This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa
File:                     323830343a333836633a3a2f33322d3336203d3e20323636343736.roa (raw, json)
Hash identifier:          mYdq4cF86zKB5Gl0reDFqJxhgT+pwZ04d72aOisLuxo=
Subject key identifier:   8D:04:DB:4B:4D:74:CB:50:85:F3:B3:95:37:BA:1C:34:58:DD:FA:14
Certificate issuer:       /CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Certificate serial:       6A084E3278169E7FA91B66C4C8937E482959DC86
Authority key identifier: C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa
Signing time:             Wed 07 Jan 2026 13:04:29 +0000
ROA not before:           Wed 07 Jan 2026 12:59:29 +0000
ROA not after:            Wed 06 Jan 2027 13:04:29 +0000
asID:                     266476
IP address blocks:        2804:386c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl
                          rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:08:4e:32:78:16:9e:7f:a9:1b:66:c4:c8:93:7e:48:29:59:dc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
        Validity
            Not Before: Jan  7 12:59:29 2026 GMT
            Not After : Jan  6 13:04:29 2027 GMT
        Subject: CN=8D04DB4B4D74CB5085F3B39537BA1C3458DDFA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:79:a2:4b:10:c5:9d:7f:e5:3a:a7:cc:00:
                    8a:3c:77:43:e0:d3:29:ef:35:50:91:57:6c:ab:e6:
                    31:f1:f7:70:d1:28:33:36:50:76:62:75:a7:69:c5:
                    7d:cf:e6:57:ff:71:b2:95:17:51:f9:e3:fd:94:54:
                    14:c2:be:1c:5d:70:9b:e7:86:d7:e4:11:0d:e8:5f:
                    0a:8e:5a:07:60:a7:cc:90:ca:fc:77:eb:32:71:0e:
                    0c:e5:ca:1a:ed:45:bf:80:5c:d8:86:c1:2a:6b:2a:
                    61:82:57:31:3b:7e:cc:7b:86:30:51:98:c0:97:65:
                    e2:24:6c:ac:9a:80:54:c5:90:31:5b:f9:81:51:77:
                    03:35:04:e8:81:a9:f3:99:00:3e:bf:07:2d:c7:91:
                    dd:21:bd:2f:ed:0f:4f:d3:cb:c3:66:8b:fe:0b:08:
                    dc:ca:37:73:82:eb:3f:d1:f0:1b:7e:8e:ad:3d:03:
                    48:39:4d:a0:5f:0a:38:20:33:89:44:56:37:e5:c4:
                    d8:4c:21:d5:c1:b2:82:0a:a3:c1:f0:2a:e1:5b:bf:
                    30:c8:f0:86:d8:f3:71:04:62:33:9a:8e:6c:0a:27:
                    2f:92:76:39:45:56:ca:f4:0c:89:40:3c:aa:0b:fd:
                    61:4f:a2:6d:00:96:60:0c:3f:0a:eb:87:82:eb:f9:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:04:DB:4B:4D:74:CB:50:85:F3:B3:95:37:BA:1C:34:58:DD:FA:14
            X509v3 Authority Key Identifier:
                keyid:C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:386c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:8b:86:cf:05:78:c8:62:99:2b:76:63:b0:71:a5:4c:28:2d:
         cc:a1:ba:da:62:37:7b:9d:12:58:0f:dd:03:09:02:2c:68:22:
         80:45:30:f4:88:d1:84:73:24:6d:0e:43:46:29:37:77:e6:54:
         b9:b9:d0:4f:be:52:fc:4d:8d:49:fd:96:0b:c5:83:f6:a3:0a:
         0e:c6:a6:ea:21:ce:7b:c4:e2:35:de:c2:02:3c:59:3a:0e:ea:
         a1:5a:d6:44:38:6b:3b:39:bb:9f:c7:94:72:48:dd:e9:08:81:
         99:66:cb:dd:53:7c:a0:ca:c6:27:2d:90:40:0d:59:b5:85:fe:
         30:e1:19:31:54:ac:52:2a:53:ef:c3:a0:06:ea:c8:c4:bd:a4:
         b5:d5:64:c3:eb:3b:4a:11:16:94:1e:e9:81:85:e9:94:0a:6c:
         c3:43:47:22:1e:e3:6d:82:55:b9:78:7d:05:f5:b4:78:1b:29:
         36:d9:30:88:d8:79:75:58:9a:94:bd:f7:f6:61:26:36:6a:ee:
         27:6f:c6:c0:bd:c0:aa:d2:18:eb:59:31:f2:30:c4:0d:6b:96:
         b2:aa:30:fc:ae:0c:04:a8:af:08:f8:c9:b7:6b:0f:8c:61:15:
         d9:c0:ed:67:51:61:c1:e3:4e:c8:49:1c:45:9b:fe:92:92:2d:
         e4:97:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:59 2026 by rpki-client