This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a633030303a3a2f33342d3334203d3e20323730343938.roa
File:                     323830343a366365303a633030303a3a2f33342d3334203d3e20323730343938.roa (raw, json)
Hash identifier:          bzEPxdIrI5k+6YRa5r3Q5jtl4H8e9WXg0KZe0o9/6OQ=
Subject key identifier:   A6:BF:FB:47:7F:3E:8D:8D:BC:35:F0:71:D0:1F:83:DC:E0:35:E9:5E
Certificate issuer:       /CN=B487F45E78D59DF1F45590F19639DB670B31088D
Certificate serial:       56ED684A5CA1163408AE6B9A8B75D2BDCCEEC24B
Authority key identifier: B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a633030303a3a2f33342d3334203d3e20323730343938.roa
Signing time:             Mon 05 Jan 2026 13:54:02 +0000
ROA not before:           Mon 05 Jan 2026 13:49:02 +0000
ROA not after:            Mon 04 Jan 2027 13:54:02 +0000
asID:                     270498
IP address blocks:        2804:6ce0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl
                          rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 18:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ed:68:4a:5c:a1:16:34:08:ae:6b:9a:8b:75:d2:bd:cc:ee:c2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B487F45E78D59DF1F45590F19639DB670B31088D
        Validity
            Not Before: Jan  5 13:49:02 2026 GMT
            Not After : Jan  4 13:54:02 2027 GMT
        Subject: CN=A6BFFB477F3E8D8DBC35F071D01F83DCE035E95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:cc:5d:10:2e:0b:95:26:45:df:a2:21:e3:
                    42:50:ae:16:e5:8f:96:b6:7c:4f:d7:2a:45:dd:c2:
                    47:9d:d9:e1:17:6b:92:cc:dd:6d:31:1c:5b:b4:94:
                    ec:8e:99:c5:86:74:b0:1f:c0:b8:c3:5a:bb:de:f5:
                    c2:c6:e5:7f:6b:ef:d9:e2:c2:c6:3c:a1:f8:42:8d:
                    11:36:4c:40:c7:3d:97:b8:52:b9:a5:3d:4a:69:fc:
                    60:bc:58:bd:7d:49:8e:c5:77:b8:d3:36:92:2b:b4:
                    b4:ba:de:76:49:30:88:6f:de:8e:3d:39:c1:fb:c8:
                    98:f2:fb:ea:48:e7:84:55:72:12:2d:72:b0:d2:82:
                    f6:c4:80:24:f4:9f:2e:1d:52:a1:1c:eb:a0:46:04:
                    fb:89:3e:b8:a9:b1:b2:73:f3:fe:3b:e0:81:e1:0f:
                    56:21:fa:1e:86:0b:be:e4:53:84:ec:b0:8c:6e:c4:
                    53:59:8e:3d:d4:fc:e8:88:14:5e:7c:aa:93:51:e5:
                    58:57:e1:d5:45:63:c3:d6:f6:a3:58:e8:da:d4:21:
                    d8:ae:b9:9f:51:ab:b4:28:5a:63:ab:0c:4a:f6:01:
                    a8:4a:1e:07:3f:78:e6:6b:e4:4e:79:95:f3:b2:df:
                    06:98:42:a2:09:69:06:d4:3e:35:94:01:6c:a1:c1:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BF:FB:47:7F:3E:8D:8D:BC:35:F0:71:D0:1F:83:DC:E0:35:E9:5E
            X509v3 Authority Key Identifier:
                keyid:B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a633030303a3a2f33342d3334203d3e20323730343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ce0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:3d:94:c4:a7:95:0e:4c:5f:da:c2:4f:e7:d5:44:38:c4:fe:
         34:81:b2:26:c1:19:34:7d:35:af:5b:ba:24:38:7f:4a:49:6e:
         65:e1:88:fa:d7:e7:9d:e7:de:eb:c8:e3:98:12:be:c2:cc:a4:
         a7:4e:2c:25:c9:d4:4d:2f:ad:3c:6e:82:14:11:98:47:47:ef:
         ab:56:2f:e7:39:4d:28:10:23:33:4c:31:fe:c4:a6:e3:3b:7d:
         19:04:82:a0:b7:76:a0:91:8e:d5:3a:2f:1f:70:9f:42:db:1f:
         16:05:38:44:42:30:cc:07:84:c2:ca:90:d3:68:28:3f:f6:6a:
         76:e5:74:2b:dc:b4:fc:6c:7d:ff:91:67:53:de:b4:ef:f7:3e:
         e1:9d:b0:f6:78:1f:dd:15:67:74:28:6e:7b:47:6a:82:09:d6:
         73:89:25:dc:65:9b:3e:14:47:5b:18:37:b5:4a:15:c5:5a:17:
         24:90:e2:5d:01:53:e3:18:a0:83:14:9d:7c:b9:83:f0:ae:4a:
         05:7c:aa:00:18:b0:35:15:b1:02:78:c8:30:87:1f:93:fb:85:
         8f:6f:7d:58:9b:5c:bf:72:2d:de:93:2d:21:d7:8e:41:3d:55:
         35:44:b6:34:66:21:82:bd:01:09:e8:a5:3c:c2:2e:e3:2a:94:
         a7:58:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 03:00:45 2026 by rpki-client