This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33382d3338203d3e20323639353137.roa
File:                     323830343a363564343a3a2f33382d3338203d3e20323639353137.roa (raw, json)
Hash identifier:          +WEgTySD45opyhDOWRpAWnCsN/g9sXf3cyKELJvZmj8=
Subject key identifier:   60:97:E4:6C:A0:E7:EE:6D:0C:61:BF:58:BA:72:2F:75:F7:91:EF:66
Certificate issuer:       /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial:       279EECBC336DBB28EF1138CE14059459D000E2D9
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33382d3338203d3e20323639353137.roa
Signing time:             Sun 18 Jan 2026 14:00:34 +0000
ROA not before:           Sun 18 Jan 2026 13:55:34 +0000
ROA not after:            Sun 17 Jan 2027 14:00:34 +0000
asID:                     269517
IP address blocks:        2804:65d4::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9e:ec:bc:33:6d:bb:28:ef:11:38:ce:14:05:94:59:d0:00:e2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
        Validity
            Not Before: Jan 18 13:55:34 2026 GMT
            Not After : Jan 17 14:00:34 2027 GMT
        Subject: CN=6097E46CA0E7EE6D0C61BF58BA722F75F791EF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:5f:c4:41:1d:c5:b8:7e:a8:fd:04:af:a7:
                    44:97:e0:2d:94:37:c3:15:d3:4f:f8:a0:92:34:21:
                    3d:1f:a2:0a:95:20:f7:0f:d5:f1:98:ce:9a:e2:b8:
                    ca:b6:0f:24:30:ca:9a:7f:3c:7b:98:a5:3c:7b:a9:
                    d5:e3:27:2c:16:7f:69:19:d4:ac:53:58:95:09:95:
                    33:6d:ce:4b:e4:b0:43:5f:67:38:f8:7e:2d:08:09:
                    25:2f:00:24:df:22:7e:bf:ad:6a:6e:98:7e:28:7f:
                    a6:c8:cd:a3:c1:81:7f:9a:6b:76:3a:37:c3:79:c6:
                    94:21:e5:76:e4:f7:70:ec:21:bd:81:bc:fe:67:b0:
                    19:86:b0:bb:d4:34:d7:07:12:36:97:be:92:fd:04:
                    71:ce:9b:82:b4:40:83:1b:58:6c:e9:66:2a:ab:63:
                    0f:a6:8f:4d:af:36:2e:10:05:38:08:6c:7b:2f:fe:
                    05:96:74:64:12:f7:8d:cf:d1:9e:9c:99:6d:57:3b:
                    8a:e2:47:30:17:74:bc:62:7e:a7:b6:74:3d:4f:10:
                    50:8c:10:58:cb:78:99:dd:ea:c2:45:b5:ec:50:70:
                    2d:ff:99:fc:08:26:8c:d3:ed:4e:24:20:9a:7e:d2:
                    10:e7:79:43:5b:2e:a9:95:8b:93:67:21:48:24:bf:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:97:E4:6C:A0:E7:EE:6D:0C:61:BF:58:BA:72:2F:75:F7:91:EF:66
            X509v3 Authority Key Identifier:
                keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33382d3338203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65d4::/38

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:ed:58:85:35:1b:33:ea:ae:fa:d7:4e:53:17:9f:26:d8:
         3b:bd:86:a6:bb:2d:e8:55:ba:e6:c4:8f:dc:6b:4e:e9:b1:90:
         de:bd:46:6b:f7:7a:0e:0b:70:3b:e3:a9:55:ee:d9:8a:66:4f:
         37:07:da:0a:c0:99:52:08:cf:27:e5:f8:6b:48:7c:60:37:dd:
         85:0c:36:78:28:57:e0:bf:1f:9d:31:bc:ed:96:f8:07:6b:8e:
         6f:43:c5:a8:4c:3e:c9:54:29:76:d9:17:27:86:b2:c8:b4:50:
         d1:f6:8c:a7:72:2c:48:6a:45:c6:3c:3d:52:c1:39:36:ff:fa:
         fd:5c:b6:c3:15:df:30:14:9d:e8:48:8d:7e:27:03:67:63:a3:
         af:c3:10:e7:ce:66:f8:dd:77:4d:ea:d4:8c:18:18:e6:eb:f7:
         87:78:f2:4a:65:0e:39:9d:5c:be:97:e0:c5:0a:c5:c2:79:c0:
         74:b6:f0:b1:0d:4f:6f:92:99:da:d2:2f:fd:20:c2:d5:53:c1:
         08:d7:07:82:7d:f0:e5:1b:cf:b0:c0:d1:e7:5e:1e:ce:32:be:
         28:97:09:bb:46:02:93:e6:74:44:f0:29:11:8e:12:f5:fd:1f:
         1a:7d:0a:4e:e5:86:34:16:d0:da:e7:83:f2:87:ec:f7:74:c4:
         75:93:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:45 2026 by rpki-client