This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a3a2f33342d3334203d3e20323730343938.roa
File:                     323830343a366365303a3a2f33342d3334203d3e20323730343938.roa (raw, json)
Hash identifier:          9i54hXs1OWx/4qto/F2/Rl2kKpO96wzoRmTKU7eCwrU=
Subject key identifier:   DC:F3:0E:E5:E9:DB:F6:2F:CB:FF:9E:A8:90:9A:B0:88:9A:AC:5C:EC
Certificate issuer:       /CN=B487F45E78D59DF1F45590F19639DB670B31088D
Certificate serial:       0A71EA91B83E348592DBBC9088F8192063B8A93F
Authority key identifier: B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a3a2f33342d3334203d3e20323730343938.roa
Signing time:             Mon 05 Jan 2026 13:53:48 +0000
ROA not before:           Mon 05 Jan 2026 13:48:48 +0000
ROA not after:            Mon 04 Jan 2027 13:53:48 +0000
asID:                     270498
IP address blocks:        2804:6ce0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl
                          rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 18:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:71:ea:91:b8:3e:34:85:92:db:bc:90:88:f8:19:20:63:b8:a9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B487F45E78D59DF1F45590F19639DB670B31088D
        Validity
            Not Before: Jan  5 13:48:48 2026 GMT
            Not After : Jan  4 13:53:48 2027 GMT
        Subject: CN=DCF30EE5E9DBF62FCBFF9EA8909AB0889AAC5CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:ee:ad:34:2c:63:d7:a4:38:ab:df:d4:d0:
                    a8:06:18:f5:c7:64:91:4c:dd:c0:6a:f4:7a:01:c5:
                    1d:b9:22:dd:7f:23:e3:db:69:28:85:02:34:7b:3f:
                    ac:72:9b:b0:4e:1b:a0:df:75:82:cd:7a:c7:57:59:
                    16:19:10:88:ac:07:8a:9d:cb:69:10:30:ff:ca:9b:
                    90:3a:12:72:74:7c:d7:b5:c6:ce:d4:41:6d:1d:b1:
                    8d:5a:30:7c:b6:d8:f3:7f:3e:4b:67:b9:50:c8:48:
                    8d:6f:74:3e:84:5a:32:15:b9:0f:7d:27:c0:da:5a:
                    96:54:e5:bf:21:2d:26:ce:9c:82:04:5e:6d:ec:6a:
                    ce:3d:57:60:33:5d:f6:3a:aa:f9:ca:2f:86:53:8c:
                    55:38:fd:90:46:d4:83:07:a9:c8:82:5b:da:49:bd:
                    f2:1b:1e:7f:fa:d4:f1:26:26:ed:3c:97:b1:e5:5a:
                    a9:e0:dc:ef:d2:01:5b:d4:a1:f3:46:fb:a8:05:b0:
                    17:56:9b:ff:63:23:40:f4:9f:6f:34:11:91:6b:71:
                    0c:fe:5d:0c:be:cf:f1:58:1e:c7:c1:f6:f7:ff:23:
                    81:50:ca:32:27:7a:2a:0a:99:4d:12:6f:c9:65:a3:
                    8b:5c:84:30:5a:35:a3:4a:b8:ec:7e:ce:38:7e:e2:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:0E:E5:E9:DB:F6:2F:CB:FF:9E:A8:90:9A:B0:88:9A:AC:5C:EC
            X509v3 Authority Key Identifier:
