This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/323830343a393266383a3a2f33322d3438203d3e20323734373436.roa
File:                     323830343a393266383a3a2f33322d3438203d3e20323734373436.roa (raw, json)
Hash identifier:          xrBw+tyD5bElOqfetil1V/FMPu3k1B6V57Df9jInyxM=
Subject key identifier:   6E:CC:D5:2A:C9:1B:1D:BA:23:FB:20:08:5D:13:FD:FE:62:39:6B:10
Certificate issuer:       /CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE
Certificate serial:       62A44EE38A7EA8C84FC38AD21EFDC6280D595DAF
Authority key identifier: 8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/323830343a393266383a3a2f33322d3438203d3e20323734373436.roa
Signing time:             Wed 07 Jan 2026 12:02:34 +0000
ROA not before:           Wed 07 Jan 2026 11:57:34 +0000
ROA not after:            Wed 06 Jan 2027 12:02:34 +0000
asID:                     274746
IP address blocks:        2804:92f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl
                          rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a4:4e:e3:8a:7e:a8:c8:4f:c3:8a:d2:1e:fd:c6:28:0d:59:5d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE
        Validity
            Not Before: Jan  7 11:57:34 2026 GMT
            Not After : Jan  6 12:02:34 2027 GMT
        Subject: CN=6ECCD52AC91B1DBA23FB20085D13FDFE62396B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:2e:26:80:4c:05:4c:72:d5:cf:63:73:b2:
                    12:e4:19:58:b1:62:ac:90:23:39:0e:86:22:cb:6a:
                    fb:62:8b:19:7c:b2:1d:bd:3a:2a:d1:64:c2:3f:0d:
                    82:36:2e:2d:f2:07:c8:5b:63:31:6f:7b:c7:6d:89:
                    e9:fb:7b:f9:1d:d6:0e:27:16:ee:1e:b9:a3:74:e6:
                    a2:22:1e:32:fc:84:a7:49:0c:f3:79:f7:c9:f4:1c:
                    16:5d:f1:79:cd:13:c4:d2:c6:49:32:85:34:08:ff:
                    30:1d:a1:f3:9e:db:1e:94:da:cd:b6:e8:36:40:9b:
                    ee:93:2f:d2:c3:80:55:ec:94:59:6a:d1:9d:48:c2:
                    ee:df:34:e8:09:51:ce:5e:7c:f9:77:02:cb:5f:e6:
                    89:ed:af:36:de:0e:61:84:e2:be:dd:df:af:f8:98:
                    d5:60:e4:29:28:26:29:66:2a:62:c1:b2:3f:0b:5e:
                    ec:e6:45:81:e9:9c:b3:97:f9:c4:29:b8:d4:b5:7b:
                    15:01:02:0a:99:5d:9d:58:c3:60:8a:e6:14:61:12:
                    a1:03:96:8c:44:60:9e:33:04:1b:79:7e:e9:e9:50:
                    df:21:8c:c5:d5:ef:80:6c:c4:bd:41:8e:30:60:a3:
                    b6:c4:c1:ef:a0:1a:82:76:f0:26:1f:e3:1f:e0:3c:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CC:D5:2A:C9:1B:1D:BA:23:FB:20:08:5D:13:FD:FE:62:39:6B:10
            X509v3 Authority Key Identifier:
