This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a3a2f33322d3332203d3e20323733333334.roa
File:                     323830343a386431383a3a2f33322d3332203d3e20323733333334.roa (raw, json)
Hash identifier:          /8QjrCDFaIl4ADFEm3v/8I4OsoPw35tjpGf21DyKvT8=
Subject key identifier:   5D:DA:A9:A2:A8:CA:68:33:28:5D:72:A8:72:2F:5B:6A:1E:5E:F3:F3
Certificate issuer:       /CN=B3D9B5FC4A61D9ED08CD952521684C1D0C718C76
Certificate serial:       136470C3D5F1E883A8124C3A1ADDBED3DF5118B7
Authority key identifier: B3:D9:B5:FC:4A:61:D9:ED:08:CD:95:25:21:68:4C:1D:0C:71:8C:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a3a2f33322d3332203d3e20323733333334.roa
Signing time:             Fri 09 Jan 2026 17:58:12 +0000
ROA not before:           Fri 09 Jan 2026 17:53:12 +0000
ROA not after:            Fri 08 Jan 2027 17:58:12 +0000
asID:                     273334
IP address blocks:        2804:8d18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.crl
                          rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:64:70:c3:d5:f1:e8:83:a8:12:4c:3a:1a:dd:be:d3:df:51:18:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3D9B5FC4A61D9ED08CD952521684C1D0C718C76
        Validity
            Not Before: Jan  9 17:53:12 2026 GMT
            Not After : Jan  8 17:58:12 2027 GMT
        Subject: CN=5DDAA9A2A8CA6833285D72A8722F5B6A1E5EF3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:01:23:7f:11:ef:5e:a1:c6:fc:09:36:c2:
                    97:1b:2e:84:0d:fd:60:96:fb:41:e4:bd:24:ec:cf:
                    f8:9a:81:09:f9:6e:41:26:b9:3a:2f:39:a0:96:55:
                    e3:f0:58:cf:e2:25:91:0d:b1:83:35:a6:af:ee:c1:
                    fc:47:d8:92:a3:5e:51:17:2a:7f:af:d8:eb:7f:4c:
                    f8:19:fc:5e:34:5b:ae:be:bb:a7:94:4a:82:df:20:
                    b4:91:28:25:3e:1c:43:fd:76:8b:31:82:2c:fe:4f:
                    cc:97:8e:b8:5d:fe:ca:39:21:f9:ed:c1:17:05:27:
                    f7:69:2c:08:10:2d:9b:66:88:d4:d1:f0:e1:9b:45:
                    0f:14:ab:0a:e7:3c:85:c7:ae:96:93:b1:2b:4b:fa:
                    02:fe:06:8a:6c:38:32:e6:3a:b6:21:25:d1:da:21:
                    87:2e:77:ed:fd:87:5e:0c:9a:40:4e:40:80:71:82:
                    41:b3:f8:32:b4:fa:2a:8f:c1:42:a2:15:22:7f:b2:
                    ea:19:d0:83:93:2f:d9:f1:57:e2:1f:55:2a:12:14:
                    db:be:11:27:80:b1:2f:3b:29:10:17:2d:56:13:6f:
                    12:b3:c9:c2:ba:5e:82:f6:b8:c2:18:92:52:e0:6c:
                    93:a2:72:e9:a5:f7:bb:e7:80:7d:97:8f:8b:0d:81:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DA:A9:A2:A8:CA:68:33:28:5D:72:A8:72:2F:5B:6A:1E:5E:F3:F3
            X509v3 Authority Key Identifier:
