This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33322d3332203d3e20323636353335.roa
File:                     323830343a336438303a3a2f33322d3332203d3e20323636353335.roa (raw, json)
Hash identifier:          qACtYGAGjQIYzRF9TbvLGtYIE8yVLT/zZZ6QQjlw7Tc=
Subject key identifier:   EA:63:83:7B:1D:32:00:05:3E:3C:93:89:D8:F7:29:7A:A8:70:00:71
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       6744190C777316A179ED7B112C969DE390744B2D
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33322d3332203d3e20323636353335.roa
Signing time:             Fri 23 Jan 2026 15:11:57 +0000
ROA not before:           Fri 23 Jan 2026 15:06:57 +0000
ROA not after:            Fri 22 Jan 2027 15:11:57 +0000
asID:                     266535
IP address blocks:        2804:3d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:44:19:0c:77:73:16:a1:79:ed:7b:11:2c:96:9d:e3:90:74:4b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Jan 23 15:06:57 2026 GMT
            Not After : Jan 22 15:11:57 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:ca:ec:59:d7:6f:43:84:4b:1c:67:b3:80:
                    87:0e:f3:e2:12:19:49:ef:a4:7c:ed:6d:02:99:b8:
                    28:ae:4e:4e:39:07:f9:16:a4:20:cb:b4:3e:ae:e4:
                    04:bc:0c:e4:46:a9:2d:b0:0f:76:9e:f8:5d:d8:54:
                    d3:d7:8c:93:8f:a9:58:9d:cd:e6:3d:3c:57:f2:50:
                    9c:aa:e4:e7:ef:56:dd:a9:8b:98:33:4b:53:d1:dd:
                    a0:05:43:db:42:90:4f:07:4e:8f:9f:ae:2e:51:6c:
                    44:9e:00:4f:c0:c7:93:9d:db:f2:46:5c:ee:4d:3f:
                    95:2d:46:8f:45:fb:10:4c:9c:4c:07:24:3e:26:8c:
                    35:4b:e9:20:8a:69:31:cb:fc:27:76:c5:e4:29:3b:
                    19:ba:43:f4:d1:ee:59:c0:0b:a3:d5:99:e6:40:12:
                    59:6e:92:a6:79:aa:f6:75:e6:3c:6f:f0:a8:f2:56:
                    30:98:2c:14:75:fb:0e:e4:0d:bf:7a:ac:62:0c:2e:
                    21:92:be:0d:a4:a4:1d:7b:ec:51:13:a2:42:c5:1d:
                    32:bd:0b:19:46:b1:c2:7e:e8:65:bf:6a:fe:83:12:
                    5a:80:c1:10:3c:9a:18:4c:e6:b5:1e:91:bd:24:b8:
                    d3:c6:1e:1b:89:15:b5:af:03:d4:dc:1a:7e:94:3c:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:63:83:7B:1D:32:00:05:3E:3C:93:89:D8:F7:29:7A:A8:70:00:71
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33322d3332203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:f3:7b:e0:4c:36:87:ba:a1:6d:90:96:51:97:65:03:1d:
         e0:a0:d5:80:ec:fc:c2:f2:4a:fd:e3:4a:90:5b:e6:6f:e1:eb:
         cd:98:9b:11:cf:a1:f3:2b:39:0e:63:6f:61:99:d6:ce:d8:1d:
         5e:28:11:75:ef:ad:eb:e8:36:70:84:10:5f:d8:c7:4b:68:d6:
         8b:b4:9e:24:99:9b:eb:51:23:c7:a1:b5:5e:16:dc:0b:db:0d:
         46:cc:d0:78:f5:1f:90:ab:f5:03:ee:93:dc:33:c4:e6:00:1a:
         2f:9e:b7:e4:ea:0b:d6:5a:58:03:6d:c8:9b:cb:81:e5:d0:bb:
