This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3335203d3e20323633393230.roa
File:                     323830343a323763303a3a2f33322d3335203d3e20323633393230.roa (raw, json)
Hash identifier:          6zQVSX8GbFVnTIb4L7gGQsKi0Xxa+cVyK2I+qTfT38k=
Subject key identifier:   70:CB:60:2D:07:F0:D4:4A:43:4A:88:58:1D:D7:3D:79:03:3A:5D:83
Certificate issuer:       /CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
Certificate serial:       7E8EA1E50E08FF387FED88540C233831333C26CD
Authority key identifier: 8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3335203d3e20323633393230.roa
Signing time:             Tue 20 Jan 2026 19:35:10 +0000
ROA not before:           Tue 20 Jan 2026 19:30:10 +0000
ROA not after:            Tue 19 Jan 2027 19:35:10 +0000
asID:                     263920
IP address blocks:        2804:27c0::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 04:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8e:a1:e5:0e:08:ff:38:7f:ed:88:54:0c:23:38:31:33:3c:26:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E
        Validity
            Not Before: Jan 20 19:30:10 2026 GMT
            Not After : Jan 19 19:35:10 2027 GMT
        Subject: CN=70CB602D07F0D44A434A88581DD73D79033A5D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:fa:de:1f:9c:07:b6:c3:0a:6b:51:d6:7e:
                    1f:e1:29:36:88:fe:b6:68:91:8b:06:55:f0:4d:71:
                    26:64:b6:7a:02:14:a3:43:c6:94:61:c3:06:b0:e6:
                    80:93:a1:19:96:ae:f9:53:73:23:53:4e:e3:b5:fc:
                    2b:ff:df:0c:86:f6:d5:58:ae:f2:8b:70:ab:ae:65:
                    19:c4:a3:b0:50:04:7e:36:05:95:8d:33:51:40:93:
                    24:14:1a:a9:23:fd:be:45:64:81:a0:d1:ad:f6:56:
                    90:40:68:88:1e:ee:a6:57:3f:9d:d1:09:80:f6:64:
                    2e:b9:60:b5:01:50:67:55:6d:bd:c9:4b:f7:7f:f2:
                    d3:e6:e4:0a:e4:cb:be:58:61:71:f0:f7:7f:da:54:
                    6c:12:c7:20:15:26:5a:c5:ad:a3:42:bb:21:77:6d:
                    a0:a4:bb:69:e9:23:82:ab:e3:37:00:31:9e:59:38:
                    ba:8d:39:ca:fa:07:f7:6e:e2:c7:22:47:13:c5:2d:
                    d9:a0:b1:9d:37:3a:a2:92:b0:00:f5:b9:f2:2f:d4:
                    ff:1d:e6:03:ac:da:c6:57:37:47:f3:35:9e:c2:be:
                    40:7d:38:f3:cd:bb:fb:c1:fd:c5:d7:61:73:18:ed:
                    de:80:b2:f3:20:3a:08:73:e1:09:5a:df:ac:15:ac:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CB:60:2D:07:F0:D4:4A:43:4A:88:58:1D:D7:3D:79:03:3A:5D:83
            X509v3 Authority Key Identifier:
                keyid:8A:47:BA:6A:02:8B:BD:EA:E4:BD:2A:4A:82:9F:8C:1F:84:F9:13:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A47BA6A028BBDEAE4BD2A4A829F8C1F84F9131E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3335203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:df:aa:0e:77:4b:f1:25:79:e9:0f:c9:29:41:2e:07:9f:a6:
         23:75:e3:de:ac:28:03:5d:d6:a2:92:5d:b9:59:5a:0b:5a:a6:
         23:56:ff:09:d3:c8:e0:45:79:ca:6d:8a:58:3a:d0:4e:62:10:
         20:2f:d7:99:66:6d:cb:fa:ed:d4:05:4f:d0:84:ad:f4:4c:06:
         f5:ce:c4:57:c6:82:ed:0c:f0:40:02:d5:8a:27:6f:bd:8c:21:
         cc:a3:4e:8d:62:ef:4f:1f:8e:ea:6c:1d:dd:32:4f:74:bb:78:
         f6:89:ce:74:11:91:f4:be:9d:7e:3a:22:74:e1:80:de:1f:79:
         3c:da:22:63:37:cd:42:f7:db:f2:01:a3:ce:77:91:67:f8:cd:
         e6:5f:cc:e5:22:fd:10:5f:b0:2c:15:10:06:26:eb:8a:cb:5c:
         d2:4c:ac:ba:a3:9c:55:f2:f5:1d:4a:e9:29:a7:80:a1:4a:9f:
         13:2d:ab:97:a7:97:7f:8b:d8:65:d5:d7:1e:65:19:dc:49:95:
         c8:00:3c:a3:b6:de:4e:b9:e2:c7:0c:b5:e6:5e:0d:4f:4e:b2:
         9d:c5:d1:77:db:4b:ec:c3:9a:1e:94:3f:9b:ad:90:93:fa:8e:
         d4:d3:33:93:f1:1c:11:1e:25:29:26:b8:2a:63:4d:54:f1:a3:
         76:1b:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:01:31 2026 by rpki-client