                keyid:B3:D9:B5:FC:4A:61:D9:ED:08:CD:95:25:21:68:4C:1D:0C:71:8C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3D9B5FC4A61D9ED08CD952521684C1D0C718C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a3a2f33322d3332203d3e20323733333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d18::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:e9:cb:a5:f5:ea:29:ac:38:f2:63:11:6b:c7:4f:d2:c4:67:
         de:91:69:bf:66:96:3b:ff:66:3f:49:cd:ef:d0:31:51:fe:a5:
         99:eb:01:90:f7:39:dd:d0:43:d2:dc:e6:44:b6:be:74:3b:e1:
         db:ee:a5:08:4e:c8:ac:5c:19:0a:e4:08:13:66:da:e3:ba:32:
         a0:0b:b8:f0:b3:0c:27:87:61:d7:e4:70:dd:8f:9e:86:d7:8e:
         5a:03:00:87:98:d2:68:68:db:00:73:28:c5:0a:91:d5:b9:11:
         c4:3f:eb:8d:54:88:1d:20:67:38:82:e0:13:ed:9b:cb:8b:06:
         68:4a:4e:4e:44:76:cf:6a:e1:9f:2a:6b:8e:6f:5f:df:e9:d3:
         f3:70:6c:eb:c3:c0:04:07:2a:a4:b9:f5:40:bb:93:3b:68:8f:
         f4:cc:cc:9b:82:e9:da:2b:a9:59:f0:e7:e1:b7:82:87:ed:89:
         13:19:55:bd:3d:02:b2:c2:8a:ae:e2:64:0e:4e:69:4a:bc:e8:
         d9:f6:0d:66:eb:44:87:1a:76:fe:71:85:58:fe:a6:9b:93:f3:
         9c:c6:0f:f5:a1:3c:7d:87:98:11:d3:2c:fb:f8:ee:79:6e:08:
         1d:5b:f7:7c:94:39:8a:aa:bd:2a:08:5e:b8:c9:00:46:c6:99:
         2b:5e:36:07
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUE2Rww9Xx6IOoEkw6Gt2+099RGLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNEOUI1RkM0QTYxRDlFRDA4Q0Q5NTI1MjE2ODRDMUQw
QzcxOEM3NjAeFw0yNjAxMDkxNzUzMTJaFw0yNzAxMDgxNzU4MTJaMDMxMTAvBgNV
BAMTKDVEREFBOUEyQThDQTY4MzMyODVENzJBODcyMkY1QjZBMUU1RUYzRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm6wEjfxHvXqHG/Ak2wpcbLoQN
/WCW+0HkvSTsz/iagQn5bkEmuTovOaCWVePwWM/iJZENsYM1pq/uwfxH2JKjXlEX
Kn+v2Ot/TPgZ/F40W66+u6eUSoLfILSRKCU+HEP9dosxgiz+T8yXjrhd/so5Ifnt
wRcFJ/dpLAgQLZtmiNTR8OGbRQ8UqwrnPIXHrpaTsStL+gL+BopsODLmOrYhJdHa
IYcud+39h14MmkBOQIBxgkGz+DK0+iqPwUKiFSJ/suoZ0IOTL9nxV+IfVSoSFNu+
ESeAsS87KRAXLVYTbxKzycK6XoL2uMIYklLgbJOicuml97vngH2Xj4sNgTC9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXdqpoqjKaDMoXXKoci9bah5e8/MwHwYDVR0j
BBgwFoAUs9m1/Eph2e0IzZUlIWhMHQxxjHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2ZZS1FvUUc3U0F2VUQ5S2NQUUtSejkzakJtYlE2SDFndVc3cmhGa1J0
d2gvMC9CM0Q5QjVGQzRBNjFEOUVEMDhDRDk1MjUyMTY4NEMxRDBDNzE4Qzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRDlCNUZDNEE2MUQ5RUQw
OENEOTUyNTIxNjg0QzFEMEM3MThDNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmWUtRb1FHN1NBdlVEOUtjUFFLUno5M2pCbWJRNkgxZ3VXN3JoRmtSdHdoLzAv
MzIzODMwMzQzYTM4NjQzMTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzMzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASNGDANBgkqhkiG9w0BAQsFAAOCAQEAnunLpfXq
Kaw48mMRa8dP0sRn3pFpv2aWO/9mP0nN79AxUf6lmesBkPc53dBD0tzmRLa+dDvh
2+6lCE7IrFwZCuQIE2ba47oyoAu48LMMJ4dh1+Rw3Y+ehteOWgMAh5jSaGjbAHMo
xQqR1bkRxD/rjVSIHSBnOILgE+2by4sGaEpOTkR2z2rhnyprjm9f3+nT83Bs68PA
BAcqpLn1QLuTO2iP9MzMm4Lp2iupWfDn4beCh+2JExlVvT0CssKKruJkDk5pSrzo
2fYNZutEhxp2/nGFWP6mm5PznMYP9aE8fYeYEdMs+/jueW4IHVv3fJQ5iqq9Kghe
uMkARsaZK142Bw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:28 2026 by rpki-client