This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/323830343a353865633a343030303a3a2f33342d3334203d3e20323638313538.roa
File:                     323830343a353865633a343030303a3a2f33342d3334203d3e20323638313538.roa (raw, json)
Hash identifier:          aiuUe0gD5+to1Tqz7ric42KkwisZAxf8bLGf9HGcGJQ=
Subject key identifier:   23:7E:1E:5C:09:20:60:3A:9A:9B:F6:47:4F:BB:E9:2F:DC:AB:8C:8F
Certificate issuer:       /CN=87FAD8F85A284E3B305BEB86544D2840BEA7FA2F
Certificate serial:       438350050BBF771FF774F60106FB02A46695DD7E
Authority key identifier: 87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/323830343a353865633a343030303a3a2f33342d3334203d3e20323638313538.roa
Signing time:             Fri 16 Jan 2026 17:05:30 +0000
ROA not before:           Fri 16 Jan 2026 17:00:30 +0000
ROA not after:            Fri 15 Jan 2027 17:05:30 +0000
asID:                     268158
IP address blocks:        2804:58ec:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.crl
                          rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:83:50:05:0b:bf:77:1f:f7:74:f6:01:06:fb:02:a4:66:95:dd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87FAD8F85A284E3B305BEB86544D2840BEA7FA2F
        Validity
            Not Before: Jan 16 17:00:30 2026 GMT
            Not After : Jan 15 17:05:30 2027 GMT
        Subject: CN=237E1E5C0920603A9A9BF6474FBBE92FDCAB8C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:d9:be:a0:0c:87:e6:78:11:7a:b3:10:ad:
                    40:73:3d:b3:ab:54:be:88:86:1f:4e:d4:a6:a8:99:
                    21:fe:2d:b1:a5:09:d7:f9:37:a7:95:6c:76:7f:1c:
                    02:21:cd:16:96:5b:1c:58:24:01:f1:52:67:21:19:
                    c3:59:77:6f:87:3d:29:61:ad:20:45:38:d7:1e:60:
                    6c:ff:d6:d4:0b:e7:40:fa:31:40:e4:cf:e7:2b:67:
                    0c:fd:67:96:df:da:b8:d9:ae:70:6c:23:03:86:42:
                    2c:69:39:77:a6:ab:b5:27:f7:0e:94:c4:bd:15:f5:
                    10:12:67:7a:65:ff:39:1f:1f:ac:95:1c:5e:80:5f:
                    7f:ab:e0:0d:8b:c3:32:53:c6:d4:bd:d9:7e:13:28:
                    33:1c:56:ef:32:a7:c5:60:f1:7a:8e:14:d8:e3:68:
                    4f:40:61:47:bf:17:1b:6f:01:96:8c:38:65:72:7d:
                    e7:4f:a1:f0:31:f3:97:93:be:f1:ca:f7:70:1b:01:
                    66:75:75:67:ce:22:28:a6:29:40:5e:2d:a7:9f:96:
                    a4:4c:d2:3f:e6:f0:ea:6b:57:ec:d8:82:cd:60:09:
                    a0:0d:d6:a0:56:44:3e:1d:08:dc:9d:a3:e3:4a:50:
                    eb:eb:f8:24:f2:20:68:4f:a0:fb:f0:3e:c6:a2:7e:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7E:1E:5C:09:20:60:3A:9A:9B:F6:47:4F:BB:E9:2F:DC:AB:8C:8F
            X509v3 Authority Key Identifier:
