mon 11 Jan 2027 12:31:51 +0000
asID:                     272195
IP address blocks:        2804:8364:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
                          rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cd:63:4a:8e:a2:c9:68:37:ff:e0:74:48:14:47:90:7e:cb:78:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7845391014F7F9470788EC727561382C9EE8439
        Validity
            Not Before: Jan 12 12:26:51 2026 GMT
            Not After : Jan 11 12:31:51 2027 GMT
        Subject: CN=B1971EFADB7145B01A4BB9AB371E388013A6C8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:a6:e5:f7:e4:3f:e5:06:4c:2a:4d:61:30:
                    46:82:a5:91:93:28:4e:6d:d6:7e:2a:d0:1d:06:e4:
                    d8:6f:41:d4:88:a6:9d:9f:e8:d3:73:21:b7:fe:bb:
                    71:f9:47:d8:e8:a4:35:c2:32:b1:7f:7d:9d:dd:01:
                    3f:c6:60:a6:ce:90:65:c3:e2:27:a9:0e:a9:ae:ac:
                    5b:a1:7b:21:af:96:ce:c8:4f:17:64:57:28:e8:de:
                    5d:cc:94:3a:30:7c:27:43:d2:11:42:9b:e3:af:ab:
                    94:f6:3d:72:fc:bd:46:7c:81:5b:37:58:06:4b:ae:
                    75:38:d9:b6:dc:83:8c:34:7a:61:48:38:fd:e5:e2:
                    24:b2:ec:10:fb:74:2a:40:94:ad:a3:3d:d5:95:88:
                    04:c9:3a:bb:46:9e:36:fd:a7:eb:2c:52:b6:87:e2:
                    a4:2c:7e:5c:4a:3a:23:5a:07:c3:76:3d:77:56:53:
                    df:a3:10:04:27:32:fa:b3:14:e3:a7:5e:60:41:19:
                    a5:79:a2:ed:43:d7:45:96:b1:0e:24:e8:a2:9f:f2:
                    df:ff:a2:21:fc:f1:a1:b4:82:b5:c8:74:37:76:2b:
                    95:e0:17:65:37:df:32:62:06:03:ed:37:c8:13:ac:
                    6f:fc:17:2f:80:85:32:2d:48:16:80:f1:57:c5:19:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:97:1E:FA:DB:71:45:B0:1A:4B:B9:AB:37:1E:38:80:13:A6:C8:B8
            X509v3 Authority Key Identifier:
                keyid:D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8364:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:14:c2:5d:76:8d:8f:c0:98:6c:9f:44:39:05:8c:65:76:01:
         b2:e6:11:3d:d1:bf:2c:eb:3a:63:c8:57:2d:5e:9e:72:f0:0d:
         f5:50:0e:d3:39:a0:d4:98:1b:d1:33:7d:0d:0d:28:2b:56:f5:
         dd:e8:f3:78:8d:bf:b8:51:c9:9a:9b:83:09:f9:7f:2b:39:26:
         af:b5:28:c6:2b:fd:ae:96:23:1e:ed:aa:41:4b:3b:b3:39:8a:
         b3:2b:0b:5d:af:8e:a4:c5:0e:2c:7b:1c:30:b6:ef:e3:f4:51:
         e9:73:00:60:58:95:35:6d:02:83:76:c0:a6:93:47:9c:16:61:
         8e:db:30:d3:c0:b2:ae:6a:e6:b7:4d:18:6e:f7:30:2a:62:8a:
         6e:5e:db:fe:8d:e9:71:ba:4e:50:3e:cd:da:4a:91:2b:44:6e:
         2b:06:c0:5f:ba:ec:ac:91:84:56:10:cc:fd:e7:b0:06:d8:e0:
         41:91:9b:a9:7b:27:29:dd:53:d9:46:20:c0:a5:24:1f:e8:1c:
         26:3b:18:d6:8c:9a:1f:7a:ad:86:46:af:80:d6:01:8a:95:ef:
         7a:01:80:47:d8:fd:94:ab:ec:b8:60:76:1b:c5:c6:f6:df:aa:
         df:b0:0c:2f:c3:95:fa:5c:eb:fa:7a:b8:c8:36:b3:c2:77:7e:
         3d:9b:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:59 2026 by rpki-client