This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/323830343a363366633a3a2f33322d3438203d3e20323639333936.roa
File:                     323830343a363366633a3a2f33322d3438203d3e20323639333936.roa (raw, json)
Hash identifier:          o5JfTE3Y709AhMxjPtkztesb60cDcNKXCEu5wK7RKGM=
Subject key identifier:   F7:1B:8C:56:5F:CA:E3:85:DB:39:61:A4:87:C5:92:2E:31:81:68:A9
Certificate issuer:       /CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
Certificate serial:       03C56390AA8178D2B4309F3D6B0043146185D418
Authority key identifier: CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/323830343a363366633a3a2f33322d3438203d3e20323639333936.roa
Signing time:             Tue 06 Jan 2026 21:17:26 +0000
ROA not before:           Tue 06 Jan 2026 21:12:26 +0000
ROA not after:            Tue 05 Jan 2027 21:17:26 +0000
asID:                     269396
IP address blocks:        2804:63fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl
                          rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:63:90:aa:81:78:d2:b4:30:9f:3d:6b:00:43:14:61:85:d4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4
        Validity
            Not Before: Jan  6 21:12:26 2026 GMT
            Not After : Jan  5 21:17:26 2027 GMT
        Subject: CN=F71B8C565FCAE385DB3961A487C5922E318168A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:87:1e:1f:5b:97:c4:89:d3:28:df:11:a1:
                    79:86:03:90:4a:ca:72:b6:08:4a:96:fd:0b:8d:09:
                    7a:13:c3:70:3b:9c:0e:db:d6:91:10:87:a3:a8:80:
                    f7:ff:b3:21:dc:b2:13:df:ad:5d:56:23:7e:b2:5b:
                    15:1b:60:68:c0:b6:8f:14:84:3a:b4:0a:f0:df:78:
                    23:32:76:da:2d:39:d9:e1:0c:c6:58:f2:b0:df:41:
                    ca:e3:1e:5d:03:f1:99:de:91:1f:20:d2:64:ed:63:
                    37:41:9b:a3:9c:bb:72:6c:9a:01:e6:31:64:15:5f:
                    c5:66:2a:15:82:99:46:8a:99:45:da:bb:31:24:a9:
                    b8:09:19:d7:8b:59:fe:08:bd:04:89:ea:f4:20:ab:
                    61:34:de:1a:02:d3:f4:8f:91:b5:cc:f7:d5:0e:9d:
                    12:39:23:c8:d5:2a:f4:67:13:3f:e2:ac:15:22:eb:
                    6d:31:fd:8a:a9:12:10:3d:d8:d5:4d:43:4b:64:6d:
                    08:ba:a8:86:dd:f7:29:f1:01:ad:5c:77:5e:ad:b6:
                    30:2e:7f:c0:34:41:90:05:bd:1f:bd:89:b2:aa:0f:
                    9c:ea:56:db:96:e7:75:dc:59:f6:31:1a:69:31:88:
                    69:3d:d6:24:83:13:6f:7d:e8:26:b1:2d:88:75:29:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1B:8C:56:5F:CA:E3:85:DB:39:61:A4:87:C5:92:2E:31:81:68:A9
            X509v3 Authority Key Identifier:
                keyid:CA:FB:3F:D5:BF:98:78:D8:18:3A:B3:AD:06:18:B5:AE:D2:3F:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFB3FD5BF9878D8183AB3AD0618B5AED23FDCF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/323830343a363366633a3a2f33322d3438203d3e20323639333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:c0:c3:c5:a0:36:e0:bd:d4:e7:79:89:a2:9a:c3:e7:5d:d2:
         65:e2:a8:6d:fa:fe:04:0a:4c:15:e5:56:c6:b8:ab:df:3b:d7:
         e6:98:cf:bf:f2:c6:4e:bc:b5:04:30:7d:fa:a8:fc:a1:31:7e:
         7a:7c:5f:26:26:06:c1:34:26:07:44:6b:6c:32:03:41:3a:9e:
         38:d5:3b:bd:d7:49:33:c7:cb:dc:a4:b5:40:19:7e:b3:8e:54:
         93:e8:90:07:21:85:a6:41:7a:58:69:82:8c:ce:ba:23:21:87:
         30:37:c7:a9:1e:36:2f:df:d8:7b:d4:4a:63:7f:ff:f7:59:2f:
         00:c2:7c:45:bf:5e:6d:89:8c:c7:46:48:3d:26:27:8c:d6:2d:
         c3:07:05:88:ea:79:8d:77:11:30:2f:e2:d4:b8:44:94:42:ca:
         47:dd:56:15:43:f6:33:6b:f3:34:94:97:de:75:20:2d:af:5f:
         a7:3c:0c:f3:13:35:f6:f2:66:a7:e7:41:ae:8b:c3:59:54:00:
         e7:43:72:71:9d:b1:20:3f:57:72:f5:86:d5:b9:1b:f2:38:03:
         1a:40:03:ee:59:62:6a:0e:38:50:07:57:dd:76:12:31:c8:d1:
         01:53:e5:37:b5:ce:74:54:c4:33:f6:8a:1b:60:a0:50:6b:95:
         3d:05:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:39:50 2026 by rpki-client