This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d3438203d3e20323632353333.roa
File:                     323830313a38303a3239303a3a2f34382d3438203d3e20323632353333.roa (raw, json)
Hash identifier:          Jos3EL0QOn9pxUboT4q1dt7hM14Ff+9UdSZQk3BMmtE=
Subject key identifier:   5A:FF:50:13:E3:79:0A:61:79:AD:37:74:CD:99:65:E5:19:49:A6:49
Certificate issuer:       /CN=EBB7F525C02B59CB9192A93DBB768402C465AF7C
Certificate serial:       340584B80174A477BFE3990BB051584DF4589829
Authority key identifier: EB:B7:F5:25:C0:2B:59:CB:91:92:A9:3D:BB:76:84:02:C4:65:AF:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB7F525C02B59CB9192A93DBB768402C465AF7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d3438203d3e20323632353333.roa
Signing time:             Wed 14 Jan 2026 18:30:21 +0000
ROA not before:           Wed 14 Jan 2026 18:25:21 +0000
ROA not after:            Wed 13 Jan 2027 18:30:21 +0000
asID:                     262533
IP address blocks:        2801:80:290::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/EBB7F525C02B59CB9192A93DBB768402C465AF7C.crl
                          rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/EBB7F525C02B59CB9192A93DBB768402C465AF7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB7F525C02B59CB9192A93DBB768402C465AF7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:05:84:b8:01:74:a4:77:bf:e3:99:0b:b0:51:58:4d:f4:58:98:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB7F525C02B59CB9192A93DBB768402C465AF7C
        Validity
            Not Before: Jan 14 18:25:21 2026 GMT
            Not After : Jan 13 18:30:21 2027 GMT
        Subject: CN=5AFF5013E3790A6179AD3774CD9965E51949A649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:1e:85:ce:2b:a5:0e:06:90:ed:4e:44:f6:
                    29:34:cc:0c:8e:1d:73:cc:88:99:ab:cf:b7:12:54:
                    e3:4c:47:c8:7d:e7:b6:92:6a:63:c0:cb:1d:66:61:
                    ae:82:6b:e0:d8:e3:bf:d6:57:ab:05:d7:d5:0d:84:
                    15:1a:c5:e0:50:29:26:18:dd:a4:a9:35:60:f4:52:
                    50:bb:fb:96:9f:e4:01:1b:d7:56:1d:5b:56:fc:d6:
                    14:07:6a:01:68:bf:ae:c8:d5:b4:eb:60:c8:75:5e:
                    43:38:78:b9:1c:b1:d7:c7:0c:8b:e7:f4:09:79:c9:
                    ce:35:d1:b8:55:5b:45:45:4a:ef:7f:38:6a:b0:89:
                    97:39:c7:7b:1c:46:4f:70:79:ba:10:c0:cc:18:39:
                    a4:74:9a:aa:eb:19:72:d8:cd:46:e9:ba:55:18:b0:
                    e6:2d:f5:a5:dc:39:16:ba:5f:b0:81:3c:11:41:b7:
                    95:38:dd:c4:56:f7:b4:8f:db:a6:65:75:81:f7:ff:
                    3c:1b:21:71:64:b1:18:03:36:7e:f7:b0:4c:6c:23:
                    f1:6a:30:50:26:9a:e8:65:c7:0f:d7:67:27:67:3a:
                    47:b2:e2:36:cf:4c:33:cb:67:5c:0e:41:f8:4e:65:
                    dd:bd:b6:00:87:cc:5a:c3:b8:38:cc:c0:3a:e4:5b:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FF:50:13:E3:79:0A:61:79:AD:37:74:CD:99:65:E5:19:49:A6:49
            X509v3 Authority Key Identifier:
                keyid:EB:B7:F5:25:C0:2B:59:CB:91:92:A9:3D:BB:76:84:02:C4:65:AF:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/EBB7F525C02B59CB9192A93DBB768402C465AF7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB7F525C02B59CB9192A93DBB768402C465AF7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/323830313a38303a3239303a3a2f34382d3438203d3e20323632353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:290::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:82:c4:a1:4a:6b:c3:54:7a:a2:f2:cc:32:6e:20:72:af:59:
         2f:cb:22:98:08:0a:28:fa:b5:a0:ea:78:09:9d:d4:a8:5f:ec:
         5e:ef:d3:49:a4:3c:c2:79:51:24:0a:28:15:2b:19:b6:e7:c1:
         cf:94:64:b5:49:20:fd:f2:b0:35:bd:41:7b:54:4e:80:13:eb:
         e2:8c:2a:ea:c0:14:e0:b4:4c:34:e4:9f:c8:b8:12:74:2c:e6:
         57:e5:d2:58:e6:0f:1f:c9:b8:8e:e7:00:01:ec:1f:4e:78:01:
         47:47:0b:6e:f9:97:ba:c9:f3:17:53:fb:df:8a:02:2c:ad:ed:
         c1:9a:3c:07:7f:77:03:82:bb:ef:1a:9e:2a:de:6d:99:50:f7:
         c4:b6:0c:e0:60:19:ad:a4:3c:e8:6b:27:68:94:51:6c:a5:9b:
         f6:6f:69:88:45:95:d1:58:ad:51:4d:68:9c:70:fa:e7:bc:ce:
         7f:5d:a9:35:32:a4:01:f8:ee:6d:9c:f3:2b:cf:bd:15:b3:e2:
         41:42:ce:35:83:3e:47:64:5c:c0:3d:2d:e1:25:44:7f:6a:e3:
         6a:d3:8d:6d:55:28:9d:46:09:2c:9b:c1:bc:b7:f3:e7:d7:f5:
         bf:57:d7:fc:52:66:bc:71:b1:2a:23:e5:0a:50:4b:3b:81:f1:
         b1:ea:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:17:46 2026 by rpki-client