This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a343030303a3a2f33342d3334203d3e20323730343938.roa
File:                     323830343a366365303a343030303a3a2f33342d3334203d3e20323730343938.roa (raw, json)
Hash identifier:          q+o3GSvv084E/xp4sB1gUS0VnyfRI19wMBINdejRO9I=
Subject key identifier:   42:9C:AD:A0:D8:52:58:6A:FB:C0:8D:E4:2D:00:F1:8E:E5:78:A8:B0
Certificate issuer:       /CN=B487F45E78D59DF1F45590F19639DB670B31088D
Certificate serial:       10B40258FA8F2BEB25AB1EFEC84313C658EFCEDA
Authority key identifier: B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a343030303a3a2f33342d3334203d3e20323730343938.roa
Signing time:             Mon 05 Jan 2026 13:53:53 +0000
ROA not before:           Mon 05 Jan 2026 13:48:53 +0000
ROA not after:            Mon 04 Jan 2027 13:53:53 +0000
asID:                     270498
IP address blocks:        2804:6ce0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl
                          rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 18:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b4:02:58:fa:8f:2b:eb:25:ab:1e:fe:c8:43:13:c6:58:ef:ce:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B487F45E78D59DF1F45590F19639DB670B31088D
        Validity
            Not Before: Jan  5 13:48:53 2026 GMT
            Not After : Jan  4 13:53:53 2027 GMT
        Subject: CN=429CADA0D852586AFBC08DE42D00F18EE578A8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:43:5d:ae:8b:1a:1b:a7:5b:7f:00:92:e5:31:
                    88:43:12:eb:a9:a1:7b:07:2e:0f:ac:e6:e0:94:fd:
                    15:4b:79:35:b2:e2:dc:78:85:45:ac:9f:d1:97:72:
                    65:77:ee:85:6e:2f:95:9d:4a:7e:f8:e5:36:6f:e9:
                    3b:12:b7:0e:93:32:3a:8e:d5:54:35:f4:83:76:cf:
                    4f:ef:a7:03:13:42:06:53:f1:b6:b5:91:dc:63:03:
                    41:22:37:c3:6f:34:75:35:c9:d5:46:c6:27:2e:4a:
                    1b:1b:45:09:e7:fd:ef:e6:c1:9f:1e:d1:94:93:e4:
                    bb:02:78:b7:9a:eb:01:69:01:0b:46:5f:c5:cb:75:
                    a4:73:38:d6:29:69:cf:e4:71:48:f1:85:1d:18:37:
                    4f:5e:b4:88:22:24:23:68:ba:a1:04:6b:b6:f5:65:
                    8b:d9:1a:ea:5e:84:3f:0d:a2:cd:ab:97:ef:3e:3d:
                    bd:5b:4d:a9:9b:15:c6:4a:00:ae:4f:ff:03:45:f9:
                    59:df:34:4a:63:a9:8a:20:29:97:26:35:c5:2c:f7:
                    a3:aa:1e:06:9d:15:40:ba:53:8e:69:3a:d1:d6:4b:
                    da:d9:cb:79:38:ec:87:b7:83:43:95:0c:15:ea:b2:
                    1d:b1:d9:7b:9b:88:6c:5f:1d:48:0a:e2:a0:87:f1:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9C:AD:A0:D8:52:58:6A:FB:C0:8D:E4:2D:00:F1:8E:E5:78:A8:B0
            X509v3 Authority Key Identifier:
                keyid:B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a343030303a3a2f33342d3334203d3e20323730343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ce0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:9c:8a:88:ec:65:7a:a7:53:76:4e:87:eb:24:80:8d:5d:d7:
         7f:35:65:73:b9:ce:3b:0a:e6:1e:e2:5b:49:ca:8a:59:9d:5f:
         ed:c8:58:06:fd:6c:6e:ee:9d:29:fa:68:dd:5d:58:89:da:34:
         18:83:65:21:2e:90:da:6f:8b:97:db:f1:f8:57:c7:b1:e5:e3:
         bf:71:c5:ce:d2:58:09:c1:dc:7f:b8:56:55:6d:2d:35:eb:86:
         a5:3b:4d:e8:c5:e1:a9:e9:9f:9b:fd:c1:80:9f:c5:c1:1d:0a:
         87:a9:20:61:9e:63:e7:f2:b6:a1:bb:9f:da:e3:4e:f8:be:29:
         6d:2b:a6:d0:a7:21:58:00:69:cd:26:2c:66:1a:23:73:6e:7c:
         5c:fc:d3:a0:85:aa:f6:65:53:a9:ca:79:fd:fa:64:e3:16:10:
         77:90:b9:a6:73:e6:f1:95:8a:30:45:9f:f6:b1:27:49:2e:15:
         c3:0a:b1:8a:30:ee:67:a6:f7:ae:1d:e0:3e:a9:03:1f:5f:93:
         51:ea:9f:c6:aa:46:b4:60:e2:8b:f9:9b:08:32:03:6a:68:ff:
         a4:e4:45:58:92:22:5e:f7:66:62:f5:17:b5:9d:ea:f5:e5:33:
         3b:08:1f:96:4b:4e:13:f1:6c:af:d2:88:f7:cb:72:08:8e:fe:
         ef:49:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 03:00:45 2026 by rpki-client