This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033383a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383033383a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          AfxfPfyR9WqVR4gWR/T8+bJX7s1Lqdn3nojpWQPeV20=
Subject key identifier:   55:D4:0A:9B:DD:E0:0C:4B:07:C2:FF:B1:E2:3D:00:10:A1:B3:8C:9E
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       431C1F8857B16F977524EF10D489E7DDE33BBD7A
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033383a3a2f34382d3438203d3e203532343638.roa
Signing time:             Thu 15 Jan 2026 16:00:01 +0000
ROA not before:           Thu 15 Jan 2026 15:55:01 +0000
ROA not after:            Thu 14 Jan 2027 16:00:01 +0000
asID:                     52468
IP address blocks:        2804:2b78:8038::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1c:1f:88:57:b1:6f:97:75:24:ef:10:d4:89:e7:dd:e3:3b:bd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 15 15:55:01 2026 GMT
            Not After : Jan 14 16:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:cb:6f:78:15:28:42:0f:38:09:f2:1b:87:
                    5f:05:b5:e0:35:9f:d3:25:42:6c:12:e3:47:06:5d:
                    4c:07:5f:21:22:e5:36:5f:52:40:c4:d2:d1:3b:57:
                    0b:33:16:e0:fb:7a:1e:c8:11:4f:76:70:31:df:19:
                    bb:bd:05:52:a4:ea:50:a6:d9:3f:d5:c4:b0:10:4b:
                    8f:b5:d0:74:ac:82:8e:bc:32:2e:40:a7:f5:d3:5b:
                    f3:5b:b3:d3:57:0f:6c:9c:a5:75:44:f5:8a:3a:81:
                    3f:7c:e2:64:5d:10:bb:c0:b4:25:04:90:55:f6:50:
                    06:b5:a7:74:c0:be:d4:42:b8:c3:f9:bc:99:ff:ad:
                    30:eb:e6:4a:a0:97:c5:3a:4c:05:8e:45:85:76:05:
                    fa:ce:dc:2f:53:8f:d8:cf:3b:b4:7e:41:19:b6:fa:
                    40:a2:42:ec:d5:a4:7c:d3:5e:3f:0a:b6:89:db:6c:
                    c2:85:1a:c6:90:24:50:25:9a:55:70:c8:11:c6:29:
                    10:2a:ab:34:0c:b2:8c:2d:78:f8:a2:5a:5f:73:6c:
                    84:4e:fd:49:62:5a:82:21:76:31:f7:fb:d5:d0:fc:
                    b9:41:d6:41:31:e4:c9:9f:7c:40:62:fe:aa:84:19:
                    55:6e:f9:43:27:1d:cb:e9:2e:6e:b3:58:d4:ac:20:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D4:0A:9B:DD:E0:0C:4B:07:C2:FF:B1:E2:3D:00:10:A1:B3:8C:9E
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033383a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8038::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:f4:0c:fa:d3:39:c9:b7:c5:b5:99:27:f4:21:8f:71:74:74:
         38:57:46:07:92:51:bd:c2:dc:94:1e:72:9a:d6:9f:88:fe:a2:
         4c:22:27:90:ca:0b:ae:0a:13:e4:5d:64:e8:ea:75:a9:aa:c8:
         3a:ed:ba:e2:f8:d9:7b:89:01:7b:4c:fe:e8:ea:8f:72:29:39:
         0f:1c:45:5f:cf:8c:0d:ad:73:ed:ba:48:e6:3e:dc:fc:08:03:
         fb:1f:95:c7:58:c4:42:27:37:ad:0f:7a:27:bc:d9:3d:ac:c4:
         bb:e8:e7:3e:4b:7b:1f:2e:93:8d:6e:70:db:a3:da:99:e3:ef:
         7d:52:dd:ed:94:b9:09:99:d5:f8:54:20:57:5b:87:a1:ed:8a:
         21:2c:e4:f5:88:b6:22:16:a8:8b:ae:17:5b:d1:ad:43:8c:3e:
         5a:3f:f8:51:52:45:80:07:44:a0:de:15:2c:b6:91:60:2f:a1:
         f2:cf:c9:40:ce:b2:15:4c:84:13:37:34:64:42:7d:40:74:fc:
         42:15:f8:12:1d:4d:c4:c8:27:2e:d7:bd:15:71:1d:e2:30:a3:
         7d:aa:bc:52:59:d5:86:3a:60:d6:d9:8d:82:b4:94:56:ce:84:
         ae:0e:b5:23:e5:26:62:1d:1b:ce:bf:18:68:bc:08:3b:63:9a:
         f1:36:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----