This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/323830343a366533343a3a2f33322d3438203d3e20323730353832.roa
File:                     323830343a366533343a3a2f33322d3438203d3e20323730353832.roa (raw, json)
Hash identifier:          E12JdP8T9YwmHvjAahL/+bgQrDVqfFsjxrw8vmL4k3c=
Subject key identifier:   D5:37:74:54:20:92:AF:76:95:BC:28:00:BA:8A:65:F5:BA:78:8A:B8
Certificate issuer:       /CN=1143EA5CEE3BF26ED92983CA585F188D893EA4CB
Certificate serial:       024979417802A73C7D17A17157D86E2D46C66572
Authority key identifier: 11:43:EA:5C:EE:3B:F2:6E:D9:29:83:CA:58:5F:18:8D:89:3E:A4:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/323830343a366533343a3a2f33322d3438203d3e20323730353832.roa
Signing time:             Mon 05 Jan 2026 20:17:42 +0000
ROA not before:           Mon 05 Jan 2026 20:12:42 +0000
ROA not after:            Mon 04 Jan 2027 20:17:42 +0000
asID:                     270582
IP address blocks:        2804:6e34::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.crl
                          rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 00:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:49:79:41:78:02:a7:3c:7d:17:a1:71:57:d8:6e:2d:46:c6:65:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1143EA5CEE3BF26ED92983CA585F188D893EA4CB
        Validity
            Not Before: Jan  5 20:12:42 2026 GMT
            Not After : Jan  4 20:17:42 2027 GMT
        Subject: CN=D53774542092AF7695BC2800BA8A65F5BA788AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:03:3b:09:60:78:a1:ab:93:0e:b3:bb:9b:
                    f6:63:dd:6d:b4:a8:fd:55:d2:2d:4f:17:a9:36:16:
                    aa:f8:ce:09:ee:1f:27:75:33:22:22:0d:8a:f2:91:
                    ca:4b:82:a9:93:a4:62:45:19:87:7f:d9:a4:9a:7f:
                    09:6a:d7:c3:f4:6d:2f:91:eb:ec:4c:f4:cd:ef:ee:
                    c1:7a:d0:4c:c0:dc:5a:24:21:06:54:92:ef:c1:d1:
                    79:b9:b7:57:ff:a1:85:5e:45:21:57:20:60:a4:bd:
                    52:5a:be:71:29:d4:db:e6:15:b9:99:48:ec:0c:91:
                    2f:73:4e:39:5b:6b:88:d0:6d:8e:b6:df:48:86:6e:
                    65:01:59:2a:ed:c8:1e:a5:3c:0a:df:5a:06:9c:70:
                    b6:66:cf:35:d2:5f:67:59:c3:c4:de:80:cb:43:c1:
                    46:9b:9a:be:1e:f6:6a:fd:02:9f:fd:0a:5a:ea:5b:
                    71:71:3e:be:c0:9c:7d:02:5f:c0:8d:9c:5f:18:1f:
                    7e:3d:bb:92:c0:ac:5f:e5:e8:3f:38:19:a6:bd:90:
                    11:e1:04:4a:6b:60:0e:83:c7:81:d8:a9:b3:36:99:
                    cc:48:f5:d0:70:78:64:36:0a:dd:3c:29:fd:fe:6a:
                    2f:6a:20:c8:54:63:56:7a:b9:71:ad:48:ec:b6:d5:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:37:74:54:20:92:AF:76:95:BC:28:00:BA:8A:65:F5:BA:78:8A:B8
            X509v3 Authority Key Identifier:
                keyid:11:43:EA:5C:EE:3B:F2:6E:D9:29:83:CA:58:5F:18:8D:89:3E:A4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1143EA5CEE3BF26ED92983CA585F188D893EA4CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/323830343a366533343a3a2f33322d3438203d3e20323730353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:fe:0a:ff:28:49:0f:82:4e:88:28:59:2d:0d:2a:42:01:0d:
         99:74:51:fc:13:aa:08:58:b9:4d:c1:f0:bc:47:bc:40:16:1d:
         51:f1:a4:ad:89:76:96:3e:4c:54:36:9b:a2:26:e6:e9:b4:44:
         c7:aa:59:3c:fb:56:35:97:2d:07:9f:8f:18:f3:03:0a:12:e2:
         93:6f:b9:26:80:91:06:7a:ec:fd:8d:31:51:16:22:bb:1f:b0:
         3f:70:95:5a:a3:3d:d0:4d:99:13:78:05:1c:68:a5:8d:26:c4:
         ab:1f:36:96:ce:2a:67:43:39:86:22:2e:55:4d:42:c4:d4:ac:
         3a:9e:58:af:b0:d4:31:e8:5d:51:2a:a9:62:a4:af:75:cf:eb:
         37:a0:e0:be:78:d3:bf:82:bd:68:0d:56:44:41:30:90:b0:cf:
         ae:68:22:10:fc:80:09:2c:d1:94:fc:62:4b:93:99:55:13:39:
         d4:30:a4:b9:d1:0b:53:8f:d6:27:e5:7b:58:76:70:90:7e:ac:
         2d:4d:9e:14:da:e4:23:2a:b6:51:6a:7f:56:53:05:53:bc:0e:
         a1:5f:e8:81:4e:f7:f1:fd:44:90:fd:a8:ee:42:a0:40:fb:d9:
         ed:db:3e:ee:6d:21:8c:8b:e2:32:43:02:43:db:18:bb:97:89:
         2f:93:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:27:18 2026 by rpki-client