This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a3a2f33322d3332203d3e203533313038.roa
File:                     323830343a326237383a3a2f33322d3332203d3e203533313038.roa (raw, json)
Hash identifier:          j6vG6D2cV37UItpcwJnLSMXUo3bsL3MZ9oN7GMxvBWU=
Subject key identifier:   29:5C:FA:A9:59:50:D4:13:0A:98:0E:70:14:BF:88:77:39:54:2A:0C
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       1FA2A1D52FB8EC692DD62D2BCD8AF2E7DA3541FD
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a3a2f33322d3332203d3e203533313038.roa
Signing time:             Thu 15 Jan 2026 20:00:00 +0000
ROA not before:           Thu 15 Jan 2026 19:55:00 +0000
ROA not after:            Thu 14 Jan 2027 20:00:00 +0000
asID:                     53108
IP address blocks:        2804:2b78::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a2:a1:d5:2f:b8:ec:69:2d:d6:2d:2b:cd:8a:f2:e7:da:35:41:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 15 19:55:00 2026 GMT
            Not After : Jan 14 20:00:00 2027 GMT
        Subject: CN=3082010A0282010100BCBCEB8540D69A93830F08270DA65CA6EDAC3C26008109522A10E974D9936B08C3B51CDD37FF888B6A4DC8C6B7C932C51D0C824BB384E5E75AB6BDE0A5DFD6187EDE2BA6EC2AD1D66C468FA859BCBD8703758745A8BB657760756AA4071C84AE180EAA8E1DCD65D9F9389C000BA20E6AE8A2DE87E12E2181BF670176ABC9D0427614E6717E65593C259BF39894DDA4A345BDE0518C75C60E1447049502D1BD765A3EFBB086665C9E21F4AB86758D4205510AE5E4CB3070EB6D24D97880A3AC990BF172C7EF2DC4FC17E0B0DD60F116885F5A12AEE9FCA350B5536294CBD806D617AA1D13EE5B8EA4F1D644BD59A5BE42C03722BDE0DB2A1080A0DC71BF2FE6850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:eb:85:40:d6:9a:93:83:0f:08:27:0d:a6:
                    5c:a6:ed:ac:3c:26:00:81:09:52:2a:10:e9:74:d9:
                    93:6b:08:c3:b5:1c:dd:37:ff:88:8b:6a:4d:c8:c6:
                    b7:c9:32:c5:1d:0c:82:4b:b3:84:e5:e7:5a:b6:bd:
                    e0:a5:df:d6:18:7e:de:2b:a6:ec:2a:d1:d6:6c:46:
                    8f:a8:59:bc:bd:87:03:75:87:45:a8:bb:65:77:60:
                    75:6a:a4:07:1c:84:ae:18:0e:aa:8e:1d:cd:65:d9:
                    f9:38:9c:00:0b:a2:0e:6a:e8:a2:de:87:e1:2e:21:
                    81:bf:67:01:76:ab:c9:d0:42:76:14:e6:71:7e:65:
                    59:3c:25:9b:f3:98:94:dd:a4:a3:45:bd:e0:51:8c:
                    75:c6:0e:14:47:04:95:02:d1:bd:76:5a:3e:fb:b0:
                    86:66:5c:9e:21:f4:ab:86:75:8d:42:05:51:0a:e5:
                    e4:cb:30:70:eb:6d:24:d9:78:80:a3:ac:99:0b:f1:
                    72:c7:ef:2d:c4:fc:17:e0:b0:dd:60:f1:16:88:5f:
                    5a:12:ae:e9:fc:a3:50:b5:53:62:94:cb:d8:06:d6:
                    17:aa:1d:13:ee:5b:8e:a4:f1:d6:44:bd:59:a5:be:
                    42:c0:37:22:bd:e0:db:2a:10:80:a0:dc:71:bf:2f:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:FA:A9:59:50:D4:13:0A:98:0E:70:14:BF:88:77:39:54:2A:0C
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a3a2f33322d3332203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:51:5c:02:45:3c:1f:54:38:75:56:5b:02:5f:b7:0d:3d:
         27:c8:8a:0b:1e:26:87:27:02:fb:9d:78:57:cd:6f:d2:7e:85:
         92:0e:98:43:1a:0e:ba:25:eb:1c:c5:4b:6a:a8:4a:02:9d:53:
         42:4c:4c:09:b6:fb:07:9a:d0:7f:77:ef:4b:a9:91:c1:b6:5c:
         78:38:91:0c:3a:a8:e7:d1:04:ff:f1:a5:02:2d:5b:66:bf:d7:
         d9:85:d7:6b:64:22:64:2c:a0:19:41:f2:60:e7:8a:cb:16:5f:
         be:c4:1a:db:2c:27:33:02:33:ca:ba:54:d2:68:82:89:02:2b:
         37:65:9e:1c:92:4a:5d:54:6b:01:41:05:49:9a:45:92:fa:85:
         71:5e:e0:20:ef:95:69:7e:cf:4c:95:73:4b:c9:f4:21:db:f1:
         9d:38:2a:ac:39:d1:f2:c5:9f:ae:e3:d5:14:18:a1:ff:d0:ad:
         e1:0a:c5:4b:7a:3c:a5:22:7a:e4:88:d9:7a:44:3a:2f:35:5c:
         bf:44:95:c1:e6:b9:1a:c2:0e:b5:52:c1:20:1f:1c:b8:7d:90:
         6c:37:de:58:df:9c:e9:c8:e6:b8:7e:5f:76:44:41:26:0d:15:
         ef:b7:cb:e1:6d:16:9a:c9:fd:bc:2e:60:7e:8a:56:6c:29:dc:
         e8:15:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----