                keyid:87:FA:D8:F8:5A:28:4E:3B:30:5B:EB:86:54:4D:28:40:BE:A7:FA:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87FAD8F85A284E3B305BEB86544D2840BEA7FA2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQLbophFt2yysXocPt5U5ttGEwG7nEGoo1vVqBBHzoEr/0/323830343a353865633a343030303a3a2f33342d3334203d3e20323638313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58ec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c4:8e:b1:2c:4e:d2:4f:d1:39:64:02:41:d7:16:d7:a3:68:8c:
         91:c6:13:28:90:f0:6f:80:49:72:30:e4:a0:50:aa:3f:5c:93:
         fb:22:36:f7:a0:1e:62:9a:f0:7f:cc:42:e6:f4:a3:d4:f3:38:
         f1:0e:6c:fb:de:c2:73:e0:55:2c:33:72:37:28:3f:a0:9c:cd:
         45:ec:c2:c0:cf:17:49:12:ea:ca:d7:39:e6:31:f5:85:a6:a0:
         0f:6f:6c:04:4b:7f:75:ae:14:c1:fa:d2:df:48:8b:93:73:5f:
         e9:59:70:d0:40:7a:7f:22:c1:bf:1a:ce:5f:df:f5:b3:5c:c3:
         42:6e:f0:18:32:95:0f:59:76:88:08:f2:42:fb:36:57:b4:e9:
         cb:32:57:7a:5e:46:08:b2:e9:0e:b7:1c:63:34:25:1c:0d:da:
         d3:11:fd:96:c8:7a:a8:bb:27:55:1d:c7:67:3a:5a:e7:64:5b:
         e1:59:e2:ad:db:20:38:be:44:21:7a:7b:db:c7:0c:b1:dc:31:
         86:ed:68:b9:f4:2c:b8:6d:39:5a:0a:e1:a8:ad:bb:e4:49:f0:
         0c:35:bf:ac:62:03:83:9c:1a:96:ce:d6:29:60:ad:3d:ff:63:
         e0:e0:27:f2:fd:cc:04:f8:77:d2:9d:f7:18:5f:fa:2d:35:24:
         36:e6:f0:09
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQ4NQBQu/dx/3dPYBBvsCpGaV3X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdGQUQ4Rjg1QTI4NEUzQjMwNUJFQjg2NTQ0RDI4NDBC
RUE3RkEyRjAeFw0yNjAxMTYxNzAwMzBaFw0yNzAxMTUxNzA1MzBaMDMxMTAvBgNV
BAMTKDIzN0UxRTVDMDkyMDYwM0E5QTlCRjY0NzRGQkJFOTJGRENBQjhDOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpNm+oAyH5ngRerMQrUBzPbOr
VL6Ihh9O1KaomSH+LbGlCdf5N6eVbHZ/HAIhzRaWWxxYJAHxUmchGcNZd2+HPSlh
rSBFONceYGz/1tQL50D6MUDkz+crZwz9Z5bf2rjZrnBsIwOGQixpOXemq7Un9w6U
xL0V9RASZ3pl/zkfH6yVHF6AX3+r4A2LwzJTxtS92X4TKDMcVu8yp8Vg8XqOFNjj
aE9AYUe/FxtvAZaMOGVyfedPofAx85eTvvHK93AbAWZ1dWfOIiimKUBeLaeflqRM
0j/m8OprV+zYgs1gCaAN1qBWRD4dCNydo+NKUOvr+CTyIGhPoPvwPsaifmDzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUI34eXAkgYDqam/ZHT7vpL9yrjI8wHwYDVR0j
BBgwFoAUh/rY+FooTjswW+uGVE0oQL6n+i8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FMYm9waEZ0Mnl5c1hvY1B0NVU1dHRHRXdHN25FR29vMXZWcUJCSHpv
RXIvMC84N0ZBRDhGODVBMjg0RTNCMzA1QkVCODY1NDREMjg0MEJFQTdGQTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3RkFEOEY4NUEyODRFM0Iz
MDVCRUI4NjU0NEQyODQwQkVBN0ZBMkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRTGJvcGhGdDJ5eXNYb2NQdDVVNXR0R0V3RzduRUdvbzF2VnFCQkh6b0VyLzAv
MzIzODMwMzQzYTM1Mzg2NTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMxMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWOxAMA0GCSqGSIb3DQEBCwUA
A4IBAQDEjrEsTtJP0TlkAkHXFtejaIyRxhMokPBvgElyMOSgUKo/XJP7Ijb3oB5i
mvB/zELm9KPU8zjxDmz73sJz4FUsM3I3KD+gnM1F7MLAzxdJEurK1znmMfWFpqAP
b2wES391rhTB+tLfSIuTc1/pWXDQQHp/IsG/Gs5f3/WzXMNCbvAYMpUPWXaICPJC
+zZXtOnLMld6XkYIsukOtxxjNCUcDdrTEf2WyHqouydVHcdnOlrnZFvhWeKt2yA4
vkQhenvbxwyx3DGG7Wi59Cy4bTlaCuGorbvkSfAMNb+sYgODnBqWztYpYK09/2Pg
4Cfy/cwE+HfSnfcYX/otNSQ25vAJ
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:21:23 2026 by rpki-client