This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a343030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a343030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          2a0LStIZA7Oc9h1gyUqazZiWEtCn/v0fZ+FS7WNZ0NI=
Subject key identifier:   EA:6C:81:31:E2:67:16:5F:C3:9A:C9:94:D5:DC:34:DB:67:98:44:B0
Certificate issuer:       /CN=44E353DE84ED32E4B3AA90C51D0D657FE56A7F86
Certificate serial:       0E1F33A1CC48D1A4988D0579213C118421959068
Authority key identifier: 44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a343030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Wed 21 Jan 2026 12:58:52 +0000
ROA not before:           Wed 21 Jan 2026 12:53:52 +0000
ROA not after:            Wed 20 Jan 2027 12:58:52 +0000
asID:                     269388
IP address blocks:        2804:63dc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1f:33:a1:cc:48:d1:a4:98:8d:05:79:21:3c:11:84:21:95:90:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44E353DE84ED32E4B3AA90C51D0D657FE56A7F86
        Validity
            Not Before: Jan 21 12:53:52 2026 GMT
            Not After : Jan 20 12:58:52 2027 GMT
        Subject: CN=EA6C8131E267165FC39AC994D5DC34DB679844B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cc:87:21:2c:fe:b9:86:ac:cb:b3:d0:e6:64:
                    3b:9a:40:c6:5a:d8:ab:45:3f:67:c1:03:17:e7:59:
                    71:f3:ac:c7:8e:64:d0:b9:37:e0:6a:22:23:61:dc:
                    a3:31:65:aa:a3:03:d1:f9:54:1d:3c:22:1e:45:a9:
                    fe:a9:2b:19:49:c3:3a:f7:e8:01:42:9e:aa:79:80:
                    c1:96:3f:5f:24:ae:e0:35:13:0f:3c:02:f1:27:02:
                    c8:90:48:51:19:5c:e3:87:93:32:fe:2e:f1:8f:0d:
                    47:52:77:21:54:8d:9f:15:9d:b1:7f:d0:cb:79:80:
                    5e:17:23:9b:dd:5a:c0:56:18:4a:e8:79:d4:87:0e:
                    5b:e3:cd:a5:14:0a:87:6e:5e:74:70:cd:35:32:69:
                    52:9d:55:9d:e7:e9:9f:38:be:7d:97:2a:57:9d:29:
                    37:ab:b6:46:07:dc:2e:ed:b8:b7:92:bf:f6:ab:fa:
                    05:3c:1c:62:42:a9:d9:0c:0f:fc:0f:55:86:f3:af:
                    20:fc:0c:1c:b0:d4:d1:e1:11:d3:4b:9c:18:77:d6:
                    c2:c7:1e:e2:b3:7d:08:33:8c:de:64:fd:a8:42:a2:
                    a1:d9:27:d0:78:60:17:18:9a:cf:58:fa:91:c3:ab:
                    d4:91:7d:29:96:da:9c:cc:ff:12:fa:a7:8c:4a:e8:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:81:31:E2:67:16:5F:C3:9A:C9:94:D5:DC:34:DB:67:98:44:B0
            X509v3 Authority Key Identifier:
                keyid:44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a343030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:31:23:95:8a:68:f8:98:76:4d:55:6d:35:7a:e4:fb:b5:
         c9:bb:9e:52:b0:e6:4a:4b:1f:70:5e:92:bc:2c:5d:b6:93:73:
         ec:37:17:2d:96:15:32:e0:3b:94:30:d1:bc:e8:85:7a:01:c7:
         a9:bc:dc:a1:4c:a5:15:9f:f4:41:ea:8c:14:67:bf:3d:6f:61:
         28:11:39:d0:b5:53:95:47:72:d0:bf:8a:4c:38:20:28:de:d6:
         13:2f:a6:7e:45:30:90:b2:b3:76:ae:13:b2:21:4d:b0:6a:22:
         f6:e9:99:23:8a:c0:2c:b2:16:14:b9:53:6e:60:9b:fe:36:d1:
         e3:23:df:58:27:30:50:83:3a:ed:51:ce:32:74:8b:b8:83:af:
         cb:85:ba:17:f8:1c:78:3f:55:aa:ca:5d:13:dc:5e:c1:d3:0b:
         1a:28:02:ff:8e:2a:e8:b8:fb:93:05:e7:35:41:9c:9d:04:3e:
         ad:c5:fd:5d:94:39:88:91:2e:79:c5:e3:3d:c8:2c:d0:ac:1e:
         6c:1d:4e:e5:07:94:c2:5a:1f:d2:de:9a:83:ca:f5:e0:4d:04:
         93:cc:fe:12:43:d7:7f:dc:5f:ef:d4:60:8d:da:2b:fb:38:34:
         45:31:d3:e5:56:35:35:5b:20:83:ec:e3:78:10:8e:80:d3:a4:
         37:b4:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:57 2026 by rpki-client