This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/323830343a6137383a3a2f33332d3333203d3e20323632343738.roa
File:                     323830343a6137383a3a2f33332d3333203d3e20323632343738.roa (raw, json)
Hash identifier:          cKgQ3zq0uQ95jQz1L0BBf4BqGsfGHOYnCj/amtWvlTg=
Subject key identifier:   AB:1A:35:CB:E2:BA:9D:80:5B:B4:BC:2E:4E:8B:E4:94:AC:BB:E1:0E
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       16ABEAF70EBFF83EA8AA80517CFB3FF26F94F4C1
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/323830343a6137383a3a2f33332d3333203d3e20323632343738.roa
Signing time:             Sat 17 Jan 2026 16:14:57 +0000
ROA not before:           Sat 17 Jan 2026 16:09:57 +0000
ROA not after:            Sat 16 Jan 2027 16:14:57 +0000
asID:                     262478
IP address blocks:        2804:a78::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ab:ea:f7:0e:bf:f8:3e:a8:aa:80:51:7c:fb:3f:f2:6f:94:f4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Jan 17 16:09:57 2026 GMT
            Not After : Jan 16 16:14:57 2027 GMT
        Subject: CN=AB1A35CBE2BA9D805BB4BC2E4E8BE494ACBBE10E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:d3:0d:a6:93:50:b9:e5:dc:5b:58:6f:11:
                    d0:f6:86:75:9f:4a:8c:f1:5b:6d:85:a0:37:6e:8b:
                    c7:da:92:1d:a5:a0:64:a0:53:bc:3a:63:cd:13:84:
                    19:1d:88:85:68:86:8c:1b:b0:a8:23:0c:ed:38:42:
                    19:06:94:8b:36:a7:9a:be:d8:67:09:e2:1c:5d:fa:
                    37:fd:77:20:8f:66:b9:07:df:8a:37:41:40:a4:b1:
                    e3:bc:d2:e9:9f:5a:7b:91:7a:48:35:00:80:8a:68:
                    66:cb:8d:92:9b:94:6b:62:05:88:ce:ce:0c:55:15:
                    a3:57:14:1b:50:aa:5a:04:da:f6:15:db:c6:10:fc:
                    80:37:5c:fd:d6:a1:9f:d7:60:d0:88:84:df:c9:85:
                    df:f9:97:bd:82:c0:73:71:cd:82:11:ca:24:64:0a:
                    6d:e2:52:08:66:b4:aa:91:b8:54:0e:f4:10:32:20:
                    38:b6:fc:ab:b2:49:36:09:af:67:db:3b:5b:56:f1:
                    05:5e:28:b1:25:48:5d:58:f8:51:b8:68:18:97:78:
                    3c:ee:3a:0d:15:78:00:ac:5c:d0:9e:d5:9d:d5:b5:
                    ff:39:8e:11:65:63:fc:db:60:e1:1e:76:c7:81:aa:
                    02:55:b5:ba:ea:8c:38:c8:e8:c0:31:83:58:67:21:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1A:35:CB:E2:BA:9D:80:5B:B4:BC:2E:4E:8B:E4:94:AC:BB:E1:0E
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/323830343a6137383a3a2f33332d3333203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a78::/33

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:24:a0:84:54:dc:b7:b1:0d:dc:b2:f9:7d:bb:5b:79:38:
         31:5e:90:eb:59:e8:f3:6b:ae:f8:d0:dc:c9:3d:25:da:16:89:
         28:b6:02:98:a6:b8:9e:16:7c:1a:1d:d7:d5:bc:c4:47:2f:d8:
         3f:9a:66:d1:b7:84:b8:31:e4:f7:08:80:83:11:29:f1:9f:4b:
         39:59:81:25:d7:b6:0c:cc:dc:77:03:db:71:d3:58:b7:25:3a:
         e0:a0:52:53:c3:96:fb:af:ef:3f:c9:4f:bd:9c:32:3f:bf:1f:
         f9:e2:25:4f:19:ae:57:4c:c5:cf:05:07:96:7f:a2:01:9c:b3:
         aa:e2:40:42:df:5d:4e:af:5b:3e:0b:b9:19:e2:e4:05:0f:0a:
         0a:72:73:e6:de:f1:03:92:4f:4e:48:10:70:1a:9c:03:ee:e9:
         3e:17:db:f6:0b:b6:16:38:e3:ea:94:09:06:8f:b2:6a:ed:b4:
         bc:cf:a3:36:e3:69:96:05:7e:db:42:4e:da:55:7c:5f:03:dd:
         b5:f7:ae:15:d7:61:84:b6:2d:14:eb:fd:5c:70:6f:f2:19:dc:
         5a:d4:3e:c2:7f:59:dc:a7:d6:43:5e:3a:ee:07:4b:64:db:a8:
         de:87:4d:ed:b1:f0:2d:c3:8d:bc:31:a9:a6:42:92:02:2f:74:
         aa:1f:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:17:49 2026 by rpki-client