This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
File:                     323830343a3863303a3a2f33322d3438203d3e20323632333931.roa (raw, json)
Hash identifier:          lmWtGWB9S+9PYn/++nNt2e1cpSa/Z0ooje9UUA0Es/U=
Subject key identifier:   7A:A1:F1:93:69:2A:F3:F7:DB:0A:11:32:F2:73:B4:6E:13:21:86:D3
Certificate issuer:       /CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
Certificate serial:       6B4DCB749389CE86C56290319E672121DFC63AED
Authority key identifier: 87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
Signing time:             Fri 16 Jan 2026 17:26:02 +0000
ROA not before:           Fri 16 Jan 2026 17:21:02 +0000
ROA not after:            Fri 15 Jan 2027 17:26:02 +0000
asID:                     262391
IP address blocks:        2804:8c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 20:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4d:cb:74:93:89:ce:86:c5:62:90:31:9e:67:21:21:df:c6:3a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878D8C90A2CCFE6313C5D15C872B89632021E44C
        Validity
            Not Before: Jan 16 17:21:02 2026 GMT
            Not After : Jan 15 17:26:02 2027 GMT
        Subject: CN=7AA1F193692AF3F7DB0A1132F273B46E132186D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:5d:3c:1e:05:e4:80:dd:77:20:ad:16:95:
                    e0:56:d7:0d:33:46:b9:63:55:48:ef:92:cf:1d:ea:
                    59:00:f9:b9:5b:a4:b0:04:5f:8f:dc:89:e5:f2:4f:
                    52:72:74:70:ed:2b:c5:8b:48:95:06:cb:15:9d:1c:
                    1f:39:5c:21:ff:06:77:4b:76:47:2d:7b:57:73:ce:
                    2e:db:71:9f:7c:5d:51:38:d9:77:5a:a2:2d:93:70:
                    65:ae:c1:70:e8:6d:b2:35:aa:8c:ed:0d:b5:91:75:
                    70:bf:9c:92:b6:de:4b:7e:fc:7e:9c:16:d7:21:5b:
                    4f:cf:5a:b0:2e:e6:16:f9:bf:c6:f7:46:12:43:6c:
                    2e:23:e3:2e:72:56:29:81:86:1a:4b:3b:e4:9e:06:
                    71:33:a7:44:e4:97:fb:a4:1a:34:d0:87:a1:ca:43:
                    90:12:96:6d:87:ba:f3:dc:59:31:12:41:8c:80:d7:
                    0e:61:b8:bc:a5:c2:e4:1b:c2:13:f1:f4:fd:01:b2:
                    76:fe:fd:46:fa:d4:ed:8f:27:1a:81:94:59:47:2c:
                    72:67:b7:c0:09:eb:84:32:1a:9c:85:12:e1:50:97:
                    c9:57:fb:1c:0e:cf:11:e8:1e:30:9f:75:68:e3:60:
                    85:97:39:19:e4:39:bb:b7:64:31:5c:9f:9d:06:41:
                    09:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A1:F1:93:69:2A:F3:F7:DB:0A:11:32:F2:73:B4:6E:13:21:86:D3
            X509v3 Authority Key Identifier:
                keyid:87:8D:8C:90:A2:CC:FE:63:13:C5:D1:5C:87:2B:89:63:20:21:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/878D8C90A2CCFE6313C5D15C872B89632021E44C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/878D8C90A2CCFE6313C5D15C872B89632021E44C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/3/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:b1:e1:72:37:94:eb:e6:38:ca:93:33:8d:9c:60:bd:64:
         de:4f:fc:0a:66:40:f8:db:2c:97:ab:16:d2:bd:05:1a:71:53:
         5e:5c:30:b6:7e:06:53:48:9c:3b:9e:54:e8:7b:23:4e:1a:13:
         3e:bc:d7:9f:48:85:a7:f3:49:73:c8:a8:19:41:1a:47:af:35:
         00:0f:50:39:e6:87:4d:4c:af:ed:4a:12:ca:60:19:69:0e:10:
         81:c8:e6:00:74:20:43:eb:f3:60:82:96:a3:1d:b3:5b:e9:f8:
         f5:72:59:92:dd:a9:04:9c:39:ab:5a:28:23:25:be:ec:af:c1:
         bb:f7:30:8e:20:fd:05:d4:af:81:0e:2f:98:67:d6:67:8e:7e:
         9d:84:c6:d5:71:dc:46:5b:e7:43:a2:ca:10:f1:db:77:3b:65:
         ee:54:e3:f5:f3:8f:4b:61:7d:57:46:fc:9d:01:fc:9b:74:19:
         b9:d2:fb:16:86:eb:3e:60:58:b8:f8:8f:96:16:ff:e4:dd:aa:
         70:9e:34:db:94:76:da:69:6a:b7:0a:2a:61:d3:ef:c3:44:28:
         1c:f9:8c:0b:49:2a:09:d2:80:24:df:fd:81:2a:15:ed:78:f2:
         f1:16:54:91:bc:4c:ce:bd:44:84:7d:2d:2c:35:0e:53:c1:be:
         d7:8a:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:01:31 2026 by rpki-client