This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33342d3334203d3e20323633383931.roa
File:                     323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (raw, json)
Hash identifier:          lgc35899CD1qdITKmLQLxPFgoyjYP0D9XSh+IOdRMhc=
Subject key identifier:   05:E7:DF:7A:61:D8:2B:E6:64:D4:D0:FD:AE:C6:6D:0C:D3:AA:7A:B1
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       41D5043DF13B3D26B608186459C045C6E8CB080A
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33342d3334203d3e20323633383931.roa
Signing time:             Thu 22 Jan 2026 12:01:00 +0000
ROA not before:           Thu 22 Jan 2026 11:56:00 +0000
ROA not after:            Thu 21 Jan 2027 12:01:00 +0000
asID:                     263891
IP address blocks:        2804:2748::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d5:04:3d:f1:3b:3d:26:b6:08:18:64:59:c0:45:c6:e8:cb:08:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Jan 22 11:56:00 2026 GMT
            Not After : Jan 21 12:01:00 2027 GMT
        Subject: CN=05E7DF7A61D82BE664D4D0FDAEC66D0CD3AA7AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:98:a5:78:63:84:fb:12:4c:1f:05:4f:4b:
                    c1:ad:04:b0:72:c2:36:74:e2:44:c2:db:36:98:0b:
                    02:d0:4b:09:9a:80:c5:bc:fc:c0:70:c2:5e:5e:fd:
                    2d:a9:a6:c9:84:94:26:10:c4:04:8f:73:c5:29:c7:
                    ab:b4:64:30:05:4a:e5:0b:80:86:e6:f9:57:cc:15:
                    b4:35:b6:ad:c2:bf:a9:6d:70:8e:59:d4:bf:64:29:
                    39:0b:e6:61:df:3c:7c:b7:d8:c2:fd:f1:fb:22:ef:
                    07:14:32:b4:30:43:64:c7:a5:b1:a2:f3:b8:51:35:
                    0e:42:f9:2d:6c:00:d5:82:02:b3:5a:ea:37:a5:3d:
                    5e:ae:56:a2:66:f2:a5:9e:64:fa:91:fc:65:06:7e:
                    e6:70:80:e2:d2:75:90:4b:45:6b:36:29:28:b9:d7:
                    cb:b3:4b:58:ad:6f:cb:7d:e9:b4:08:83:06:6b:cf:
                    18:39:10:e9:ba:29:b9:89:da:a4:f4:8d:f5:e5:91:
                    c9:9c:8b:63:49:66:13:59:8d:18:42:ef:88:fc:7b:
                    d8:8b:ab:b0:d9:72:16:65:44:38:44:43:2a:ee:e7:
                    99:9c:75:0d:78:f3:3b:12:1f:6d:75:4e:fa:95:80:
                    5a:85:f2:f9:47:68:8b:d8:c8:36:ad:af:2e:1f:00:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E7:DF:7A:61:D8:2B:E6:64:D4:D0:FD:AE:C6:6D:0C:D3:AA:7A:B1
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33342d3334203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2748::/34

    Signature Algorithm: sha256WithRSAEncryption
         b3:99:77:ec:89:0e:90:61:93:d2:73:41:3d:fe:7b:1e:2a:76:
         ae:49:40:8a:55:6f:e9:dc:62:fd:af:78:17:e7:ef:77:7a:69:
         8d:38:e0:6f:10:02:87:55:35:0c:27:32:08:ed:5a:ab:33:8e:
         af:fd:a6:a7:52:18:32:ae:b8:df:60:4f:e8:51:34:d6:37:1d:
         55:21:cc:c4:36:17:d6:25:70:ce:33:43:44:3a:87:b4:7b:a2:
         0c:5c:7f:71:e2:f9:03:7f:d0:e8:e7:b0:bd:52:80:a6:ca:03:
         37:a3:50:fc:06:88:aa:1b:b8:fa:61:15:00:b0:86:31:46:9b:
         d6:3a:d7:05:21:05:28:c0:ee:3d:e9:d7:a0:76:73:3a:b2:e3:
         09:51:c6:d6:17:4a:45:ae:93:fc:f0:2e:8d:67:fc:46:27:0c:
         37:78:f4:a4:82:a9:90:6b:d7:ab:ba:92:44:01:2a:34:ca:1e:
         bb:ca:ba:1c:3e:41:73:6f:85:bd:ff:0a:e9:52:cf:d4:79:f4:
         36:88:b0:6f:48:77:68:7a:26:38:44:bf:9a:de:fd:3b:94:64:
         4f:b7:5b:22:23:36:0a:ac:b2:a2:36:b9:6f:34:74:02:d6:5f:
         b7:77:f7:e2:6e:2c:af:c6:59:a8:7f:48:00:98:ba:2d:ba:7e:
         0a:a6:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:02 2026 by rpki-client