This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a323030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a323030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          goI/HJnFB5hiq4df9EtZLqgG9lgk0QDEGKoiZdiD3zg=
Subject key identifier:   24:96:10:40:47:39:7E:01:83:96:B7:02:CD:0A:91:9F:4C:41:D6:39
Certificate issuer:       /CN=44E353DE84ED32E4B3AA90C51D0D657FE56A7F86
Certificate serial:       11A3C3F72A540847AAF3C77FA60000036DE239B7
Authority key identifier: 44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a323030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Wed 21 Jan 2026 12:58:19 +0000
ROA not before:           Wed 21 Jan 2026 12:53:19 +0000
ROA not after:            Wed 20 Jan 2027 12:58:19 +0000
asID:                     269388
IP address blocks:        2804:63dc:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a3:c3:f7:2a:54:08:47:aa:f3:c7:7f:a6:00:00:03:6d:e2:39:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44E353DE84ED32E4B3AA90C51D0D657FE56A7F86
        Validity
            Not Before: Jan 21 12:53:19 2026 GMT
            Not After : Jan 20 12:58:19 2027 GMT
        Subject: CN=2496104047397E018396B702CD0A919F4C41D639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:fd:17:d7:de:2d:e9:49:26:cc:a5:70:d4:
                    e0:70:76:00:73:70:2f:6d:4d:14:e9:51:a8:49:51:
                    50:83:d8:03:bc:19:76:86:bc:32:ae:d4:4e:23:c8:
                    af:ac:30:68:fb:19:2b:35:94:c2:81:33:ce:62:ca:
                    aa:95:15:23:ed:2c:1a:aa:0b:9d:de:8c:dd:37:38:
                    e7:72:74:a4:82:20:d4:ee:5c:49:13:85:8e:71:10:
                    6a:bf:28:37:1e:81:cc:21:2d:33:d2:08:50:46:4e:
                    bf:81:a6:c5:67:bd:b4:5a:fb:61:63:69:ec:ef:d8:
                    c2:96:bf:9c:c9:de:07:99:45:14:f3:c7:3e:54:d5:
                    13:c8:b8:71:2e:f9:2f:17:ff:01:73:fc:e4:7f:ed:
                    bd:af:66:8b:ec:0f:2f:2d:5b:de:3c:ab:9b:a7:5e:
                    36:eb:23:11:f5:3d:ca:68:58:6b:54:d4:1a:23:4b:
                    96:22:7d:25:98:e5:ef:ce:26:49:87:09:08:7d:f6:
                    ff:ea:d9:65:71:5d:ed:d6:f4:d2:73:39:a8:1f:43:
                    c0:ec:e8:51:5c:22:f4:01:08:aa:0b:4b:7e:25:4f:
                    84:09:7e:b4:95:c5:e9:19:22:6a:91:42:36:42:16:
                    a3:3c:65:ac:8c:d1:ef:3b:7c:d8:4c:d8:90:8f:d0:
                    9f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:96:10:40:47:39:7E:01:83:96:B7:02:CD:0A:91:9F:4C:41:D6:39
            X509v3 Authority Key Identifier:
                keyid:44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a323030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:e8:63:a7:1f:75:e0:99:ca:4b:99:a2:e7:98:48:4e:53:
         90:a6:04:2a:57:be:a8:68:09:5c:3e:0b:cb:6f:9c:6a:ff:d3:
         15:7a:27:b0:22:60:cd:8b:d9:11:71:c6:c5:36:18:17:51:b3:
         a0:da:a1:9c:46:b7:18:11:a7:98:4c:c5:c1:3f:c2:ad:ff:38:
         84:8d:2b:6e:ed:25:87:f1:8c:47:97:6d:46:ff:16:82:30:74:
         76:92:44:3e:0a:f8:88:4b:d3:6b:73:55:b1:85:ad:66:1f:42:
         b9:d4:dc:f3:43:7e:f6:52:b9:ba:5e:e3:cb:80:4f:3d:b2:8e:
         bd:dd:7d:55:ca:92:de:a9:f1:e9:49:f0:88:a1:85:f6:46:88:
         79:db:f0:ae:92:a0:87:b8:82:70:b6:55:ab:45:13:6d:fe:8b:
         b7:49:de:e7:ca:97:84:a7:e8:3d:31:4c:40:39:15:1b:80:4b:
         26:ff:d3:6a:9c:4f:c1:e3:41:f5:8c:90:c7:0f:36:73:ea:09:
         fc:c3:96:bc:fc:85:37:c4:b7:c4:fb:b2:9e:b5:da:38:15:dd:
         4f:26:d0:be:d5:56:d3:44:d3:30:ff:5b:17:4f:88:37:ff:9e:
         b7:b2:3a:af:9a:5c:7d:eb:33:89:56:a7:e5:80:d4:82:15:92:
         93:23:57:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:31:02 2026 by rpki-client