                keyid:8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/323830343a393266383a3a2f33322d3438203d3e20323734373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:0c:70:c5:bc:27:8a:4b:78:2f:fa:48:1a:af:b7:64:e0:3d:
         bc:57:a3:28:fc:04:df:c2:72:1e:b9:6e:26:ea:5b:46:f8:3d:
         3c:86:0c:cb:8a:73:2a:12:03:d3:41:37:f9:b4:21:1f:1a:20:
         f0:8d:a8:e4:6d:46:dc:58:9a:6b:46:3c:91:56:96:c0:e2:6c:
         a5:31:f4:cf:c7:24:a3:af:7f:23:d0:e4:84:6d:4c:ee:4c:97:
         07:0f:d3:3d:b2:95:81:84:d2:e8:c7:75:fa:b2:31:68:a1:c7:
         40:b9:09:99:45:f4:75:a3:c2:6d:da:37:ba:1e:e1:72:99:5b:
         ee:4c:32:22:f7:7b:76:b9:0f:77:5a:13:c3:79:1a:94:cf:3d:
         0b:11:96:bf:b7:f9:9f:06:e6:fa:7f:66:4d:87:b8:43:0f:26:
         31:52:57:8f:33:ce:d9:36:53:7e:8d:34:72:23:bf:bc:5e:3e:
         a5:71:15:22:de:16:0e:89:8f:8f:ad:b0:de:2c:12:f6:fc:69:
         b3:10:21:db:66:11:ab:1e:bb:a8:17:8d:88:60:a5:a0:6a:5a:
         57:f3:30:19:a8:c1:0d:2d:0b:13:42:7c:41:98:73:05:d4:a1:
         23:15:ad:a9:08:03:cf:47:ab:cc:ea:a8:21:e1:2d:84:2a:78:
         09:d2:b3:4b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYqRO44p+qMhPw4rSHv3GKA1ZXa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE4NzNDM0RDMDYxODIxRkZFRjFDMjBFNjQ4NDUxQjhG
RTY0NkZBRTAeFw0yNjAxMDcxMTU3MzRaFw0yNzAxMDYxMjAyMzRaMDMxMTAvBgNV
BAMTKDZFQ0NENTJBQzkxQjFEQkEyM0ZCMjAwODVEMTNGREZFNjIzOTZCMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sC4mgEwFTHLVz2NzshLkGVix
YqyQIzkOhiLLavtiixl8sh29OirRZMI/DYI2Li3yB8hbYzFve8dtien7e/kd1g4n
Fu4euaN05qIiHjL8hKdJDPN598n0HBZd8XnNE8TSxkkyhTQI/zAdofOe2x6U2s22
6DZAm+6TL9LDgFXslFlq0Z1Iwu7fNOgJUc5efPl3Astf5ontrzbeDmGE4r7d36/4
mNVg5CkoJilmKmLBsj8LXuzmRYHpnLOX+cQpuNS1exUBAgqZXZ1Yw2CK5hRhEqED
loxEYJ4zBBt5funpUN8hjMXV74BsxL1BjjBgo7bEwe+gGoJ28CYf4x/gPFeHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUbszVKskbHboj+yAIXRP9/mI5axAwHwYDVR0j
BBgwFoAUioc8PcBhgh/+8cIOZIRRuP5kb64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFh
a2UvMC84QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBODczQzNEQzA2MTgyMUZG
RUYxQzIwRTY0ODQ1MUI4RkU2NDZGQUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6UTR4c05tSnJ1NVlhZGlIQjhoMWFlRjVHU3BLc2dCc3ZZUzZhS0ExYWtlLzAv
MzIzODMwMzQzYTM5MzI2NjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzM0
MzczNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASS+DANBgkqhkiG9w0BAQsFAAOCAQEAVwxwxbwn
ikt4L/pIGq+3ZOA9vFejKPwE38JyHrluJupbRvg9PIYMy4pzKhID00E3+bQhHxog
8I2o5G1G3Fiaa0Y8kVaWwOJspTH0z8cko69/I9DkhG1M7kyXBw/TPbKVgYTS6Md1
+rIxaKHHQLkJmUX0daPCbdo3uh7hcplb7kwyIvd7drkPd1oTw3kalM89CxGWv7f5
nwbm+n9mTYe4Qw8mMVJXjzPO2TZTfo00ciO/vF4+pXEVIt4WDomPj62w3iwS9vxp
sxAh22YRqx67qBeNiGCloGpaV/MwGajBDS0LE0J8QZhzBdShIxWtqQgDz0erzOqo
IeEthCp4CdKzSw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:46:45 2026 by rpki-client