This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a643030303a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a643030303a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          ly4CJIQBpDrIcSVjF41bKh1M2hP/94HymUPM26WBDfk=
Subject key identifier:   36:E3:3C:DE:CE:89:A0:84:6B:FB:D6:C0:0F:ED:B1:A9:81:E1:59:86
Certificate issuer:       /CN=44E353DE84ED32E4B3AA90C51D0D657FE56A7F86
Certificate serial:       7C18E0132F0B452CC7F07A3C6DD04278EE80E841
Authority key identifier: 44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a643030303a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Wed 21 Jan 2026 13:00:34 +0000
ROA not before:           Wed 21 Jan 2026 12:55:34 +0000
ROA not after:            Wed 20 Jan 2027 13:00:34 +0000
asID:                     269388
IP address blocks:        2804:63dc:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:18:e0:13:2f:0b:45:2c:c7:f0:7a:3c:6d:d0:42:78:ee:80:e8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44E353DE84ED32E4B3AA90C51D0D657FE56A7F86
        Validity
            Not Before: Jan 21 12:55:34 2026 GMT
            Not After : Jan 20 13:00:34 2027 GMT
        Subject: CN=36E33CDECE89A0846BFBD6C00FEDB1A981E15986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:84:d0:f3:59:e2:ce:2d:b7:0a:95:6e:b8:
                    d7:6a:0e:94:af:07:32:01:cc:d5:61:4c:0c:84:d4:
                    e7:f4:17:41:a6:59:a6:bd:10:78:4f:e6:b3:42:03:
                    14:44:a0:a2:76:86:95:6d:da:b6:8f:39:2c:41:b9:
                    9c:f1:fd:f4:83:e8:34:c7:66:5f:34:7e:48:d4:6d:
                    9d:7b:d1:54:e3:b5:2f:88:58:87:f6:d1:71:f9:ad:
                    09:f1:0d:bf:69:d4:b8:91:e8:49:47:d3:3a:c9:30:
                    8c:4b:fb:a6:01:eb:6c:63:c9:ae:56:4d:4a:b4:9e:
                    16:24:fb:69:bd:e2:3c:99:b1:74:56:3a:0e:cd:ff:
                    ab:44:d2:98:ae:c8:90:64:30:8e:ce:ed:d4:36:1d:
                    3b:18:ec:55:6e:2f:39:bd:95:7f:0e:78:d0:5b:33:
                    4d:3e:1b:78:6d:ff:51:17:f6:20:31:7a:14:9c:e3:
                    0e:d9:ed:03:7e:2d:67:05:5f:34:75:ce:c8:ab:1b:
                    f4:a4:3a:10:7f:7a:31:a3:14:65:87:42:bd:a9:cb:
                    03:ab:9f:35:e5:e0:8b:e9:ff:82:3e:0f:ba:de:0e:
                    f6:86:f4:c5:70:7e:79:63:62:ad:36:c8:d4:e0:b1:
                    82:a2:92:1f:b0:a2:30:d1:25:60:84:23:b9:16:52:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E3:3C:DE:CE:89:A0:84:6B:FB:D6:C0:0F:ED:B1:A9:81:E1:59:86
            X509v3 Authority Key Identifier:
                keyid:44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a643030303a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:89:4d:66:cd:b6:54:fd:dc:85:4b:5b:d5:a7:d2:45:83:7f:
