This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/323830343a313035633a3a2f33322d3438203d3e20323633363331.roa
File:                     323830343a313035633a3a2f33322d3438203d3e20323633363331.roa (raw, json)
Hash identifier:          ne363do9dHsOGYwiv/eykQh+bx+GTt7F0IvNbAO8VNc=
Subject key identifier:   0B:C8:53:6F:69:45:50:96:63:E7:97:57:4F:5C:29:98:BA:BB:FA:90
Certificate issuer:       /CN=9A705AE47CA3B06117A7D60A5C1DF68C898AA415
Certificate serial:       646509BFA520C1B10F9474532722CD537E4FF98F
Authority key identifier: 9A:70:5A:E4:7C:A3:B0:61:17:A7:D6:0A:5C:1D:F6:8C:89:8A:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/323830343a313035633a3a2f33322d3438203d3e20323633363331.roa
Signing time:             Sun 18 Jan 2026 06:00:18 +0000
ROA not before:           Sun 18 Jan 2026 05:55:18 +0000
ROA not after:            Sun 17 Jan 2027 06:00:18 +0000
asID:                     263631
IP address blocks:        2804:105c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.crl
                          rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:65:09:bf:a5:20:c1:b1:0f:94:74:53:27:22:cd:53:7e:4f:f9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A705AE47CA3B06117A7D60A5C1DF68C898AA415
        Validity
            Not Before: Jan 18 05:55:18 2026 GMT
            Not After : Jan 17 06:00:18 2027 GMT
        Subject: CN=0BC8536F6945509663E797574F5C2998BABBFA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5d:c2:a8:41:8f:91:d4:64:6e:f4:1b:4b:33:
                    09:f9:86:4b:50:47:1e:35:ae:71:8c:20:22:06:48:
                    3e:36:66:e0:aa:90:7a:5f:f5:17:23:91:7b:83:17:
                    69:17:dd:84:a0:9b:36:b0:a4:44:25:c2:09:cf:d2:
                    e1:61:f0:f7:a7:20:df:d6:10:9b:74:1b:c2:13:d7:
                    10:2e:40:02:e8:68:b9:1e:12:ef:e8:34:10:38:f2:
                    db:6c:74:89:c5:24:79:ed:d5:68:db:a1:83:66:da:
                    03:ac:3e:97:16:59:6f:33:eb:4b:7c:4a:a8:f7:c9:
                    d4:5e:f7:ef:62:e7:1a:1e:ce:88:0e:27:81:73:c6:
                    b3:ae:f9:8d:f5:c2:67:78:62:b2:c1:82:28:38:4a:
                    ba:5c:5b:73:d2:eb:0d:48:11:d9:e8:98:25:2e:98:
                    2a:78:b2:f6:86:14:74:b3:b8:a8:c2:4a:c0:7f:a9:
                    00:86:84:c2:c8:39:f1:9c:78:a3:fa:f9:00:92:ae:
                    1e:8b:f9:c8:d7:11:c9:fe:d4:c0:5d:dd:41:90:24:
                    e2:1c:f0:25:34:64:bd:c5:72:23:bb:98:86:eb:5d:
                    4a:1c:f4:24:e5:f1:6d:66:1f:c0:2d:3f:87:f2:92:
                    f7:71:26:03:47:8d:4d:9c:67:40:49:4e:61:19:db:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C8:53:6F:69:45:50:96:63:E7:97:57:4F:5C:29:98:BA:BB:FA:90
            X509v3 Authority Key Identifier:
                keyid:9A:70:5A:E4:7C:A3:B0:61:17:A7:D6:0A:5C:1D:F6:8C:89:8A:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/323830343a313035633a3a2f33322d3438203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:105c::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:1d:50:a4:7b:8b:a4:42:a0:a8:c1:6f:4a:e6:25:ea:aa:2a:
         ca:65:1d:07:06:27:90:e2:27:a4:f8:bd:90:64:46:46:60:a3:
         5d:bf:43:9c:f6:30:48:c1:6d:f5:12:d0:4b:6f:5b:18:d5:da:
         a4:d4:29:08:13:8c:17:30:80:4f:98:22:f3:be:ea:f9:ea:42:
         6e:23:23:cf:a5:bb:7c:23:e2:cc:45:0b:d3:89:bc:38:f7:08:
         3d:40:82:2e:e3:9c:16:47:11:57:49:08:77:36:b5:e1:2f:fe:
         0e:35:0c:28:cd:7a:9f:69:81:d0:27:bf:fb:be:2f:c6:fc:8a:
         95:48:17:fa:f3:43:80:ba:18:9c:2d:bf:df:cf:94:e7:c9:1d:
         3d:72:7a:ae:c1:47:7c:07:d2:64:09:85:f8:9e:fe:37:a0:c3:
         24:e9:69:2a:15:04:25:82:aa:de:5c:58:e9:6f:c1:cd:61:eb:
         f4:9d:d9:06:ad:31:5c:98:88:bc:c0:d1:d9:f5:bb:08:44:19:
         dc:81:20:65:c4:83:a9:80:14:97:1e:5e:0f:41:ce:99:46:d8:
         48:ca:9a:54:42:f3:04:5c:40:d8:dc:20:40:41:79:62:d8:69:
         40:27:d2:1d:10:63:10:45:2f:9e:cf:99:f8:3c:f5:02:71:75:
         4b:92:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:51:37 2026 by rpki-client