This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a3a2f33322d3332203d3e20323636333839.roa
File:                     323830343a333731383a3a2f33322d3332203d3e20323636333839.roa (raw, json)
Hash identifier:          nFYLGHhwErEj781o88Evy3gQ5on0yeRoeIX6fmjMkLE=
Subject key identifier:   33:3D:50:22:29:19:47:2D:77:2E:2E:5D:27:EF:BF:07:FC:46:2B:D0
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       0EDA0C16DBEAE1DF490A594F6D617F604963BD59
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a3a2f33322d3332203d3e20323636333839.roa
Signing time:             Wed 31 Dec 2025 12:08:49 +0000
ROA not before:           Wed 31 Dec 2025 12:03:49 +0000
ROA not after:            Wed 30 Dec 2026 12:08:49 +0000
asID:                     266389
IP address blocks:        2804:3718::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 03:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:da:0c:16:db:ea:e1:df:49:0a:59:4f:6d:61:7f:60:49:63:bd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Dec 31 12:03:49 2025 GMT
            Not After : Dec 30 12:08:49 2026 GMT
        Subject: CN=333D50222919472D772E2E5D27EFBF07FC462BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:c7:31:75:24:60:f9:10:12:24:2c:68:b4:
                    1d:ca:e1:90:0b:67:36:85:9b:ff:f8:02:a3:15:f5:
                    32:67:59:c6:7f:f9:aa:ca:fe:d7:cd:0c:30:8d:c3:
                    0c:ef:b9:42:cd:8c:a1:f9:4f:00:9e:f7:87:ca:2b:
                    1f:64:6d:fd:50:cd:b6:c3:12:42:97:92:3d:5c:2c:
                    cb:ff:ea:45:5c:db:9b:b3:44:63:77:43:b0:79:5b:
                    b3:2c:5c:e4:c8:ff:df:50:7a:03:8a:e0:d2:81:e1:
                    9c:b3:8e:b4:78:00:b8:27:2b:ed:1b:29:2a:e5:1e:
                    24:93:60:a7:56:fd:eb:16:8f:99:3f:8e:3d:5c:4d:
                    bd:a1:c3:81:56:a1:58:a6:6f:8f:a9:0a:0c:0e:85:
                    c5:ca:66:8e:64:dd:00:0d:ba:92:29:8a:c7:dd:16:
                    cd:88:b1:2d:fc:b7:1e:c7:8d:83:80:2d:c7:6b:40:
                    cb:01:c5:d0:a8:d4:cf:ea:19:93:d3:bc:a8:68:d2:
                    b6:72:8a:6c:f8:72:4d:df:0f:28:4c:a7:7d:a3:3a:
                    95:7a:ac:13:86:02:79:61:1a:b9:cd:34:f4:2a:88:
                    4a:26:1e:ee:3d:50:0b:02:f0:e6:d1:38:24:35:fe:
                    05:70:10:cb:10:dd:7b:df:c7:ac:01:11:74:26:9e:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3D:50:22:29:19:47:2D:77:2E:2E:5D:27:EF:BF:07:FC:46:2B:D0
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a3a2f33322d3332203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3718::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:ad:9d:0d:e5:71:00:94:b3:5b:bc:7c:2e:58:42:71:68:
         25:77:e8:1b:08:d4:6f:31:a5:bb:d3:67:6f:73:ec:5c:64:89:
         d3:4e:6f:e1:4f:f6:5f:86:a8:d9:b3:58:33:54:78:c1:c5:be:
         42:33:7c:b9:fc:3f:6e:9f:af:c6:65:f9:fc:43:90:1f:3e:12:
         15:2a:84:6e:34:f6:be:b5:d0:52:8c:85:e0:3c:c1:65:2d:00:
         b2:8c:cb:10:b5:e9:15:35:8a:08:1f:7e:ed:10:6e:43:ca:d1:
         6a:a8:fc:e9:84:e9:f8:45:16:a4:0c:7c:80:42:b4:e1:b8:a6:
         c9:33:58:ea:ff:3f:b1:54:d3:1b:ea:f4:f0:f6:57:3c:5d:fa:
         d8:4a:ee:6a:c7:45:ad:4a:47:76:5a:36:24:c5:f4:99:ba:5b:
         4c:b2:1c:c7:7f:55:09:4e:21:7c:6d:d8:81:6a:76:32:fb:ba:
         06:d9:04:cd:fc:17:74:d4:41:ed:e6:61:fb:65:e1:3c:fd:f3:
         96:b6:87:7a:74:d8:31:3c:8e:fa:e8:3b:64:ad:9a:ad:cf:2b:
         84:86:34:61:50:9c:69:e8:67:42:0a:9b:d3:e6:43:c1:e2:e7:
         a1:ed:55:fb:00:32:37:40:07:39:09:c4:9f:5c:a8:bb:8a:a9:
         32:2a:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:13:41 2026 by rpki-client