This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/323830343a346132303a3a2f33322d3438203d3e20323637323230.roa
File:                     323830343a346132303a3a2f33322d3438203d3e20323637323230.roa (raw, json)
Hash identifier:          cKaJSuHja3L7F8Cmtfmf6aKGVgYcIJq1yo1I8w0bdEc=
Subject key identifier:   42:9D:C1:C7:BF:5E:9B:CC:5E:E1:89:F0:5B:06:1E:CA:D4:40:B4:75
Certificate issuer:       /CN=6C58F25E6392FA408F66F491A2BF6468573E8130
Certificate serial:       387093B04B37B2A8681B76F3C4C488E3583D7BE5
Authority key identifier: 6C:58:F2:5E:63:92:FA:40:8F:66:F4:91:A2:BF:64:68:57:3E:81:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C58F25E6392FA408F66F491A2BF6468573E8130.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/323830343a346132303a3a2f33322d3438203d3e20323637323230.roa
Signing time:             Sun 18 Jan 2026 17:46:22 +0000
ROA not before:           Sun 18 Jan 2026 17:41:22 +0000
ROA not after:            Sun 17 Jan 2027 17:46:22 +0000
asID:                     267220
IP address blocks:        2804:4a20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/6C58F25E6392FA408F66F491A2BF6468573E8130.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/6C58F25E6392FA408F66F491A2BF6468573E8130.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C58F25E6392FA408F66F491A2BF6468573E8130.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:70:93:b0:4b:37:b2:a8:68:1b:76:f3:c4:c4:88:e3:58:3d:7b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C58F25E6392FA408F66F491A2BF6468573E8130
        Validity
            Not Before: Jan 18 17:41:22 2026 GMT
            Not After : Jan 17 17:46:22 2027 GMT
        Subject: CN=429DC1C7BF5E9BCC5EE189F05B061ECAD440B475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:00:9f:23:2c:91:87:18:f7:6d:2f:64:18:
                    a0:39:a7:a0:7a:5e:5f:c2:d2:02:2e:3f:8b:d4:7d:
                    55:3f:7b:81:6b:84:8f:60:c1:ec:cb:00:bc:2c:1f:
                    69:d4:29:6b:96:38:3c:cd:2e:2d:63:ce:b2:01:aa:
                    dc:8c:6f:f6:b8:ef:15:59:14:6c:0b:50:1a:b4:8c:
                    5c:52:3b:c9:6a:ec:68:bb:03:68:44:48:3a:3f:1d:
                    0d:0e:5d:4e:c8:6b:ab:8f:3a:99:46:c8:89:98:b8:
                    70:e1:19:15:b0:4b:6d:7b:c0:97:e4:04:96:6e:fa:
                    ca:36:1e:a3:d0:24:40:cd:82:9d:00:b6:4d:67:12:
                    c5:74:0e:0b:29:fd:88:4c:f8:70:7b:9b:76:af:6c:
                    c2:b3:5a:bd:2a:50:f5:26:02:ff:9b:f4:85:1d:ef:
                    d8:38:47:7a:45:52:a8:93:db:89:c1:54:c2:73:1b:
                    21:60:cf:a6:38:7d:eb:53:5d:44:3e:df:cb:e3:47:
                    3d:7b:b6:92:6a:8b:0f:01:a8:a6:56:ec:bd:ee:45:
                    2d:a1:c0:ee:ca:e3:b1:8a:a8:02:cd:7c:5b:74:38:
                    39:46:ad:2d:95:29:69:e6:19:27:b5:d7:16:72:c0:
                    ac:6b:cd:56:05:f1:05:0e:8d:3d:55:26:d7:4b:29:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9D:C1:C7:BF:5E:9B:CC:5E:E1:89:F0:5B:06:1E:CA:D4:40:B4:75
            X509v3 Authority Key Identifier:
                keyid:6C:58:F2:5E:63:92:FA:40:8F:66:F4:91:A2:BF:64:68:57:3E:81:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/6C58F25E6392FA408F66F491A2BF6468573E8130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C58F25E6392FA408F66F491A2BF6468573E8130.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/323830343a346132303a3a2f33322d3438203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:90:07:96:68:e7:2f:1f:67:79:fa:a5:0a:6a:0e:cc:bf:
         51:62:ef:d2:52:61:a2:fd:ea:02:a0:bb:2a:da:b3:75:cc:83:
         d0:ff:e1:42:17:62:a4:45:d4:53:19:08:91:26:7d:d2:8d:bc:
         f9:05:e6:55:e8:7c:85:b5:0e:ca:97:34:dd:33:eb:38:a1:56:
         b0:bc:18:af:3f:5b:de:9f:1b:c5:6f:fe:ee:6a:24:98:85:42:
         83:55:c6:e2:26:e4:24:d6:9d:2b:6c:ae:f6:1a:79:ea:0f:68:
         00:2b:c9:a2:47:c3:c9:83:76:47:4e:c2:0a:45:e2:30:7e:ca:
         0c:7d:bf:20:99:09:ae:8e:82:c9:78:8c:b6:85:23:4e:97:bb:
         0f:6b:8f:e1:23:29:ec:6a:7b:91:c1:c5:a8:08:b8:97:31:cc:
         0f:d2:dd:1e:81:7b:52:21:c4:84:7e:80:a4:c5:54:94:12:51:
         8f:d4:31:83:01:91:c4:e9:97:38:c9:01:b6:b3:07:71:64:9c:
         84:89:7a:03:8e:56:81:22:67:fe:2d:9c:f6:98:4e:46:a5:a5:
         92:10:a2:10:a5:0d:d3:d3:31:21:97:97:0a:02:69:41:ac:17:
         88:49:39:f2:dd:e5:43:4c:ea:cc:df:75:8b:09:0a:44:a3:e5:
         10:4e:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:25:52 2026 by rpki-client