This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031303a3a2f34372d3437203d3e203532343638.roa
File:                     323830343a326237383a383031303a3a2f34372d3437203d3e203532343638.roa (raw, json)
Hash identifier:          kGLsHIqNi3/NiiVJ72+C7uCjdh3VUu5EoGOqSkQJKGg=
Subject key identifier:   0C:8E:FF:5F:B6:A2:3D:52:1C:2B:AE:B4:86:70:84:43:EB:0C:A5:42
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       6E0C1511FA01BF205F54637E180F2E83E1C345FD
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031303a3a2f34372d3437203d3e203532343638.roa
Signing time:             Thu 15 Jan 2026 16:00:00 +0000
ROA not before:           Thu 15 Jan 2026 15:55:00 +0000
ROA not after:            Thu 14 Jan 2027 16:00:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8010::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0c:15:11:fa:01:bf:20:5f:54:63:7e:18:0f:2e:83:e1:c3:45:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 15 15:55:00 2026 GMT
            Not After : Jan 14 16:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:d9:2f:c3:93:4d:05:b9:fe:1b:36:f1:9a:
                    11:c8:2e:40:58:4b:93:20:dd:db:9c:4d:34:20:2f:
                    e0:fe:6a:6d:96:15:c6:2e:f7:fd:47:f8:3a:c4:55:
                    4b:c2:96:75:b0:10:c3:20:ed:70:bb:2c:13:e1:c2:
                    e0:eb:00:b6:ab:c9:81:03:c9:72:c2:09:d8:04:a6:
                    d4:e3:f7:16:71:f3:3e:66:5a:48:2e:e5:dc:d8:8d:
                    39:6c:29:46:a7:1a:7a:07:82:e8:00:4a:60:e8:bf:
                    c3:e0:cb:66:bf:88:dd:01:4a:17:c5:87:bd:e5:c4:
                    79:1f:c8:d9:d4:18:23:b7:ae:13:b8:04:d0:12:41:
                    3d:6c:ca:25:7f:c9:8c:79:11:13:b3:0c:a0:3b:38:
                    b1:ee:ab:aa:9a:40:a5:ba:37:06:e6:b7:f3:65:60:
                    be:50:b5:07:de:bd:a9:7a:05:4c:5d:3d:bd:7f:cf:
                    ac:83:9f:b9:92:03:72:55:52:ea:f8:0e:f1:43:0e:
                    60:6d:cb:2d:48:3b:c5:6f:d5:8f:61:8a:5b:62:5c:
                    4a:a3:3a:f6:89:9c:24:1d:36:2e:a3:3e:3e:a8:00:
                    4b:61:96:67:b9:b0:9a:39:24:e6:af:27:70:50:ff:
                    91:be:93:d7:77:b9:4e:2a:a6:96:44:c7:aa:6c:9b:
                    a6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8E:FF:5F:B6:A2:3D:52:1C:2B:AE:B4:86:70:84:43:EB:0C:A5:42
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383031303a3a2f34372d3437203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8010::/47

    Signature Algorithm: sha256WithRSAEncryption
         02:18:0c:7b:35:c8:83:b2:4e:54:7f:6c:93:43:e5:60:a4:61:
         64:fc:fd:d3:7e:a1:6b:b9:1b:9a:0f:18:94:49:b8:34:32:0c:
         9f:c2:95:52:87:b4:7d:60:89:b2:cc:7d:d5:a2:b1:1e:ea:e7:
         2f:e3:21:1f:46:66:e4:a6:0a:a5:09:83:a7:90:b8:34:a0:ea:
         66:c8:7f:e9:c4:f8:03:3c:b4:e8:da:e5:e4:20:65:2f:6a:44:
         fa:0e:8d:92:13:37:27:3d:43:08:30:57:36:b4:c1:ad:5b:15:
         b6:58:86:02:a1:73:21:a5:07:e2:7b:dc:d3:de:5b:63:80:da:
         f7:6d:18:a2:99:d9:0e:be:f6:60:ba:68:23:d0:07:ae:74:4d:
         c6:d0:bc:e2:73:fc:97:91:bb:4d:83:a5:b2:82:b3:00:ee:d6:
         2e:dd:68:0d:dc:58:b0:eb:2d:3f:a7:f4:30:8d:c5:43:ae:97:
         c5:ad:e6:02:dc:cc:0e:84:68:a2:9b:ec:a9:7e:f7:cd:3e:9b:
         0e:f3:e5:51:78:fe:e1:77:f6:ed:2f:09:18:93:f4:18:f6:ba:
         b8:6a:c4:cd:d5:5a:1a:79:1e:e7:f1:84:b8:e9:18:f3:9c:e8:
         4f:0e:77:a1:20:22:9b:00:13:53:c7:21:73:e7:02:6b:9e:75:
         cf:22:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----