This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3438203d3e20323731313136.roa
File:                     323830343a373638303a3a2f33322d3438203d3e20323731313136.roa (raw, json)
Hash identifier:          5YRy4VObmzOfIiaSgmTYRnVxUCbkZAeLtzIqjOvndwY=
Subject key identifier:   94:60:F9:99:66:4C:DB:59:03:66:63:9F:A5:0F:19:13:D8:2B:A6:F9
Certificate issuer:       /CN=EE5FCE00D66B8B4AB03483C08CC006D497DFAC55
Certificate serial:       048FE9580082DBB0937F79F0774319E8CC247692
Authority key identifier: EE:5F:CE:00:D6:6B:8B:4A:B0:34:83:C0:8C:C0:06:D4:97:DF:AC:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5FCE00D66B8B4AB03483C08CC006D497DFAC55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3438203d3e20323731313136.roa
Signing time:             Sun 18 Jan 2026 06:11:39 +0000
ROA not before:           Sun 18 Jan 2026 06:06:39 +0000
ROA not after:            Sun 17 Jan 2027 06:11:39 +0000
asID:                     271116
IP address blocks:        2804:7680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/EE5FCE00D66B8B4AB03483C08CC006D497DFAC55.crl
                          rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/EE5FCE00D66B8B4AB03483C08CC006D497DFAC55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5FCE00D66B8B4AB03483C08CC006D497DFAC55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8f:e9:58:00:82:db:b0:93:7f:79:f0:77:43:19:e8:cc:24:76:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5FCE00D66B8B4AB03483C08CC006D497DFAC55
        Validity
            Not Before: Jan 18 06:06:39 2026 GMT
            Not After : Jan 17 06:11:39 2027 GMT
        Subject: CN=9460F999664CDB590366639FA50F1913D82BA6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:f8:da:7d:7a:66:a1:df:64:c3:f6:2f:42:
                    34:aa:d4:9f:5d:54:8c:a4:90:f2:63:4c:96:dd:f4:
                    ab:c1:60:6d:0c:5b:cf:33:78:04:9f:aa:8f:dc:ad:
                    57:a9:90:e6:96:34:4a:6e:ca:73:f1:f7:e5:89:70:
                    7b:64:7f:c6:4f:34:8c:23:c4:89:f9:94:0b:02:b6:
                    98:ec:e1:ce:c8:b9:cf:44:86:92:84:9a:17:80:9f:
                    40:28:34:ba:b6:97:a1:b2:4a:79:f1:fe:94:8e:1a:
                    75:61:ad:71:c5:f7:d5:0e:d7:e2:6a:ca:3f:5d:38:
                    7f:57:24:b9:11:26:fb:93:9c:d6:74:e5:9b:5a:e3:
                    a9:2a:d2:ee:32:9b:b2:c6:43:40:0d:71:7f:b4:cd:
                    5f:2e:e9:17:54:05:31:73:2f:a1:58:85:8c:df:31:
                    fd:b8:98:3f:84:3b:31:d4:95:df:d3:1b:cf:b2:fc:
                    e7:16:30:c5:67:23:c6:3d:a1:15:68:d5:e9:92:48:
                    a9:82:75:1e:78:7d:75:09:19:84:9e:bb:83:bf:36:
                    39:b9:0a:f3:4b:12:a0:1c:77:9f:5a:13:e8:3c:38:
                    70:8d:a5:49:34:55:a0:f4:1a:7c:60:2e:8b:02:d1:
                    84:b8:e8:0f:5e:9a:b2:89:8e:b6:49:86:cb:24:cd:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:60:F9:99:66:4C:DB:59:03:66:63:9F:A5:0F:19:13:D8:2B:A6:F9
            X509v3 Authority Key Identifier:
                keyid:EE:5F:CE:00:D6:6B:8B:4A:B0:34:83:C0:8C:C0:06:D4:97:DF:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/EE5FCE00D66B8B4AB03483C08CC006D497DFAC55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5FCE00D66B8B4AB03483C08CC006D497DFAC55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3438203d3e20323731313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7680::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:d7:65:94:87:1e:9a:88:64:a6:00:dc:4b:bc:4b:8b:59:fa:
         86:f3:ca:d8:4a:cf:79:86:19:77:19:67:25:9a:8d:f0:02:e7:
         de:45:fa:5e:49:bf:9f:1d:73:8f:b2:7f:4c:e1:f3:ff:1f:7d:
         b2:52:c5:90:bc:26:df:92:8d:dd:ff:03:60:1c:17:0b:e3:a8:
         5a:4f:bf:9a:1a:a4:15:fa:2d:05:03:c7:9f:65:11:d3:31:dd:
         07:7c:d1:d8:c2:c2:55:f1:ae:5a:ea:bd:c4:cf:15:54:e1:94:
         cc:d9:62:35:4c:64:2e:08:75:03:45:ea:f7:01:32:c2:1f:86:
         16:f7:21:41:84:71:94:f3:07:22:b3:0e:09:17:ea:52:3e:db:
         ad:44:f0:a4:e5:9d:3b:42:33:06:07:9d:14:02:35:ee:f8:32:
         68:ba:94:ea:1c:ce:d2:14:55:3c:c0:99:e8:95:76:d4:15:e9:
         ef:71:c0:b6:1c:9f:8f:43:74:d1:2c:49:18:53:e3:21:15:41:
         a5:35:f6:dc:17:8c:86:aa:fd:23:5e:e4:31:2d:bb:70:df:e3:
         b7:f7:d4:8f:a4:1a:ea:80:9f:22:4a:18:b7:55:3c:ba:90:91:
         33:e2:f7:ca:50:4f:3c:f0:4e:88:ea:9e:e3:65:60:7a:b0:ba:
         99:84:9a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:26:43 2026 by rpki-client