This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.gns.net.br/repo/Gns/0/323830343a3631343a3a2f33322d3438203d3e203533303236.roa
File:                     323830343a3631343a3a2f33322d3438203d3e203533303236.roa (raw, json)
Hash identifier:          NI2sdW4DyzAOyI8qx3YQOsCm1B8j6rXB0g9og2Mpqns=
Subject key identifier:   DF:06:45:EF:F1:BE:40:F0:5B:45:5D:28:64:FF:31:E8:F5:F2:DE:11
Certificate issuer:       /CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8
Certificate serial:       72396C6D46FE6366D1B79665DBC055E39F515D63
Authority key identifier: 80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer
Subject info access:      rsync://rpki.gns.net.br/repo/Gns/0/323830343a3631343a3a2f33322d3438203d3e203533303236.roa
Signing time:             Wed 21 Jan 2026 15:35:15 +0000
ROA not before:           Wed 21 Jan 2026 15:30:15 +0000
ROA not after:            Wed 20 Jan 2027 15:35:15 +0000
asID:                     53026
IP address blocks:        2804:614::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl
                          rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:39:6c:6d:46:fe:63:66:d1:b7:96:65:db:c0:55:e3:9f:51:5d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8
        Validity
            Not Before: Jan 21 15:30:15 2026 GMT
            Not After : Jan 20 15:35:15 2027 GMT
        Subject: CN=DF0645EFF1BE40F05B455D2864FF31E8F5F2DE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:29:df:0d:13:3e:25:49:cd:8e:10:4f:69:
                    97:57:47:7a:25:98:48:50:16:1d:3b:e8:c5:c1:15:
                    6c:c2:ae:be:c8:80:94:f0:5f:ad:34:f1:65:e7:35:
                    f5:2a:96:69:f6:ed:1f:69:87:0b:52:72:05:a3:fd:
                    87:29:6c:b6:62:b5:39:7b:52:b9:22:3e:98:f0:50:
                    83:f6:55:3f:ca:e1:7c:11:90:eb:9b:54:d5:b0:1b:
                    8e:3e:1a:51:fe:29:f1:72:00:74:9d:b8:1e:66:c9:
                    01:fd:ee:7d:66:ff:f2:10:6a:68:78:cb:0f:5f:39:
                    d9:df:2d:32:a0:f4:4b:42:98:63:b8:88:bc:aa:dc:
                    6c:12:02:90:03:5a:48:18:e1:d1:5a:49:eb:f8:5e:
                    d2:f6:98:6b:89:90:f8:22:85:71:81:aa:93:bc:f7:
                    ac:fe:20:5f:93:5f:41:56:90:da:03:af:ca:16:c4:
                    42:de:04:6e:11:21:a9:66:74:57:59:cb:fd:3a:9e:
                    cd:c3:00:b6:a7:3e:b4:60:3f:cf:72:d7:f9:e5:d4:
                    fd:1c:5f:bd:fa:a5:5f:5d:d9:6c:28:60:2e:ed:9c:
                    23:a0:7d:c7:43:ad:71:b1:16:d4:48:c5:1a:d2:40:
                    53:1d:d3:30:d0:aa:e5:31:72:11:dc:d4:67:14:9f:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:45:EF:F1:BE:40:F0:5B:45:5D:28:64:FF:31:E8:F5:F2:DE:11
            X509v3 Authority Key Identifier:
