This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa
File:                     323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa (raw, json)
Hash identifier:          33UEWyXyzn/DYTZR+0vJE2WljaTQJV+1Wo57fgvOHE8=
Subject key identifier:   1F:72:B5:E3:6D:DC:AF:71:C9:4A:99:A0:EF:5B:26:76:B5:19:54:80
Certificate issuer:       /CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Certificate serial:       0291EF0AAB217E3D0E85D6F1383CF69565406D74
Authority key identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa
Signing time:             Thu 05 Feb 2026 18:28:45 +0000
ROA not before:           Thu 05 Feb 2026 18:23:45 +0000
ROA not after:            Thu 04 Feb 2027 18:28:45 +0000
asID:                     11097
IP address blocks:        2801:80:14e0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Feb 2026 11:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:91:ef:0a:ab:21:7e:3d:0e:85:d6:f1:38:3c:f6:95:65:40:6d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
        Validity
            Not Before: Feb  5 18:23:45 2026 GMT
            Not After : Feb  4 18:28:45 2027 GMT
        Subject: CN=1F72B5E36DDCAF71C94A99A0EF5B2676B5195480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:84:36:37:05:96:ce:c0:0f:a3:ee:74:73:
                    e9:c3:80:5a:98:66:24:76:56:38:ae:8e:ee:38:cb:
                    59:a7:70:1d:05:8a:30:f4:5c:33:bd:1a:c1:17:cf:
                    27:e0:36:cc:33:47:a0:7d:7b:0f:e4:2a:2f:29:09:
                    af:00:67:2f:2d:70:d6:ad:94:c9:fe:05:09:9b:1b:
                    b6:56:23:83:23:7f:d9:a9:72:4a:9d:2b:07:83:24:
                    b6:0f:f5:7f:cd:e5:67:62:ed:8a:eb:de:43:f9:3d:
                    19:d5:2e:b7:78:bc:12:f8:55:1b:61:16:f3:80:e3:
                    cc:98:05:65:f9:12:48:26:74:10:44:16:dd:94:94:
                    9e:92:06:cb:c5:f8:12:df:2b:1c:bb:39:d0:b7:88:
                    b8:3c:ca:97:67:35:16:f8:92:95:f4:8e:26:25:af:
                    2a:32:44:16:11:01:ab:57:a5:75:1e:e5:0b:41:16:
                    a5:a2:14:e0:5b:a0:fa:09:cb:81:12:f9:b6:e0:8c:
                    54:60:a4:9a:e8:94:a2:8c:d3:f3:27:bf:4d:a4:c6:
                    cc:30:db:c9:24:12:45:78:4d:5b:26:69:5d:99:bc:
                    e5:8b:b1:c5:1f:af:8b:1d:14:91:9f:50:68:78:5d:
                    ad:ec:91:ca:7b:da:e1:99:4d:ed:f4:c3:78:19:3c:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:B5:E3:6D:DC:AF:71:C9:4A:99:A0:EF:5B:26:76:B5:19:54:80
            X509v3 Authority Key Identifier:
                keyid:38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:14e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         83:c1:17:94:a5:d4:b9:0a:ef:5a:0a:35:bf:14:ac:32:6a:f8:
         c3:dd:b2:2e:94:42:96:da:cb:d6:83:46:37:1e:c4:93:0a:e4:
         94:ac:5d:b5:9c:01:9f:c4:0d:b6:a1:41:5a:a9:d4:47:cb:17:
         f0:72:27:4e:fc:d6:71:5d:92:62:93:99:45:fb:6c:7b:75:b8:
         e7:f8:e5:0b:a2:4e:4c:bc:1c:b6:62:a0:88:6a:cd:be:07:c7:
         7a:50:a1:ee:80:1f:27:42:51:50:fe:41:47:f9:42:65:3a:32:
         b3:0c:47:3a:22:64:66:7a:d1:5e:c9:76:e6:b8:5e:03:53:a2:
         f3:20:9e:0a:ce:b9:aa:f4:d2:78:63:8c:0c:56:29:04:25:0e:
         8c:8c:8d:22:bd:11:1f:1c:b0:7b:05:79:5b:cd:05:8b:de:7d:
         27:24:8f:07:60:72:ec:47:d4:16:71:6b:75:66:fa:ac:9f:0d:
         b4:6f:58:87:39:a9:e3:6f:55:d7:97:a3:78:45:85:e3:6e:5b:
         4e:1c:b7:8b:61:4e:77:2d:f4:08:48:54:9a:18:a7:01:c0:74:
         a7:77:4b:50:9a:64:e0:8a:89:78:56:92:bb:73:d4:6c:58:1c:
         81:89:6d:7f:c1:dc:a0:70:a2:d2:41:3f:26:fe:63:9a:18:54:
         7b:29:32:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 17:14:47 2026 by rpki-client