This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
File:                     323830343a363566633a3a2f33322d3634203d3e20323639353236.roa (raw, json)
Hash identifier:          9yJTB1aQNRZQ7VBDWfm0bQSwLjvSqD2OSGJcvOqnuOc=
Subject key identifier:   C6:F8:E4:39:1F:A7:17:64:24:F5:84:BF:6C:8C:1D:D1:56:37:39:4E
Certificate issuer:       /CN=BF8ED8F6E25060930593D3682BBEAA1A08356BAC
Certificate serial:       22CA04ED14A6FB9891828FE7211991C5E44763A3
Authority key identifier: BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
Signing time:             Wed 07 Jan 2026 12:34:26 +0000
ROA not before:           Wed 07 Jan 2026 12:29:26 +0000
ROA not after:            Wed 06 Jan 2027 12:34:26 +0000
asID:                     269526
IP address blocks:        2804:65fc::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.crl
                          rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 04:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ca:04:ed:14:a6:fb:98:91:82:8f:e7:21:19:91:c5:e4:47:63:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF8ED8F6E25060930593D3682BBEAA1A08356BAC
        Validity
            Not Before: Jan  7 12:29:26 2026 GMT
            Not After : Jan  6 12:34:26 2027 GMT
        Subject: CN=C6F8E4391FA7176424F584BF6C8C1DD15637394E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:d2:96:ca:f1:09:8e:29:32:bb:7d:c2:45:
                    c4:c3:74:ef:c8:a0:54:9b:d1:8f:d9:ec:ae:55:7f:
                    c4:e8:b9:54:55:bc:9f:b2:bc:c9:4c:cb:1b:c0:8d:
                    b0:3b:48:1f:d1:e4:23:c9:b7:81:82:30:95:9e:91:
                    4e:b7:9b:c6:51:a8:43:9d:31:c9:a6:d5:69:25:b0:
                    ad:48:f1:77:e6:37:47:3b:05:8f:f8:5a:fc:52:4a:
                    6d:c1:c1:c0:04:d2:ef:8f:57:26:f1:02:e0:ae:31:
                    13:6c:44:6a:05:1e:b0:e3:db:54:d2:98:f8:38:83:
                    37:0e:7c:39:fe:6e:22:8a:33:1c:9f:a4:56:eb:91:
                    a7:77:26:d6:d6:5f:67:1f:95:6d:f2:75:e4:df:c9:
                    15:04:c8:9b:db:18:58:3d:de:4b:2f:b9:67:0a:c7:
                    74:46:15:cb:61:9f:fc:f7:4b:14:52:b1:77:bd:2b:
                    d7:2f:46:e8:0d:1a:97:e2:62:ab:e8:da:c9:50:ef:
                    54:0d:a1:d2:f7:ae:20:b4:5b:87:64:c5:1a:8b:ad:
                    22:17:a3:1a:db:29:05:80:cd:28:d5:ae:08:53:54:
                    fe:d9:53:b5:86:13:91:2b:1b:7b:96:69:b1:d1:da:
                    dc:08:f7:89:74:bd:ae:e6:f1:6f:b0:97:d7:05:4f:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F8:E4:39:1F:A7:17:64:24:F5:84:BF:6C:8C:1D:D1:56:37:39:4E
            X509v3 Authority Key Identifier:
                keyid:BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:d9:98:15:4a:2e:17:2e:da:a3:cd:d8:1d:67:2a:29:76:
         6b:2e:f6:81:c1:34:41:63:46:d0:00:9a:d4:ba:79:6a:34:d8:
         04:6c:2c:6b:5a:9b:b3:64:f3:d8:a1:87:52:66:7a:aa:c9:66:
         42:d2:2c:25:98:0e:e8:de:6f:34:7f:4b:d3:30:a5:bd:fa:3b:
         7b:68:a2:b9:f2:69:3c:ae:1b:11:0d:2a:54:a1:f4:dd:b5:9d:
         ee:7a:54:d2:f2:29:da:3d:f0:07:72:d9:63:8a:49:c5:d3:f4:
         20:f3:58:b2:50:2f:c8:d0:87:1e:50:49:45:39:66:8e:ab:c5:
         13:26:a6:9a:4f:a1:02:97:83:cc:b8:da:71:b7:a4:9f:5f:ac:
         32:79:1f:08:29:04:16:e0:91:62:05:ec:fc:fb:8a:3e:1e:e6:
         e7:a3:b9:36:a9:21:f3:7c:ab:b5:69:96:82:11:10:ea:e1:7f:
         92:e8:a6:9e:bc:b3:85:d7:a9:2e:cf:14:88:ec:6c:8c:a4:b6:
         cf:11:9a:70:61:da:4a:a1:3f:4d:f1:1b:14:f7:cf:f5:0c:b4:
         12:d3:87:91:cb:3d:c8:dd:ea:9e:68:b8:89:b3:97:3d:b9:9e:
         90:d1:45:7e:ce:46:23:fe:06:6b:fd:1b:63:ea:45:bb:c2:21:
         b3:dc:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:27:00 2026 by rpki-client