         23:54:b9:31:6d:e5:87:64:41:15:e5:5d:9d:56:59:fd:fd:cd:
         84:36:5b:b3:d8:8c:74:d4:90:61:fd:61:5d:8e:61:cf:ff:6e:
         b4:1a:12:4f:ce:cb:fa:79:3e:6b:fb:a2:47:11:5f:60:3e:20:
         7d:15:2c:bc:f4:e8:df:39:81:c8:7e:25:6d:21:19:c0:a3:0b:
         61:50:70:98:11:5b:1c:7b:8b:d9:db:fb:ab:b6:89:eb:b3:cb:
         bb:df:26:7a:bc:c0:82:ca:be:9d:7b:16:d5:1b:f5:0e:92:53:
         03:5d:37:ae:11:e7:f8:88:7e:85:b8:a9:e9:2e:24:6c:15:5c:
         bd:ad:c4:9f:94:5e:fa:42:0a:73:51:dd:69:89:98:c9:1e:84:
         fb:76:d3:64:72:fc:d1:67:d2:c2:a8:57:4c:91:cb:55:cb:01:
         ed:f4:73:11:4e:1e:26:01:b2:eb:9c:91:9b:6a:7a:10:20:d9:
         77:92:f5:55:88:18:21:a8:a8:6a:45:f6:78:8e:7b:b8:f9:a3:
         2a:4f:06:d9:84:59:9f:7c:a6:6f:18:a5:aa:0b:64:0b:ee:e8:
         44:83:9c:50:a8:df:a6:b6:50:00:a0:83:95:31:19:b8:dd:94:
         40:bf:1c:39
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfBjgEy8LRSzH8Ho8bdBCeO6A6EEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRFMzUzREU4NEVEMzJFNEIzQUE5MEM1MUQwRDY1N0ZF
NTZBN0Y4NjAeFw0yNjAxMjExMjU1MzRaFw0yNzAxMjAxMzAwMzRaMDMxMTAvBgNV
BAMTKDM2RTMzQ0RFQ0U4OUEwODQ2QkZCRDZDMDBGRURCMUE5ODFFMTU5ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bITQ81nizi23CpVuuNdqDpSv
BzIBzNVhTAyE1Of0F0GmWaa9EHhP5rNCAxREoKJ2hpVt2raPOSxBuZzx/fSD6DTH
Zl80fkjUbZ170VTjtS+IWIf20XH5rQnxDb9p1LiR6ElH0zrJMIxL+6YB62xjya5W
TUq0nhYk+2m94jyZsXRWOg7N/6tE0piuyJBkMI7O7dQ2HTsY7FVuLzm9lX8OeNBb
M00+G3ht/1EX9iAxehSc4w7Z7QN+LWcFXzR1zsirG/SkOhB/ejGjFGWHQr2pywOr
nzXl4Ivp/4I+D7reDvaG9MVwfnljYq02yNTgsYKikh+wojDRJWCEI7kWUkoFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUNuM83s6JoIRr+9bAD+2xqYHhWYYwHwYDVR0j
BBgwFoAURONT3oTtMuSzqpDFHQ1lf+Vqf4YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRml4dHBEa0xyRXJvUDExWGZhUmdub3FSR1dub2JwVDI5bU1tdEJZaEVR
VWcvMC80NEUzNTNERTg0RUQzMkU0QjNBQTkwQzUxRDBENjU3RkU1NkE3Rjg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RTM1M0RFODRFRDMyRTRC
M0FBOTBDNTFEMEQ2NTdGRTU2QTdGODYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpeHRwRGtMckVyb1AxMVhmYVJnbm9xUkdXbm9icFQyOW1NbXRCWWhFUVVnLzAv
MzIzODMwMzQzYTM2MzM2NDYzM2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzOTMzMzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEY9zQMA0GCSqGSIb3DQEBCwUA
A4IBAQAUiU1mzbZU/dyFS1vVp9JFg38jVLkxbeWHZEEV5V2dVln9/c2ENluz2Ix0
1JBh/WFdjmHP/260GhJPzsv6eT5r+6JHEV9gPiB9FSy89OjfOYHIfiVtIRnAowth
UHCYEVsce4vZ2/urtonrs8u73yZ6vMCCyr6dexbVG/UOklMDXTeuEef4iH6FuKnp
LiRsFVy9rcSflF76QgpzUd1piZjJHoT7dtNkcvzRZ9LCqFdMkctVywHt9HMRTh4m
AbLrnJGbanoQINl3kvVViBghqKhqRfZ4jnu4+aMqTwbZhFmffKZvGKWqC2QL7uhE
g5xQqN+mtlAAoIOVMRm43ZRAvxw5
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:56 2026 by rpki-client