This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a333062633a3a2f33322d3438203d3e20323632393037.roa
File:                     323830343a333062633a3a2f33322d3438203d3e20323632393037.roa (raw, json)
Hash identifier:          hv8cdmXod+3m2nD9zuDrJAE6FWq9+3gD3b6QgWEv4XU=
Subject key identifier:   5B:EB:B7:FA:21:E5:91:BA:D3:BC:35:B0:6F:C5:4C:F0:75:EF:AA:92
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       0EAE4F6209909DF3BC3311156E5033CA931450C7
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a333062633a3a2f33322d3438203d3e20323632393037.roa
Signing time:             Thu 08 Jan 2026 12:14:40 +0000
ROA not before:           Thu 08 Jan 2026 12:09:40 +0000
ROA not after:            Thu 07 Jan 2027 12:14:40 +0000
asID:                     262907
IP address blocks:        2804:30bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ae:4f:62:09:90:9d:f3:bc:33:11:15:6e:50:33:ca:93:14:50:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jan  8 12:09:40 2026 GMT
            Not After : Jan  7 12:14:40 2027 GMT
        Subject: CN=5BEBB7FA21E591BAD3BC35B06FC54CF075EFAA92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:29:c0:f6:ac:3a:2d:57:f7:24:bb:81:de:51:
                    0d:f1:24:4f:e3:83:e4:09:a6:6f:78:7b:1d:08:a8:
                    62:f8:17:ca:e7:d3:c5:01:69:93:59:a0:26:77:81:
                    ee:17:38:2e:12:8c:64:0e:2c:60:72:c0:b0:53:d2:
                    2a:fd:a2:a2:d0:0a:cc:68:95:b7:57:08:51:07:8e:
                    9b:7d:cc:9b:71:3d:dd:d1:35:de:a9:95:f4:d6:d9:
                    22:4f:20:48:f4:72:a1:28:6a:31:1c:dc:2f:36:a3:
                    4e:a6:ff:af:33:5a:1c:91:03:e9:a4:4d:06:7d:8b:
                    1c:1d:96:e4:29:b5:c1:6b:d2:66:0c:4d:c4:29:76:
                    56:d1:92:34:bf:eb:bf:a8:10:7a:9e:0a:79:6a:5d:
                    3f:0f:80:23:99:71:25:f9:e9:18:a4:55:66:4f:e5:
                    e1:cd:2b:71:ca:b9:53:70:42:d4:a6:95:b3:79:dd:
                    c4:64:ca:6d:b6:f3:3a:53:39:46:c0:a0:78:cf:b1:
                    71:6f:00:b7:f0:8d:84:84:c3:d8:56:29:99:64:03:
                    9c:6d:d8:8c:3c:52:16:7e:ed:18:62:f2:76:91:fd:
                    3c:a8:0d:91:d1:ea:58:a8:0f:6e:53:ff:8b:e7:a8:
                    42:e1:53:8f:8f:8e:cc:e9:39:7c:5c:8f:42:01:61:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EB:B7:FA:21:E5:91:BA:D3:BC:35:B0:6F:C5:4C:F0:75:EF:AA:92
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a333062633a3a2f33322d3438203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:04:85:59:c9:ff:d1:06:b0:00:09:b1:49:a1:26:7a:98:
         1b:45:73:58:7b:c2:50:7b:d8:1a:81:2b:90:91:53:15:59:72:
         38:40:ae:5e:da:a6:2d:2a:65:e4:3f:09:20:89:63:97:93:6d:
         f3:1a:e9:f7:82:a0:90:bd:b2:11:28:9f:90:90:9d:a5:e3:5a:
         8f:bd:97:ba:92:06:ce:4c:86:98:d8:5a:19:9a:4f:4e:02:aa:
         71:2f:e3:50:b3:45:63:53:0d:34:0e:71:16:23:a9:1a:10:b3:
         e7:75:f6:67:3d:05:e5:b0:39:8c:9d:de:c3:e5:7f:3c:9d:e8:
         00:ba:7c:0d:b0:2a:80:d1:6e:8b:b4:69:30:72:19:26:78:9f:
         9e:7e:6a:8b:b9:54:0a:54:86:a9:03:5b:28:df:28:ee:9c:72:
         9b:15:9c:41:a0:2e:a7:32:e8:63:c8:61:2e:f9:b0:8a:36:f3:
         fe:82:0a:c7:06:e0:a0:9e:8e:5f:be:70:48:59:95:6f:41:3c:
         0a:89:44:12:b1:76:08:aa:ce:7a:56:f8:8f:94:4d:5d:c3:4f:
         d1:dd:13:d7:5f:bb:99:1f:82:a2:ba:f3:8d:ab:2d:11:5c:1c:
         91:91:e8:18:20:4b:ae:4e:27:1f:4d:26:50:22:33:39:27:c1:
         9f:22:5c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:41 2026 by rpki-client