This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/323830343a343939343a3a2f33362d3336203d3e20323637313931.roa
File:                     323830343a343939343a3a2f33362d3336203d3e20323637313931.roa (raw, json)
Hash identifier:          DL754Y8bu/IdMDF35I3u8B0OSn8g30Vx+KAwZzfKZHg=
Subject key identifier:   A4:18:72:17:B9:4E:DF:07:8C:B6:52:A7:13:E8:C2:5D:93:FE:72:74
Certificate issuer:       /CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
Certificate serial:       396691E2DB994D15CC288C72EA64B111F3AC045A
Authority key identifier: 07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/323830343a343939343a3a2f33362d3336203d3e20323637313931.roa
Signing time:             Thu 15 Jan 2026 17:41:32 +0000
ROA not before:           Thu 15 Jan 2026 17:36:32 +0000
ROA not after:            Thu 14 Jan 2027 17:41:32 +0000
asID:                     267191
IP address blocks:        2804:4994::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl
                          rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 05:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:66:91:e2:db:99:4d:15:cc:28:8c:72:ea:64:b1:11:f3:ac:04:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
        Validity
            Not Before: Jan 15 17:36:32 2026 GMT
            Not After : Jan 14 17:41:32 2027 GMT
        Subject: CN=A4187217B94EDF078CB652A713E8C25D93FE7274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:3b:21:b9:d4:2b:44:d4:1a:69:e7:03:02:
                    b2:bf:05:0e:f6:ab:7d:6e:71:08:43:c7:6d:ea:66:
                    35:fc:aa:93:50:34:42:dc:ff:e1:be:f9:fd:d3:cf:
                    4a:1c:9d:9f:7b:55:5a:4f:31:bf:e4:19:03:d8:e9:
                    6c:ed:e5:a1:65:b6:35:05:c5:dc:2b:91:cb:8d:3f:
                    d8:eb:75:8b:11:85:54:6f:f2:0d:86:47:a8:f0:f9:
                    e0:c8:57:a5:5a:1e:ce:f3:e6:c2:20:eb:a4:7d:a5:
                    31:6e:45:75:0d:15:fd:47:f2:2c:fd:d8:3d:2f:08:
                    71:96:ed:1d:51:2c:fb:00:0d:4c:b7:bf:30:ad:07:
                    1a:5f:5c:9d:98:f2:b0:c8:c5:d1:a9:fb:dc:86:78:
                    03:45:d3:a9:37:57:f6:67:bc:6a:55:e0:73:fc:b1:
                    19:26:9c:08:6f:a2:03:e6:a3:06:da:ea:b2:67:78:
                    1d:72:11:1d:13:e9:b4:cf:8c:bc:5d:22:fc:df:dd:
                    8c:c6:ec:0c:14:cf:d9:37:13:95:cb:c7:6e:1d:1f:
                    5f:7e:b3:27:3b:19:f6:c6:89:1e:28:a5:a2:66:1b:
                    92:fd:47:0a:ae:a4:12:c9:ca:3a:86:46:1d:48:40:
                    a2:ed:a4:b2:2f:10:16:d4:72:5d:9a:7c:e0:1d:ba:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:72:17:B9:4E:DF:07:8C:B6:52:A7:13:E8:C2:5D:93:FE:72:74
            X509v3 Authority Key Identifier:
                keyid:07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/323830343a343939343a3a2f33362d3336203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4994::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:24:a1:c5:22:c2:22:b6:2f:6f:1b:4e:5d:30:b7:f7:f7:29:
         75:91:6e:67:0f:08:76:55:39:e9:57:05:74:93:77:8a:05:c3:
         34:a0:0c:6c:79:61:03:74:d1:14:d5:91:ec:93:1a:ad:3c:66:
         be:98:15:60:fe:00:01:1a:6e:ee:5d:82:b6:5e:98:33:39:8f:
         70:40:f5:e4:1f:f0:37:98:1c:b8:38:d8:04:3f:9d:b0:15:ac:
         f8:4f:d1:dc:03:17:df:93:02:9b:44:7c:9b:be:c8:f0:0e:24:
         ad:9a:f5:9b:39:6c:4b:e6:2e:8e:aa:c3:0f:fb:8c:c6:b3:9e:
         11:b5:89:99:43:8d:66:4d:37:56:25:8a:94:94:1f:12:51:0a:
         6e:93:57:ba:88:a5:8a:f6:af:f3:73:20:d6:4e:8e:92:5d:ba:
         54:6a:f9:9d:66:2a:5b:19:26:fb:2f:8e:91:4b:48:3f:a0:02:
         ae:51:40:dc:03:bb:9f:97:37:f0:fe:a3:05:fb:7f:37:b3:0e:
         05:c8:48:8a:d6:07:86:b8:81:55:10:ae:e3:3a:f5:e6:8d:fc:
         e8:cc:8a:77:e0:7f:fa:21:11:9f:4a:3f:34:43:ca:4a:d0:09:
         a7:b0:48:cd:e1:1a:36:68:41:92:61:99:2e:ab:cb:43:de:04:
         2f:44:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:25:22 2026 by rpki-client