This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/323830343a313937383a3a2f33322d3333203d3e203631373936.roa
File:                     323830343a313937383a3a2f33322d3333203d3e203631373936.roa (raw, json)
Hash identifier:          Hs/xNdK/kn/UJEhow/GkFsJSBhWOVq+QtOdTCqO0jEg=
Subject key identifier:   70:30:E4:20:46:BB:6E:49:B6:2B:69:63:8E:64:6F:0A:37:AB:5E:4E
Certificate issuer:       /CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
Certificate serial:       1BDE3E2DDD041BFDBF7B0B88A2BC8434F70FE2AA
Authority key identifier: B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/323830343a313937383a3a2f33322d3333203d3e203631373936.roa
Signing time:             Tue 06 Jan 2026 12:23:35 +0000
ROA not before:           Tue 06 Jan 2026 12:18:35 +0000
ROA not after:            Tue 05 Jan 2027 12:23:35 +0000
asID:                     61796
IP address blocks:        2804:1978::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 22:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:de:3e:2d:dd:04:1b:fd:bf:7b:0b:88:a2:bc:84:34:f7:0f:e2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
        Validity
            Not Before: Jan  6 12:18:35 2026 GMT
            Not After : Jan  5 12:23:35 2027 GMT
        Subject: CN=7030E42046BB6E49B62B69638E646F0A37AB5E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fe:c1:a0:87:14:5b:14:50:0b:0e:fd:19:f9:
                    23:f7:2f:88:0f:7c:67:f6:d8:96:d3:85:32:52:dd:
                    13:9f:e8:ca:55:f9:d9:b0:dc:7f:78:ae:f1:64:15:
                    89:92:9c:aa:a2:15:9f:85:fd:73:3c:ec:fc:af:cb:
                    86:d1:bc:ce:e0:4d:27:61:a3:2d:35:f1:98:90:85:
                    85:60:f7:eb:18:65:00:8c:6b:a6:cb:44:8a:d8:80:
                    5e:ec:92:aa:85:b1:4f:db:2c:de:b1:da:52:af:c5:
                    a3:fc:76:04:c2:15:07:4a:a8:2d:48:16:ad:00:25:
                    e6:96:4a:64:b3:14:ae:01:01:19:d9:23:dd:a2:7e:
                    6f:d0:43:b3:e0:e3:c7:8e:f1:a7:1f:ec:52:f4:61:
                    50:4b:d7:d4:5f:f8:ca:89:83:e9:98:b6:3a:e2:73:
                    67:d2:70:b1:04:49:ab:4c:3f:3a:99:0a:e9:53:e2:
                    32:21:25:c2:fa:50:0d:6b:00:f0:69:be:9d:bf:86:
                    86:1f:6c:66:1c:e8:5a:44:19:2b:cc:3a:bc:d0:d1:
                    c3:58:ec:9e:3d:56:2a:6a:f4:21:d6:eb:52:fd:a4:
                    c5:68:17:55:0b:57:1a:93:ce:c7:11:d9:12:ee:de:
                    1c:25:58:8b:5b:00:50:1f:e7:5e:03:ef:18:a7:c2:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:E4:20:46:BB:6E:49:B6:2B:69:63:8E:64:6F:0A:37:AB:5E:4E
            X509v3 Authority Key Identifier:
                keyid:B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/323830343a313937383a3a2f33322d3333203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1978::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:6f:90:0e:18:0a:a5:00:eb:bc:f5:3c:3a:dc:7f:c0:ad:ce:
         81:4e:31:95:6b:a6:a5:c9:df:33:ba:8c:36:54:7f:c0:32:56:
         f9:28:39:5a:52:44:00:bb:66:87:1e:8e:b7:6b:b8:09:11:9a:
         c1:43:36:1b:d0:3b:f5:0e:fb:20:0b:b9:6a:d4:4f:f7:64:ef:
         37:71:bc:26:a1:8c:12:7a:ab:1b:85:b0:db:53:f4:3f:81:cc:
         66:18:5e:c1:89:0b:16:f6:3f:0a:89:11:40:a7:85:20:ea:1a:
         24:20:7e:75:af:cd:b1:82:ec:ff:b6:2e:6a:04:54:7c:7e:ba:
         ee:f5:e3:2b:46:a9:49:60:61:4a:c5:f3:40:05:e6:8b:eb:36:
         eb:9e:da:63:db:88:e3:a9:95:ce:92:d7:17:65:df:ac:e0:7e:
         b7:2f:20:61:9f:48:c0:8b:72:f8:b6:d8:ec:cd:24:b2:2e:d5:
         bc:29:ee:a9:a5:7b:70:74:e7:ee:dc:2a:8e:bc:4d:86:f5:e8:
         83:f9:50:b0:5a:55:01:94:69:cb:6b:de:fb:b0:30:8a:5f:a1:
         80:03:67:5e:91:3d:96:86:0c:26:54:99:c9:90:31:ff:3c:96:
         7b:c2:5a:53:73:95:e9:96:f0:b6:5f:42:41:28:94:3b:96:b6:
         77:b1:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:45:17 2026 by rpki-client