This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/323830343a326539303a3a2f33322d3438203d3e203532353238.roa
File:                     323830343a326539303a3a2f33322d3438203d3e203532353238.roa (raw, json)
Hash identifier:          7MTy9/uN2SzdnBl63LwdNvM0xq935RpPT+5Uz/tFsSk=
Subject key identifier:   09:6F:68:10:CF:3E:2C:6A:E6:BD:36:48:72:2A:E3:42:7D:3C:41:EC
Certificate issuer:       /CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
Certificate serial:       0B26DA3556FEAAF9B7119718B5574B932342C058
Authority key identifier: F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/323830343a326539303a3a2f33322d3438203d3e203532353238.roa
Signing time:             Wed 21 Jan 2026 12:04:52 +0000
ROA not before:           Wed 21 Jan 2026 11:59:52 +0000
ROA not after:            Wed 20 Jan 2027 12:04:52 +0000
asID:                     52528
IP address blocks:        2804:2e90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.crl
                          rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:26:da:35:56:fe:aa:f9:b7:11:97:18:b5:57:4b:93:23:42:c0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
        Validity
            Not Before: Jan 21 11:59:52 2026 GMT
            Not After : Jan 20 12:04:52 2027 GMT
        Subject: CN=096F6810CF3E2C6AE6BD3648722AE3427D3C41EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:09:6e:59:63:c8:5e:fa:4c:a6:8f:9e:fe:29:
                    b5:71:40:9c:f9:31:c4:af:ae:3c:c4:77:f6:c6:72:
                    5c:c0:ca:01:6a:b6:46:59:58:72:09:4d:ce:c1:8b:
                    8c:8a:7f:bd:33:04:1a:61:ae:2e:01:a2:d8:3b:41:
                    d0:68:3f:63:b7:4a:41:39:db:c7:68:6f:0c:67:76:
                    0b:ea:d6:d7:da:1a:df:b1:1c:91:6e:cf:dc:dd:c5:
                    7e:94:b4:f1:2e:d0:e3:dc:89:68:63:d8:0a:53:62:
                    4f:ba:ba:ad:11:b3:74:b5:e7:4d:1d:e7:cb:5a:38:
                    d2:aa:f4:07:67:58:ea:c0:5b:44:e9:fe:33:1c:2d:
                    bc:d4:65:f8:1e:22:9f:9f:c5:c6:45:15:de:1c:62:
                    ac:02:f7:68:27:2a:44:a4:85:b8:0e:79:f1:cf:06:
                    67:87:c8:f7:87:29:ea:0a:67:0c:3b:30:9e:7b:cc:
                    93:56:64:3c:18:c1:c9:41:d3:41:a6:6a:4a:da:83:
                    0e:56:1f:4a:ea:13:85:f1:c7:95:be:f7:50:5c:84:
                    36:6e:22:d0:b4:b3:65:c9:6a:73:f5:d6:53:6f:4d:
                    3f:e8:a3:50:d8:4d:40:72:b9:ad:3d:5d:2f:5b:b0:
                    91:46:4b:75:53:f1:ad:63:b4:b8:4d:1b:00:06:f5:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:68:10:CF:3E:2C:6A:E6:BD:36:48:72:2A:E3:42:7D:3C:41:EC
            X509v3 Authority Key Identifier:
                keyid:F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/323830343a326539303a3a2f33322d3438203d3e203532353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:98:c0:f4:d0:47:de:57:58:bc:6d:de:a1:85:c2:83:4f:93:
         44:9b:82:3b:21:97:01:ff:e0:6a:c2:87:5c:14:1c:75:88:13:
         17:4d:be:ef:68:f9:88:bb:66:88:2e:4f:fa:d4:4b:8a:02:a9:
         34:85:5b:96:23:71:d9:6c:6c:40:4e:9e:a9:ea:01:b0:14:4c:
         ed:10:ce:64:c7:52:07:c4:86:f5:c6:6a:49:df:5e:4f:fd:3b:
         ee:c8:2a:e8:83:cb:83:48:52:e2:4b:de:23:44:65:cd:34:d3:
         43:2c:95:5c:2a:e4:22:ac:4d:e4:9e:30:13:ec:88:fa:62:49:
         90:84:7c:41:9b:8a:f7:aa:c5:18:0a:15:0c:d4:c4:d7:fe:aa:
         a8:a1:45:0a:92:cf:61:8e:2d:a2:03:93:ec:3f:33:1c:00:a0:
         38:02:36:0c:b4:2b:72:58:69:24:60:67:c9:3b:35:b6:10:b4:
         81:41:30:86:60:4e:41:1a:a6:68:fe:f3:31:50:bc:d5:c1:00:
         3c:30:3d:ce:09:66:81:f2:63:c0:c9:77:46:4a:cb:ed:44:a1:
         64:1e:d0:b0:ed:50:60:c7:1e:1e:65:f3:f3:69:c5:fa:07:44:
         29:5b:9a:60:96:82:f7:8b:b9:0b:59:63:77:72:30:4e:e5:f2:
         1d:25:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:10 2026 by rpki-client