This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/323830343a386361383a3a2f33322d313238203d3e20323733383133.roa
File:                     323830343a386361383a3a2f33322d313238203d3e20323733383133.roa (raw, json)
Hash identifier:          mQbTCYAkJavNJo8TeKBRpgCGA/JpXPbLmko6SkYbdDI=
Subject key identifier:   0C:01:81:72:87:07:55:55:81:4D:C6:60:45:9E:0D:A6:DB:32:2F:68
Certificate issuer:       /CN=2E695AEE7F6218C09E7A716B618263704B801257
Certificate serial:       3DA0A57BB44F67D3A47B0A013E1FDFEBA1A81BCC
Authority key identifier: 2E:69:5A:EE:7F:62:18:C0:9E:7A:71:6B:61:82:63:70:4B:80:12:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E695AEE7F6218C09E7A716B618263704B801257.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/323830343a386361383a3a2f33322d313238203d3e20323733383133.roa
Signing time:             Mon 05 Jan 2026 18:26:47 +0000
ROA not before:           Mon 05 Jan 2026 18:21:47 +0000
ROA not after:            Mon 04 Jan 2027 18:26:47 +0000
asID:                     273813
IP address blocks:        2804:8ca8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/2E695AEE7F6218C09E7A716B618263704B801257.crl
                          rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/2E695AEE7F6218C09E7A716B618263704B801257.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E695AEE7F6218C09E7A716B618263704B801257.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 14:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a0:a5:7b:b4:4f:67:d3:a4:7b:0a:01:3e:1f:df:eb:a1:a8:1b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E695AEE7F6218C09E7A716B618263704B801257
        Validity
            Not Before: Jan  5 18:21:47 2026 GMT
            Not After : Jan  4 18:26:47 2027 GMT
        Subject: CN=0C01817287075555814DC660459E0DA6DB322F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:1f:ec:9e:66:e5:b4:1f:25:1e:f5:55:23:
                    98:aa:93:72:47:9a:27:e3:48:7e:1a:78:43:6d:80:
                    6e:d7:6a:a9:ba:12:86:00:b2:29:7c:b5:a3:4a:c9:
                    03:a1:0e:58:0f:fc:97:7b:66:e3:e5:91:dd:e3:a9:
                    aa:d3:f3:ed:17:e2:ba:10:65:6b:9f:05:42:f8:c3:
                    c5:cd:35:b0:4c:9e:69:47:72:9b:ec:88:70:51:be:
                    f3:3e:4f:40:27:8d:28:71:ad:e7:11:ff:97:d0:2b:
                    7c:70:ed:72:d5:d3:e0:e6:4c:e9:28:42:44:eb:2c:
                    a3:48:7f:a1:69:04:d9:f7:a1:1d:ac:a3:cc:3e:af:
                    35:38:b5:53:8c:d2:da:5f:fa:1c:3f:7e:67:17:52:
                    d3:f3:50:9a:5a:f8:74:55:99:8d:ca:f4:4b:52:33:
                    5e:7c:7e:4f:80:93:96:ee:8a:ca:a1:b1:03:eb:77:
                    22:44:2a:2a:31:e5:fc:51:dc:56:3a:4d:cd:77:05:
                    13:bb:1f:c7:0b:50:22:d8:f7:fa:b6:22:ee:bb:28:
                    c2:46:f5:f7:55:0f:2e:e3:31:f4:ea:3c:83:4a:a4:
                    24:33:70:a8:49:0a:cb:a4:51:c5:94:60:f6:75:d4:
                    45:75:94:52:ce:1a:bf:94:5f:df:6e:6f:c4:70:f2:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:81:72:87:07:55:55:81:4D:C6:60:45:9E:0D:A6:DB:32:2F:68
            X509v3 Authority Key Identifier:
                keyid:2E:69:5A:EE:7F:62:18:C0:9E:7A:71:6B:61:82:63:70:4B:80:12:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/2E695AEE7F6218C09E7A716B618263704B801257.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E695AEE7F6218C09E7A716B618263704B801257.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ycuG13hx7knTmqQYrE5BatKrPrTddhkRedSAU7RnGsH/0/323830343a386361383a3a2f33322d313238203d3e20323733383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ca8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:03:c5:98:8e:a6:24:ad:95:8f:92:2a:e2:74:ad:4a:91:e8:
         13:e9:7a:06:8e:9c:e3:3b:fa:33:c5:96:60:7e:0c:49:3b:63:
         9c:1b:2c:13:49:73:d2:50:7d:40:7a:95:d9:d0:16:f0:91:32:
         70:46:f7:36:0c:74:0a:e6:1f:d8:65:fe:22:e4:db:c0:98:70:
         e0:c4:bc:2e:9f:15:ed:fd:91:cd:48:67:bd:ec:27:25:07:7c:
         51:63:24:b5:75:34:5b:95:21:5a:a7:49:53:29:30:61:57:8a:
         37:d9:42:dd:ed:98:f2:cf:c4:d2:55:86:17:ca:75:ee:87:2e:
         9a:09:17:42:56:6e:b9:bd:7b:27:f1:3e:7a:29:c9:a3:0a:98:
         44:a1:cc:c4:33:6c:b6:9e:bb:6a:03:fb:57:3c:50:7d:78:53:
         99:d8:a4:9d:17:dd:6b:11:81:1e:f5:9c:36:59:94:89:a0:d1:
         73:19:dd:75:c0:e2:5d:bb:21:2e:dd:06:09:43:fc:f7:a6:49:
         94:08:40:ba:28:88:29:ad:2a:fd:55:11:d0:83:bf:99:f9:ba:
         b2:0d:bb:cc:d3:ae:9a:63:0f:89:84:0e:71:4a:df:b7:42:00:
         a6:c7:bd:dc:7f:de:bd:eb:78:f6:57:b5:37:50:d9:db:45:49:
         ed:ef:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:01:46 2026 by rpki-client