                keyid:80:D2:95:BF:46:2F:3B:D9:83:FA:79:14:BB:46:EC:5E:C8:AC:C9:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gns.net.br/repo/Gns/0/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D295BF462F3BD983FA7914BB46EC5EC8ACC9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gns.net.br/repo/Gns/0/323830343a3631343a3a2f33322d3438203d3e203533303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:614::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:b9:41:91:6e:c4:70:15:f2:65:e2:19:40:7a:4b:7c:41:
         62:66:fd:82:fe:90:2a:15:f3:e7:b5:9a:4b:34:9d:82:d5:d7:
         65:c1:6d:df:e4:30:dc:fa:84:f9:66:7c:80:63:56:90:17:b2:
         1f:8e:ed:f4:72:1d:13:16:44:1e:3a:98:ff:bf:9d:f6:7f:3b:
         3c:03:7a:f0:90:21:f2:8f:8e:51:ed:77:7b:93:07:0a:96:e0:
         25:3f:8a:67:32:9b:58:b1:9c:2b:c5:03:94:52:53:d7:7e:d8:
         04:2e:de:67:cf:27:31:0e:f2:29:f5:cc:41:c0:b2:f6:6c:99:
         6e:4b:a1:0b:17:4f:2a:c9:46:0d:b0:75:c4:08:e8:9c:01:ab:
         2c:3a:0a:90:f5:19:cf:28:57:d0:0e:a0:53:c4:1c:64:7e:59:
         1e:d0:be:29:76:62:00:45:b2:5d:b4:26:25:a5:67:a0:b6:ba:
         d9:cf:f9:e7:9f:6c:8c:33:8f:20:55:e3:0b:e8:8a:d9:d4:b2:
         73:54:69:76:53:15:04:b6:cf:ef:29:b3:23:70:52:bc:b7:58:
         d0:d6:57:e1:5e:6e:12:76:51:af:f8:93:a1:46:65:69:91:e4:
         85:bc:d3:dd:09:65:ad:95:a2:1b:48:fd:bc:7e:22:85:70:c3:
         3e:a2:ab:d2
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUcjlsbUb+Y2bRt5Zl28BV459RXWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBEMjk1QkY0NjJGM0JEOTgzRkE3OTE0QkI0NkVDNUVD
OEFDQzlEODAeFw0yNjAxMjExNTMwMTVaFw0yNzAxMjAxNTM1MTVaMDMxMTAvBgNV
BAMTKERGMDY0NUVGRjFCRTQwRjA1QjQ1NUQyODY0RkYzMUU4RjVGMkRFMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYxynfDRM+JUnNjhBPaZdXR3ol
mEhQFh076MXBFWzCrr7IgJTwX6008WXnNfUqlmn27R9phwtScgWj/YcpbLZitTl7
UrkiPpjwUIP2VT/K4XwRkOubVNWwG44+GlH+KfFyAHSduB5myQH97n1m//IQamh4
yw9fOdnfLTKg9EtCmGO4iLyq3GwSApADWkgY4dFaSev4XtL2mGuJkPgihXGBqpO8
96z+IF+TX0FWkNoDr8oWxELeBG4RIalmdFdZy/06ns3DALanPrRgP89y1/nl1P0c
X736pV9d2WwoYC7tnCOgfcdDrXGxFtRIxRrSQFMd0zDQquUxchHc1GcUn0SZAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQU3wZF7/G+QPBbRV0oZP8x6PXy3hEwHwYDVR0j
BBgwFoAUgNKVv0YvO9mD+nkUu0bsXsisydgwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5nbnMubmV0LmJyL3JlcG8vR25zLzAv
ODBEMjk1QkY0NjJGM0JEOTgzRkE3OTE0QkI0NkVDNUVDOEFDQzlEOC5jcmwweAYI
KwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MEQyOTVCRjQ2MkYzQkQ5ODNGQTc5
MTRCQjQ2RUM1RUM4QUNDOUQ4LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUH
MAuGWXJzeW5jOi8vcnBraS5nbnMubmV0LmJyL3JlcG8vR25zLzAvMzIzODMwMzQz
YTM2MzEzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMDMyMzYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAoBAYUMA0GCSqGSIb3DQEBCwUAA4IBAQCU07lBkW7EcBXyZeIZQHpLfEFi
Zv2C/pAqFfPntZpLNJ2C1ddlwW3f5DDc+oT5ZnyAY1aQF7Ifju30ch0TFkQeOpj/
v532fzs8A3rwkCHyj45R7Xd7kwcKluAlP4pnMptYsZwrxQOUUlPXftgELt5nzycx
DvIp9cxBwLL2bJluS6ELF08qyUYNsHXECOicAassOgqQ9RnPKFfQDqBTxBxkflke
0L4pdmIARbJdtCYlpWegtrrZz/nnn2yMM48gVeML6IrZ1LJzVGl2UxUEts/vKbMj
cFK8t1jQ1lfhXm4SdlGv+JOhRmVpkeSFvNPdCWWtlaIbSP28fiKFcMM+oqvS
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:32 2026 by rpki-client