This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d313238203d3e20323731333633.roa
File:                     323830343a376134633a3a2f33322d313238203d3e20323731333633.roa (raw, json)
Hash identifier:          B9/0CLMvYvFDMvxHENnvQ2UD1ymVA8ssqNsBZwoLlMc=
Subject key identifier:   2D:ED:58:6E:F6:F6:DF:EA:49:8A:A0:C1:23:B4:64:53:2E:2B:8F:BD
Certificate issuer:       /CN=95C8D065FA30EFE1A5136CFF8A3B88E925859DA5
Certificate serial:       66AC47ACD7131D1127EF7D25B556951C72182DFD
Authority key identifier: 95:C8:D0:65:FA:30:EF:E1:A5:13:6C:FF:8A:3B:88:E9:25:85:9D:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d313238203d3e20323731333633.roa
Signing time:             Fri 09 Jan 2026 22:22:23 +0000
ROA not before:           Fri 09 Jan 2026 22:17:23 +0000
ROA not after:            Fri 08 Jan 2027 22:22:23 +0000
asID:                     271363
IP address blocks:        2804:7a4c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 04:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ac:47:ac:d7:13:1d:11:27:ef:7d:25:b5:56:95:1c:72:18:2d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C8D065FA30EFE1A5136CFF8A3B88E925859DA5
        Validity
            Not Before: Jan  9 22:17:23 2026 GMT
            Not After : Jan  8 22:22:23 2027 GMT
        Subject: CN=2DED586EF6F6DFEA498AA0C123B464532E2B8FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:bd:cf:d2:ba:b7:c8:06:92:8f:ee:35:7d:
                    2f:31:3a:17:09:6b:49:f2:8a:d8:7e:9a:b5:47:18:
                    a6:cb:35:c0:8b:12:f5:6d:e3:2b:ed:a5:34:9a:b4:
                    a1:ab:bf:80:c7:9f:e7:75:ab:20:57:09:40:42:f7:
                    11:ec:02:66:c4:f5:8c:2c:27:20:9e:e3:ea:19:41:
                    ac:7e:0e:21:b1:e1:67:8c:b3:f7:ac:0e:63:bb:ad:
                    88:82:d4:38:4b:68:55:10:f8:57:5a:b1:b3:83:12:
                    eb:37:b2:4a:0b:8f:4d:16:2a:45:6d:8f:e1:9a:87:
                    3a:03:32:93:78:8f:c7:a7:f8:0d:47:a1:8c:8b:b3:
                    dd:f6:cb:cc:b2:d1:85:9e:c5:90:7b:07:8e:d1:8c:
                    3d:8e:50:db:82:40:39:45:12:1f:b0:44:06:ef:a2:
                    08:a4:15:5b:20:00:54:13:a9:40:81:69:59:d6:1e:
                    de:27:f3:6b:77:44:dd:39:cf:9d:cc:bb:06:e7:c1:
                    3c:5f:95:eb:6b:1e:e5:0a:09:0a:8f:76:57:12:64:
                    25:bf:2b:ce:06:7a:fc:7c:01:2b:aa:1e:ab:f3:49:
                    09:92:1d:65:d3:46:43:2f:f0:b0:18:ad:01:73:92:
                    ac:1a:50:6d:3d:30:e1:82:bb:22:1e:cf:68:5c:d0:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:ED:58:6E:F6:F6:DF:EA:49:8A:A0:C1:23:B4:64:53:2E:2B:8F:BD
            X509v3 Authority Key Identifier:
                keyid:95:C8:D0:65:FA:30:EF:E1:A5:13:6C:FF:8A:3B:88:E9:25:85:9D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95C8D065FA30EFE1A5136CFF8A3B88E925859DA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a3a2f33322d313238203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:44:a9:c0:f3:53:ee:00:c7:40:3a:2b:84:a5:45:f6:57:
         41:0e:ca:ad:f8:ba:42:65:45:ce:f2:d0:2d:11:c9:1f:9e:fc:
         c8:52:78:0c:9a:32:4b:15:2f:32:4d:e9:98:e1:9e:7f:4c:49:
         96:d5:3a:df:5f:78:89:62:58:63:1b:0e:ce:59:91:be:3e:73:
         b4:43:5d:83:d7:01:6a:5c:f9:07:b9:b1:20:37:ea:a7:90:19:
         d3:9e:14:ed:9d:21:44:79:33:fe:46:94:a1:d7:04:13:d1:c2:
         bc:be:50:00:2c:50:89:c1:7e:1e:97:41:12:ba:f7:05:0c:54:
         1a:03:c9:20:3f:d0:ee:66:e1:a4:45:b2:69:3c:ba:bc:2d:ac:
         7e:e5:db:19:d8:da:a8:e0:2e:f4:df:b3:fd:80:90:2e:7a:45:
         cf:c2:08:e4:2e:76:ce:30:dc:0f:16:99:a4:b4:08:d6:0f:83:
         b3:ff:a6:d7:02:d2:6a:e8:18:32:ed:24:be:8d:af:0e:f3:1b:
         6d:70:55:68:6e:2f:05:08:ae:3b:94:bb:6c:bc:af:f8:b7:06:
         b9:dd:1a:2a:6d:da:9a:ec:56:8d:4f:18:65:28:80:13:7e:5a:
         64:d3:b9:3f:e6:c5:07:78:00:da:11:b4:bd:5e:a5:f6:96:bc:
         6f:f0:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:38:22 2026 by rpki-client