This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a313936633a3a2f33322d3438203d3e20323632393037.roa
File:                     323830343a313936633a3a2f33322d3438203d3e20323632393037.roa (raw, json)
Hash identifier:          StC0dKTt4yP6Rd0dLDAMq729d3pHXpksqrLwK8NBPzA=
Subject key identifier:   BA:1A:55:4C:50:B3:16:5B:C0:44:83:C8:26:A6:5B:E3:E4:57:34:60
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       0A1611370F223DDAFBE58E4239F5867A0F35A52D
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a313936633a3a2f33322d3438203d3e20323632393037.roa
Signing time:             Mon 19 Jan 2026 17:41:53 +0000
ROA not before:           Mon 19 Jan 2026 17:36:53 +0000
ROA not after:            Mon 18 Jan 2027 17:41:53 +0000
asID:                     262907
IP address blocks:        2804:196c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:16:11:37:0f:22:3d:da:fb:e5:8e:42:39:f5:86:7a:0f:35:a5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jan 19 17:36:53 2026 GMT
            Not After : Jan 18 17:41:53 2027 GMT
        Subject: CN=BA1A554C50B3165BC04483C826A65BE3E4573460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:5f:9b:bb:eb:bb:df:87:d5:cb:fe:2a:29:
                    29:6d:7e:de:b0:ad:83:c4:86:ad:dd:8b:b7:3a:b4:
                    5a:a2:90:54:30:77:55:00:b6:ed:a9:8b:29:db:95:
                    61:2e:ae:d2:d0:8d:5a:1e:6d:db:50:74:1f:f2:d1:
                    87:65:ef:f4:1d:71:54:c4:84:aa:69:db:40:60:c2:
                    62:4c:29:b2:66:e9:10:e9:47:0a:88:41:6b:ae:62:
                    fd:88:68:e0:8f:0b:19:d0:93:d9:0b:0d:41:e1:74:
                    b5:fe:fa:56:14:31:a4:2c:7f:1f:9f:2b:30:84:5a:
                    68:03:b1:a2:69:fc:41:d1:d2:05:d8:d2:4e:0f:93:
                    6f:48:63:7d:64:36:b4:f3:a4:4c:ab:4b:72:43:35:
                    cd:e1:da:fa:13:f0:66:9e:06:59:3e:e1:e9:9a:bd:
                    62:2b:0c:61:99:82:3b:94:0b:aa:ae:08:40:08:61:
                    89:a6:c9:94:14:48:7e:19:c2:67:49:5a:94:86:62:
                    75:f5:18:01:28:c3:dc:27:3b:26:f6:9a:96:ad:8d:
                    ec:f9:94:85:0d:69:c0:46:33:f8:d6:0f:c3:bb:24:
                    da:e6:59:75:a8:a2:18:74:be:41:02:66:b7:50:00:
                    23:f6:cd:81:17:d8:26:12:2d:8e:32:fd:7f:1b:d0:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1A:55:4C:50:B3:16:5B:C0:44:83:C8:26:A6:5B:E3:E4:57:34:60
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a313936633a3a2f33322d3438203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:196c::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:1d:1c:02:56:56:aa:a3:32:5e:63:af:de:d3:82:2c:96:e7:
         45:84:0e:a0:10:18:4b:c9:2d:8b:61:9f:c7:ef:25:0f:ac:04:
         5d:ca:84:d6:51:e9:f3:ae:9e:e8:ec:5f:f0:6d:f1:77:fe:26:
         4e:c0:37:ce:ee:4c:bc:6a:48:f1:38:c2:29:1e:c1:f1:61:58:
         d5:c3:f2:7c:0f:af:3d:29:31:f0:a6:f6:ce:bd:de:10:a5:0c:
         36:4d:e3:c1:ef:d4:29:a8:b7:29:7a:e2:7f:39:c5:5f:04:2e:
         f5:84:c3:c1:b4:fb:16:e3:9c:28:90:86:f0:9c:a9:83:60:2e:
         63:61:c5:49:b3:6f:d2:7a:11:c3:36:5f:16:91:c5:39:be:3f:
         93:3f:72:22:ce:84:4a:2c:ec:52:3c:b3:4b:b4:cf:8d:01:41:
         14:f9:0d:6f:ef:28:56:66:6d:ae:89:0a:c3:d1:d1:75:5e:63:
         3f:ca:1c:cf:dd:73:67:7c:4e:71:72:f3:d9:9c:6d:6e:33:9b:
         3c:c2:d0:06:93:a9:f6:c1:2d:3c:85:41:96:20:a7:d8:90:5a:
         7b:dc:e2:d6:70:13:39:22:42:97:95:01:e1:e2:35:1b:ce:01:
         99:1e:d2:1f:c3:6c:3d:08:b7:22:25:52:8b:c3:a6:26:e5:ee:
         e1:b7:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:44:27 2026 by rpki-client