This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a663030303a3a2f33362d3336203d3e20323636333839.roa
File:                     323830343a333731383a663030303a3a2f33362d3336203d3e20323636333839.roa (raw, json)
Hash identifier:          tDZxNneiZ6In0eVvS5jeC27qKP5ulWdhcfxSAPD9txA=
Subject key identifier:   7E:83:E2:E6:41:02:74:A8:10:63:72:8E:26:C4:A9:BA:2B:A6:71:F7
Certificate issuer:       /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial:       0C6C0EE060940CACEAE04B9926F40EC25D6A614E
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a663030303a3a2f33362d3336203d3e20323636333839.roa
Signing time:             Wed 31 Dec 2025 12:08:49 +0000
ROA not before:           Wed 31 Dec 2025 12:03:49 +0000
ROA not after:            Wed 30 Dec 2026 12:08:49 +0000
asID:                     266389
IP address blocks:        2804:3718:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
                          rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 03:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6c:0e:e0:60:94:0c:ac:ea:e0:4b:99:26:f4:0e:c2:5d:6a:61:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Validity
            Not Before: Dec 31 12:03:49 2025 GMT
            Not After : Dec 30 12:08:49 2026 GMT
        Subject: CN=7E83E2E6410274A81063728E26C4A9BA2BA671F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:fe:49:0c:17:b8:4f:b9:4f:47:cb:98:6d:
                    dc:f5:52:94:04:d4:2e:34:e4:d3:a9:77:73:a2:d7:
                    82:89:f8:71:85:4d:38:6c:30:b2:82:4a:f9:e7:ad:
                    d4:61:f0:49:a5:c5:1f:7d:f0:15:55:d1:3b:3c:e2:
                    3c:ca:ba:e1:5b:36:ad:9e:c7:33:c7:9f:7f:8e:7b:
                    06:f7:2c:a6:46:b5:54:47:10:d4:8b:a7:ff:4f:84:
                    8a:b7:03:d7:97:60:60:5b:e0:54:42:77:a9:4d:1d:
                    c5:db:d7:f3:ed:0f:27:a1:05:d9:34:44:82:40:1b:
                    9a:4d:a4:40:75:d6:b0:28:5c:34:13:89:8e:e8:c5:
                    c7:e5:e9:25:a5:e1:be:d1:19:f3:18:ea:d1:79:3f:
                    6e:d6:95:24:0b:58:f9:53:03:ae:78:29:b2:92:60:
                    81:99:65:54:0f:37:70:0e:57:de:f5:c7:de:d1:7e:
                    99:d9:c9:47:4e:3f:93:90:90:19:0d:d0:ec:c4:66:
                    56:d0:5a:d9:40:02:47:3f:0c:87:73:ac:fe:15:12:
                    14:53:95:f7:67:31:62:3b:6c:53:8a:a3:fa:ce:f0:
                    e8:3c:6d:44:86:95:4c:89:fc:46:f1:3a:50:6c:46:
                    05:07:8a:a5:83:16:cd:c8:21:19:25:07:84:f2:83:
                    f3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:83:E2:E6:41:02:74:A8:10:63:72:8E:26:C4:A9:BA:2B:A6:71:F7
            X509v3 Authority Key Identifier:
                keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/323830343a333731383a663030303a3a2f33362d3336203d3e20323636333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3718:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:14:e0:ea:b5:4a:11:73:0a:31:87:7a:69:9e:4c:29:2f:
         b7:1e:4f:62:c4:ce:79:cf:64:50:4c:4c:2a:f7:be:18:8b:66:
         b9:b9:50:9f:bb:79:d3:fc:5f:33:03:dc:6c:c9:3f:59:fd:e2:
         ac:85:47:f8:92:a3:0e:51:94:5b:cc:ff:3e:5c:e6:37:c0:37:
         f1:80:d9:48:ce:7e:dc:f4:3c:c2:6c:e1:7e:64:09:03:96:e9:
         44:bc:47:5e:1b:f7:26:71:06:68:a9:e2:20:29:5c:ad:73:6d:
         6b:29:e2:19:af:ca:2b:23:3f:1f:05:56:b0:b9:d7:f1:a7:85:
         5b:7f:a3:d9:d8:78:18:ec:38:d9:97:76:34:14:31:57:ad:bd:
         e6:a2:32:c2:60:d1:2a:84:ac:79:87:61:db:e1:3c:8e:45:80:
         43:bc:e7:15:4c:26:f7:35:a0:bf:b7:26:54:12:8f:c0:f4:b7:
         d7:b3:80:d1:17:e0:ea:ea:a2:d2:9d:96:a3:71:f5:b9:96:59:
         77:73:44:a7:3e:50:2a:f7:21:d8:0b:2c:1c:65:73:1a:65:e7:
         40:19:6b:4c:c7:69:0c:dd:5d:4d:00:43:2e:d2:0a:3c:6d:78:
         21:65:75:da:31:7e:f2:4a:52:10:df:63:99:02:f1:61:28:34:
         85:eb:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:13:45 2026 by rpki-client