                keyid:B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a3a2f33342d3334203d3e20323730343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ce0::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:40:97:e7:1e:7a:e5:ec:b4:7f:cf:24:0a:e5:7b:c7:e2:
         af:1d:a0:5a:18:fa:30:8f:e1:a6:32:61:c9:ab:d9:45:a6:0f:
         b7:db:94:34:fc:bb:9b:36:ee:65:a0:63:ce:ae:65:6f:6a:bd:
         20:92:ec:d5:48:5c:e4:6c:a5:82:70:a8:bb:12:eb:3f:ca:a6:
         aa:bd:c0:fe:2c:1b:d4:b6:9e:d7:b2:ba:e0:df:a3:fc:70:35:
         df:ba:d5:72:eb:57:b8:bf:71:b6:0d:59:05:6f:d2:42:a7:b5:
         46:1c:62:b6:48:9d:79:d2:fc:b3:ea:62:51:e1:e0:ba:d6:e4:
         ae:19:83:61:e8:3a:43:9a:44:ca:56:84:c3:da:80:e4:76:1b:
         4e:2f:3b:43:f6:33:21:77:94:92:e7:f1:02:7b:60:b7:66:ee:
         5f:f8:a7:e4:10:b2:7f:d8:f9:ce:c6:c6:a7:23:93:bc:47:e5:
         80:d7:64:35:55:4a:fb:e3:21:3a:ee:c8:70:e6:4c:4a:15:43:
         6f:97:89:a9:62:67:c7:aa:a7:33:17:77:25:c2:33:15:d7:87:
         2a:15:9a:9d:ec:a8:92:51:9a:a3:f6:74:1f:0f:10:1b:74:bb:
         ef:79:ae:11:f8:50:11:8b:89:4a:80:f5:f2:d0:53:d9:ee:95:
         6a:ae:e7:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCnHqkbg+NIWS27yQiPgZIGO4qT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ4N0Y0NUU3OEQ1OURGMUY0NTU5MEYxOTYzOURCNjcw
QjMxMDg4RDAeFw0yNjAxMDUxMzQ4NDhaFw0yNzAxMDQxMzUzNDhaMDMxMTAvBgNV
BAMTKERDRjMwRUU1RTlEQkY2MkZDQkZGOUVBODkwOUFCMDg4OUFBQzVDRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTe6tNCxj16Q4q9/U0KgGGPXH
ZJFM3cBq9HoBxR25It1/I+PbaSiFAjR7P6xym7BOG6DfdYLNesdXWRYZEIisB4qd
y2kQMP/Km5A6EnJ0fNe1xs7UQW0dsY1aMHy22PN/PktnuVDISI1vdD6EWjIVuQ99
J8DaWpZU5b8hLSbOnIIEXm3sas49V2AzXfY6qvnKL4ZTjFU4/ZBG1IMHqciCW9pJ
vfIbHn/61PEmJu08l7HlWqng3O/SAVvUofNG+6gFsBdWm/9jI0D0n280EZFrcQz+
XQy+z/FYHsfB9vf/I4FQyjIneioKmU0Sb8llo4tchDBaNaNKuOx+zjh+4hz9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3PMO5enb9i/L/56okJqwiJqsXOwwHwYDVR0j
BBgwFoAUtIf0XnjVnfH0VZDxljnbZwsxCI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkdqS2hDUGNwblZZQW9NQjRxdk0xUXVXdEZqM0hVQlpWSENLa0dac1Jv
M04vMC9CNDg3RjQ1RTc4RDU5REYxRjQ1NTkwRjE5NjM5REI2NzBCMzEwODhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0ODdGNDVFNzhENTlERjFG
NDU1OTBGMTk2MzlEQjY3MEIzMTA4OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZHaktoQ1BjcG5WWUFvTUI0cXZNMVF1V3RGajNIVUJaVkhDS2tHWnNSbzNOLzAv
MzIzODMwMzQzYTM2NjM2NTMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMw
MzQzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARs4AAwDQYJKoZIhvcNAQELBQADggEBAHyZQJfn
Hnrl7LR/zyQK5XvH4q8doFoY+jCP4aYyYcmr2UWmD7fblDT8u5s27mWgY86uZW9q
vSCS7NVIXORspYJwqLsS6z/Kpqq9wP4sG9S2nteyuuDfo/xwNd+61XLrV7i/cbYN
WQVv0kKntUYcYrZInXnS/LPqYlHh4LrW5K4Zg2HoOkOaRMpWhMPagOR2G04vO0P2
MyF3lJLn8QJ7YLdm7l/4p+QQsn/Y+c7Gxqcjk7xH5YDXZDVVSvvjITruyHDmTEoV
Q2+XialiZ8eqpzMXdyXCMxXXhyoVmp3sqJJRmqP2dB8PEBt0u+95rhH4UBGLiUqA
9fLQU9nulWqu57g=
-----END CERTIFICATE-----
Generated at Sun Jan 11 03:00:45 2026 by rpki-client