         fc:f6:70:38:c0:01:a7:61:ad:8d:56:46:19:e5:13:f2:98:1c:
         ad:3c:37:08:b4:89:98:fe:7f:97:19:e4:bf:c3:33:99:5c:bf:
         d4:14:ed:02:8e:ee:12:72:ea:af:e9:07:26:6d:d2:37:fe:0d:
         ba:8d:cc:29:21:be:7c:43:c5:7c:87:a0:6a:ef:0a:42:29:70:
         92:28:fa:72:f9:90:0f:14:fb:bd:ef:c1:e4:c7:fc:f4:38:a5:
         3e:3e:c5:c4:41:3b:19:73:35:aa:03:8a:85:7c:5f:e4:fe:22:
         80:17:79:d3:b0:c4:d5:e2:79:99:d1:96:6e:ef:8e:87:cf:2e:
         b2:fa:66:9a
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUZ0QZDHdzFqF57XsRLJad45B0Sy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5
OTAxMThBMjAeFw0yNjAxMjMxNTA2NTdaFw0yNzAxMjIxNTExNTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzMzQUNBRUM1OUQ3NkY0Mzg0
NEIxQzY3QjM4MDg3MEVGM0UyMTIxOTQ5RUZBNDdDRUQ2RDAyOTlCODI4QUU0RTRF
MzkwN0Y5MTZBNDIwQ0JCNDNFQUVFNDA0QkMwQ0U0NDZBOTJEQjAwRjc2OUVGODVE
RDg1NEQzRDc4QzkzOEZBOTU4OURDREU2M0QzQzU3RjI1MDlDQUFFNEU3RUY1NkRE
QTk4Qjk4MzM0QjUzRDFEREEwMDU0M0RCNDI5MDRGMDc0RThGOUZBRTJFNTE2QzQ0
OUUwMDRGQzBDNzkzOUREQkYyNDY1Q0VFNEQzRjk1MkQ0NjhGNDVGQjEwNEM5QzRD
MDcyNDNFMjY4QzM1NEJFOTIwOEE2OTMxQ0JGQzI3NzZDNUU0MjkzQjE5QkE0M0Y0
RDFFRTU5QzAwQkEzRDU5OUU2NDAxMjU5NkU5MkE2NzlBQUY2NzVFNjNDNkZGMEE4
RjI1NjMwOTgyQzE0NzVGQjBFRTQwREJGN0FBQzYyMEMyRTIxOTJCRTBEQTRBNDFE
N0JFQzUxMTNBMjQyQzUxRDMyQkQwQjE5NDZCMUMyN0VFODY1QkY2QUZFODMxMjVB
ODBDMTEwM0M5QTE4NENFNkI1MUU5MUJEMjRCOEQzQzYxRTFCODkxNUI1QUYwM0Q0
REMxQTdFOTQzQzAwNjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwzrK7FnXb0OESxxns4CHDvPiEhlJ76R87W0Cmbgork5OOQf5FqQg
y7Q+ruQEvAzkRqktsA92nvhd2FTT14yTj6lYnc3mPTxX8lCcquTn71bdqYuYM0tT
0d2gBUPbQpBPB06Pn64uUWxEngBPwMeTndvyRlzuTT+VLUaPRfsQTJxMByQ+Jow1
S+kgimkxy/wndsXkKTsZukP00e5ZwAuj1ZnmQBJZbpKmear2deY8b/Co8lYwmCwU
dfsO5A2/eqxiDC4hkr4NpKQde+xRE6JCxR0yvQsZRrHCfuhlv2r+gxJagMEQPJoY
TOa1HpG9JLjTxh4biRW1rwPU3Bp+lDwAaQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FOpjg3sdMgAFPjyTidj3KXqocABxMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww
4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2
ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx
OEEyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FUm16RXZ6YnUxZU1pOEV2SFRI
V2lra0F4UEFUOEpaQWpjb2NjMmRMalJMeS8xLzMyMzgzMDM0M2EzMzY0MzgzMDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM1MzMzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
PYAwDQYJKoZIhvcNAQELBQADggEBAAbg83vgTDaHuqFtkJZRl2UDHeCg1YDs/MLy
Sv3jSpBb5m/h682YmxHPofMrOQ5jb2GZ1s7YHV4oEXXvrevoNnCEEF/Yx0to1ou0
niSZm+tRI8ehtV4W3AvbDUbM0Hj1H5Cr9QPuk9wzxOYAGi+et+TqC9ZaWANtyJvL
geXQu/z2cDjAAadhrY1WRhnlE/KYHK08Nwi0iZj+f5cZ5L/DM5lcv9QU7QKO7hJy
6q/pByZt0jf+DbqNzCkhvnxDxXyHoGrvCkIpcJIo+nL5kA8U+73vweTH/PQ4pT4+
xcRBOxlzNaoDioV8X+T+IoAXedOwxNXieZnRlm7vjofPLrL6Zpo=
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:26:12 2026 by rpki-client