This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33322d3332203d3e20323637353536.roa
File:                     323830343a343333383a3a2f33322d3332203d3e20323637353536.roa (raw, json)
Hash identifier:          HwA+S8xSpYvhiDQUS3VOpDr1s/bfQEOYrddehTeDrHc=
Subject key identifier:   47:C1:BE:45:1D:C8:2A:EF:23:33:E1:86:E5:B8:83:08:02:1C:F3:90
Certificate issuer:       /CN=D43FCCC0D93682A8E6D24F681773AE282248828D
Certificate serial:       5AAAEE919B65BEE6ABC974BD059DD4189C04A172
Authority key identifier: D4:3F:CC:C0:D9:36:82:A8:E6:D2:4F:68:17:73:AE:28:22:48:82:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43FCCC0D93682A8E6D24F681773AE282248828D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33322d3332203d3e20323637353536.roa
Signing time:             Fri 09 Jan 2026 00:53:40 +0000
ROA not before:           Fri 09 Jan 2026 00:48:40 +0000
ROA not after:            Fri 08 Jan 2027 00:53:40 +0000
asID:                     267556
IP address blocks:        2804:4338::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/D43FCCC0D93682A8E6D24F681773AE282248828D.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/D43FCCC0D93682A8E6D24F681773AE282248828D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43FCCC0D93682A8E6D24F681773AE282248828D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:aa:ee:91:9b:65:be:e6:ab:c9:74:bd:05:9d:d4:18:9c:04:a1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43FCCC0D93682A8E6D24F681773AE282248828D
        Validity
            Not Before: Jan  9 00:48:40 2026 GMT
            Not After : Jan  8 00:53:40 2027 GMT
        Subject: CN=47C1BE451DC82AEF2333E186E5B88308021CF390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:d2:53:45:30:1a:ed:53:49:8c:60:e6:90:
                    e7:55:fa:c0:9e:e6:3b:06:ba:6f:43:68:ff:a9:22:
                    21:c2:98:ae:21:d6:61:d3:84:8f:d9:f2:9f:35:be:
                    c7:d8:46:a7:52:8a:bd:61:db:f7:ce:55:f7:54:ad:
                    aa:54:42:c0:48:2c:53:00:12:4f:bd:5d:99:3f:59:
                    67:2e:4f:1c:d6:90:5f:b4:15:3f:15:68:70:bb:52:
                    9d:98:c0:70:43:ad:0a:08:9c:32:f3:aa:ad:c1:7d:
                    b4:55:9c:6d:50:9c:66:c3:d6:4f:5d:bc:3f:b3:71:
                    60:34:dd:68:53:1e:b6:77:6c:6b:03:da:9d:68:44:
                    1d:a2:68:32:96:71:af:a8:42:5f:a4:38:20:7f:e4:
                    52:e3:27:d3:11:07:6a:67:5f:18:8a:d3:77:2e:aa:
                    dd:d8:35:e6:2a:4a:b1:bd:13:62:e4:1b:c3:f8:fb:
                    3a:f7:27:5e:db:8f:ef:1e:5e:85:52:0d:45:0f:11:
                    b2:6b:f6:fa:41:f2:79:0c:f0:9c:42:47:de:56:7e:
                    55:17:3b:24:5d:64:5a:a7:42:2c:5a:a3:e7:88:29:
                    f5:95:ab:bf:df:65:fb:54:b3:45:42:aa:15:21:6a:
                    42:8b:24:4d:95:52:d9:48:58:61:f2:e8:ce:66:be:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C1:BE:45:1D:C8:2A:EF:23:33:E1:86:E5:B8:83:08:02:1C:F3:90
            X509v3 Authority Key Identifier:
                keyid:D4:3F:CC:C0:D9:36:82:A8:E6:D2:4F:68:17:73:AE:28:22:48:82:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/D43FCCC0D93682A8E6D24F681773AE282248828D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43FCCC0D93682A8E6D24F681773AE282248828D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33322d3332203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4338::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:73:d9:4d:a0:a6:23:85:67:13:85:f3:99:c8:60:3c:c4:25:
         67:e1:16:31:7e:65:47:4a:bd:4b:93:49:93:31:20:22:ec:39:
         85:b1:a4:da:06:24:90:32:76:bd:10:6e:b7:f0:d6:27:6a:b1:
         c3:d9:b8:6c:42:3e:f1:87:3a:d2:05:1d:f5:69:d8:c4:2c:69:
         0f:b1:24:1d:73:32:fe:c5:1d:86:43:7c:8a:7b:0f:51:32:66:
         0a:50:58:d9:0d:8c:49:79:85:7a:99:19:75:e3:33:df:c8:11:
         b9:1a:09:0f:07:0f:66:2c:fa:6d:ad:e7:8e:f5:01:0a:46:f3:
         3a:23:1f:27:7c:33:fd:91:2c:12:4f:c5:29:62:0b:78:4b:76:
         40:c8:f4:cf:5a:7b:2d:da:16:fe:53:96:64:03:d1:01:dc:bf:
         3c:22:22:e7:a0:c6:58:01:bd:78:30:b6:6b:40:36:9a:55:90:
         f0:71:85:7f:8b:50:9e:3f:f6:65:5b:00:67:cb:63:43:99:0f:
         a2:4e:bb:a3:07:2c:c8:94:d7:f6:4d:17:5c:28:66:ff:47:65:
         da:9c:73:01:88:7d:16:17:8b:f5:5a:44:9c:78:38:9e:71:d5:
         83:d0:0e:73:c1:6b:48:a3:3a:9c:3e:2f:88:af:f0:4d:3f:d3:
         b8:91:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:10 2026 by rpki-client