This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33342d3334203d3e20323636353335.roa
File:                     323830343a336438303a3a2f33342d3334203d3e20323636353335.roa (raw, json)
Hash identifier:          Ya6TTh4UGpO9OA9I2t2ljb687rAyfDeWzm8gruldMvY=
Subject key identifier:   3D:AB:D7:51:0C:C1:B9:0B:A0:B7:24:0F:BF:E6:79:F9:34:07:D3:E4
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       0C06538C56B9A2160440A7874C0053BD15F869A8
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33342d3334203d3e20323636353335.roa
Signing time:             Fri 23 Jan 2026 15:12:10 +0000
ROA not before:           Fri 23 Jan 2026 15:07:10 +0000
ROA not after:            Fri 22 Jan 2027 15:12:10 +0000
asID:                     266535
IP address blocks:        2804:3d80::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:06:53:8c:56:b9:a2:16:04:40:a7:87:4c:00:53:bd:15:f8:69:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Jan 23 15:07:10 2026 GMT
            Not After : Jan 22 15:12:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:f2:e4:f5:07:d6:cc:ef:0c:d0:4c:5a:2e:
                    2f:d4:40:ff:6c:4e:ca:ee:27:6f:cc:a9:9d:32:d1:
                    9e:fc:9d:17:a5:54:26:17:1f:21:c6:06:0d:0a:ca:
                    fb:f7:c9:2e:ea:70:c5:ab:c8:c0:df:5e:59:de:4b:
                    06:61:37:49:be:49:d6:07:a4:d4:d6:48:28:60:5b:
                    54:5a:6c:84:8b:31:4a:ec:37:eb:55:7f:9c:23:9b:
                    23:87:a6:f4:7d:a1:d0:a5:e2:c0:73:ec:83:6c:21:
                    de:96:4c:f4:62:98:16:61:1b:ae:44:70:99:9c:a3:
                    41:4c:e2:fa:87:98:c3:48:5c:a8:d2:63:20:a6:34:
                    27:bc:a8:b1:df:15:ea:ce:b1:bd:9b:9c:ab:47:c1:
                    f9:5e:15:4d:a5:73:a7:08:fe:eb:d4:4c:d1:af:4b:
                    bc:37:07:11:12:92:a6:26:52:9c:76:3f:fa:79:21:
                    43:89:73:f1:eb:e6:19:4e:e0:a8:44:c2:1a:52:67:
                    b5:c9:74:cd:34:5e:41:2f:7c:48:f8:d9:b6:01:0a:
                    c6:55:bf:91:b1:16:a6:5c:e7:6c:33:00:b0:f8:5e:
                    13:24:e3:8f:f4:15:e9:06:a3:b8:07:e5:7a:65:b8:
                    38:e7:7f:b5:4e:0b:29:29:04:11:38:91:b0:4f:45:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AB:D7:51:0C:C1:B9:0B:A0:B7:24:0F:BF:E6:79:F9:34:07:D3:E4
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/323830343a336438303a3a2f33342d3334203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d80::/34

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:c0:9c:ef:56:f2:5c:57:16:0e:35:0a:1d:da:2f:68:ff:
         eb:de:ec:84:73:ec:2b:d6:8f:8e:d0:b2:c5:b9:56:e7:e6:10:
         00:af:f0:2e:f8:d9:58:c3:86:2d:10:0e:c1:8d:79:e7:33:59:
         d3:f4:cc:bc:50:a4:62:62:5a:a3:05:ef:47:09:22:ce:f7:03:
         40:7f:3a:7e:47:09:1c:0f:b0:b7:93:fd:02:c7:30:da:e3:0a:
         c8:d3:b6:40:eb:5b:79:be:2d:54:98:12:75:8f:16:45:9d:17:
         87:ca:87:78:73:c2:bb:9c:1d:37:66:ac:bc:7e:0f:51:06:29:
         e9:f1:12:dd:9d:3a:2d:93:be:21:9e:fa:02:86:b4:49:25:88:
         6f:f6:0b:83:0e:bf:09:13:a5:5a:e8:e1:10:11:eb:2d:7a:fe:
         1b:51:dc:6e:82:51:fa:b9:f1:0b:0b:47:7d:52:59:fe:6c:bd:
         57:ac:89:39:35:58:85:e2:61:c5:53:5e:53:4a:0f:30:51:d7:
         c1:3a:37:ba:cc:fd:15:90:d6:69:81:4c:82:16:b8:34:70:1f:
         c1:97:36:f5:92:b3:03:51:81:cf:51:e2:51:e5:a4:17:63:f8:
         0a:61:c0:14:ec:53:6b:f8:60:e4:c3:73:b7:a6:50:24:e8:96:
         7a:4e:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----