This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/323830343a353762303a3a2f33322d313238203d3e20323638303830.roa
File:                     323830343a353762303a3a2f33322d313238203d3e20323638303830.roa (raw, json)
Hash identifier:          FTsxv3+FjfKoUN496eNemwwXT2OynmSf3OT+5GxbIvQ=
Subject key identifier:   BE:86:41:FB:0F:EE:F5:F7:35:82:DF:EB:46:0E:BD:F2:F5:C0:61:39
Certificate issuer:       /CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Certificate serial:       1E0954B7155A6E996B47804FE63ED78AAA963159
Authority key identifier: 84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/323830343a353762303a3a2f33322d313238203d3e20323638303830.roa
Signing time:             Sat 24 Jan 2026 15:35:40 +0000
ROA not before:           Sat 24 Jan 2026 15:30:40 +0000
ROA not after:            Sat 23 Jan 2027 15:35:40 +0000
asID:                     268080
IP address blocks:        2804:57b0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl
                          rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 09:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:09:54:b7:15:5a:6e:99:6b:47:80:4f:e6:3e:d7:8a:aa:96:31:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
        Validity
            Not Before: Jan 24 15:30:40 2026 GMT
            Not After : Jan 23 15:35:40 2027 GMT
        Subject: CN=BE8641FB0FEEF5F73582DFEB460EBDF2F5C06139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:31:d5:22:a8:0e:05:46:98:74:4e:b7:1c:
                    f0:dd:37:64:3a:42:21:77:e8:73:d5:ef:42:82:fa:
                    50:ce:da:3f:24:6e:3f:b8:9a:96:b6:91:1f:35:c9:
                    34:f1:fc:e3:c4:f2:d6:69:d6:d5:48:59:a4:78:b7:
                    75:38:05:e9:72:1b:e9:42:d4:54:28:1a:94:a2:f6:
                    25:7e:11:23:bf:13:d2:47:95:3e:5b:cb:f9:af:aa:
                    b5:ba:a8:b6:b9:35:5f:63:29:59:47:9d:76:55:3f:
                    8c:1d:f6:ee:77:ee:67:89:52:cf:4e:97:4d:8f:ac:
                    3d:5e:e8:21:b0:e3:13:ce:2e:b3:50:66:09:5c:e0:
                    d3:73:c1:be:97:ed:33:5c:46:97:fd:07:e9:aa:7b:
                    2c:58:ec:96:0f:30:e5:4a:da:90:05:c6:39:db:ec:
                    b7:b0:6e:79:52:da:39:a6:8d:56:1e:90:09:c6:6b:
                    76:5d:cc:dc:b2:58:70:c7:87:4f:29:86:34:d0:a6:
                    66:ee:a5:93:7f:1c:45:91:6a:4b:54:aa:61:b1:a7:
                    86:0c:ab:b7:f6:b6:69:c8:a2:c6:b1:cb:3a:38:71:
                    86:16:cd:8e:f4:29:65:f7:da:b8:bb:fa:b2:d4:8a:
                    61:88:39:8b:6b:db:77:44:d7:d9:39:aa:6c:80:2f:
                    44:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:86:41:FB:0F:EE:F5:F7:35:82:DF:EB:46:0E:BD:F2:F5:C0:61:39
            X509v3 Authority Key Identifier:
                keyid:84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/323830343a353762303a3a2f33322d313238203d3e20323638303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:6c:ac:fb:d0:3e:8d:ad:ed:96:59:53:1f:a4:f7:05:a3:
         db:99:59:59:bd:38:97:43:b2:b7:5f:e0:a4:19:51:26:a0:91:
         91:ea:ff:6e:5d:58:8f:34:50:3c:0b:7d:84:6a:3a:b0:b0:a6:
         09:78:77:83:6c:83:0f:29:9f:93:b8:63:04:94:fc:20:a4:c8:
         f7:64:0f:33:28:a1:9a:2f:6b:2b:15:82:1a:55:48:40:00:1f:
         6b:cf:46:d3:70:3a:29:60:a8:1e:65:a2:49:a3:9a:cc:09:cd:
         a5:c4:7d:55:41:a6:40:5f:d7:6f:7b:8d:d5:95:12:2d:a5:c8:
         1f:9c:04:83:95:f6:94:ec:97:b2:67:94:29:5c:dd:05:3f:4e:
         57:6e:59:e2:93:b0:4e:b9:00:33:f3:c5:e6:5f:d7:cb:21:15:
         1c:af:a8:53:68:91:f1:c7:e5:b7:bf:cd:60:d7:02:a7:aa:ff:
         10:fb:be:2d:2d:f3:2b:b7:91:ac:02:8b:ef:2a:44:35:79:d4:
         71:41:62:c5:93:e0:1f:bf:41:7b:54:a1:16:ad:be:69:17:24:
         e6:12:eb:c7:39:7b:1f:b1:e4:a3:34:06:2e:d4:0b:55:82:2c:
         86:82:95:eb:f6:ff:fd:a7:1c:5d:1b:12:a6:43:c9:88:2f:60:
         a0:2b:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:21 2026 by rpki-client