This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a343030303a3a2f33342d3334203d3e20323637393633.roa
File:                     323830343a353565343a343030303a3a2f33342d3334203d3e20323637393633.roa (raw, json)
Hash identifier:          rlmlI8YYQlxxyBUg/vpBwy87vNWpZ3Ff4bUDxQHH17E=
Subject key identifier:   F8:83:A5:E5:B2:C3:1F:EB:EE:E1:36:81:24:C7:69:C5:DD:36:4F:16
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       35607B2BEB735A39CB426447137F51E6FBC4ED8E
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a343030303a3a2f33342d3334203d3e20323637393633.roa
Signing time:             Mon 05 Jan 2026 13:07:32 +0000
ROA not before:           Mon 05 Jan 2026 13:02:32 +0000
ROA not after:            Mon 04 Jan 2027 13:07:32 +0000
asID:                     267963
IP address blocks:        2804:55e4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 17:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:60:7b:2b:eb:73:5a:39:cb:42:64:47:13:7f:51:e6:fb:c4:ed:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Jan  5 13:02:32 2026 GMT
            Not After : Jan  4 13:07:32 2027 GMT
        Subject: CN=F883A5E5B2C31FEBEEE1368124C769C5DD364F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:11:e4:9c:4a:e5:de:1c:85:ca:61:10:a7:
                    87:67:e8:61:d2:9b:4e:f5:ca:10:59:2f:ca:b4:e4:
                    51:f0:96:83:ee:c1:23:c3:8f:e8:47:c2:07:62:79:
                    b8:62:c1:40:94:1b:e8:8b:a3:de:97:11:11:e3:1d:
                    fb:ef:87:a7:e1:53:7b:31:bb:46:0c:37:bb:6b:75:
                    83:03:e6:72:cc:da:87:79:0f:5f:01:d2:e1:9d:4a:
                    ab:cb:29:df:6a:8e:59:91:03:ca:92:ff:77:a1:40:
                    dc:b6:3e:69:c7:44:35:6a:6c:3a:5a:ab:3e:7a:a0:
                    74:fb:da:47:17:c4:7d:f9:b4:91:14:c1:50:a6:21:
                    b2:47:aa:9b:c6:9d:72:14:54:e2:1a:b4:55:25:8c:
                    b4:91:83:3b:4c:42:60:e6:15:87:0d:e2:19:f0:2c:
                    41:e8:24:89:d7:dd:ce:f8:96:98:12:f9:1b:58:9f:
                    73:56:7e:06:91:56:11:06:6f:eb:24:8f:50:66:ba:
                    4b:d1:3e:80:94:8a:64:1e:46:b0:2d:d6:6d:85:63:
                    1e:a5:0e:1a:66:e0:f0:22:65:99:0c:64:04:41:2d:
                    3e:82:a0:fb:3a:bd:b8:30:17:d4:41:3a:a2:fd:d5:
                    6e:fd:c2:a9:df:a2:41:c1:b5:56:f9:20:79:28:c5:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:83:A5:E5:B2:C3:1F:EB:EE:E1:36:81:24:C7:69:C5:DD:36:4F:16
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a343030303a3a2f33342d3334203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:83:cb:eb:63:eb:37:0d:e0:0f:70:e9:97:f2:19:db:ff:
         3c:df:86:c4:01:36:4c:57:6a:56:f6:ab:3b:33:22:33:f4:3f:
         0d:58:fb:48:e5:e2:39:95:21:c2:ed:c5:e5:44:d0:e2:80:83:
         13:9d:77:d6:be:34:bb:9e:16:08:bc:ec:11:6f:73:dc:e3:28:
         58:2f:27:1b:44:f1:97:eb:95:59:76:d3:4a:20:22:77:9e:04:
         64:f3:13:e4:79:aa:47:2c:56:0b:7f:c9:57:8c:10:ae:09:85:
         c9:93:e9:4c:3b:d8:ee:d0:f3:f4:4d:ff:ec:9a:45:b1:3c:06:
         ac:4a:83:d8:d6:8b:c5:79:d9:8b:69:ba:8a:60:eb:f9:d5:78:
         23:49:77:4a:32:43:82:3e:2c:97:fd:7e:4a:a4:07:cc:1f:b3:
         4d:89:90:b4:8b:10:da:6e:c9:5a:08:65:f6:b9:95:0a:7b:a4:
         28:e0:0f:5f:98:8b:2a:e5:68:61:2b:dc:59:64:27:41:29:73:
         e9:03:3c:a6:10:ad:1e:ad:3c:d9:ca:b5:55:5b:38:75:43:65:
         aa:ef:17:ed:d9:ba:43:e1:23:d1:b2:94:fe:6a:99:2a:e3:b0:
         09:7c:a6:73:74:bd:0a:a2:d3:1a:43:ae:98:a7:98:3e:06:db:
         0b:74:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:02:45 2026 by rpki-client