This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/323830343a363732383a383830303a3a2f34302d3430203d3e20323639363038.roa
File:                     323830343a363732383a383830303a3a2f34302d3430203d3e20323639363038.roa (raw, json)
Hash identifier:          aX4oc/tF+oB7FS/h37POoD6nEDYopMrS5LLNGaH/pl0=
Subject key identifier:   E6:DE:73:1B:4F:79:8B:4A:79:EB:97:50:59:9D:4F:AC:3B:65:C1:39
Certificate issuer:       /CN=77858F0B49CF01FBE34EAD0268D2D6A0B31685C4
Certificate serial:       3798C382069B4CDFB40D268F2CCECC34B897FA34
Authority key identifier: 77:85:8F:0B:49:CF:01:FB:E3:4E:AD:02:68:D2:D6:A0:B3:16:85:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/323830343a363732383a383830303a3a2f34302d3430203d3e20323639363038.roa
Signing time:             Tue 30 Dec 2025 16:15:32 +0000
ROA not before:           Tue 30 Dec 2025 16:10:32 +0000
ROA not after:            Tue 29 Dec 2026 16:15:32 +0000
asID:                     269608
IP address blocks:        2804:6728:8800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.crl
                          rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 10:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:98:c3:82:06:9b:4c:df:b4:0d:26:8f:2c:ce:cc:34:b8:97:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77858F0B49CF01FBE34EAD0268D2D6A0B31685C4
        Validity
            Not Before: Dec 30 16:10:32 2025 GMT
            Not After : Dec 29 16:15:32 2026 GMT
        Subject: CN=E6DE731B4F798B4A79EB9750599D4FAC3B65C139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d5:e6:49:cd:d0:97:18:88:21:20:b9:57:57:
                    d4:13:a8:cc:68:e8:43:dd:fd:2f:37:9f:ae:6e:43:
                    bc:f2:4b:45:87:c7:dc:5e:f7:72:57:8a:82:0e:7e:
                    c2:b4:5e:02:8e:14:a7:b0:9b:70:03:ce:5c:a6:d2:
                    c5:0d:d4:ce:94:80:f9:61:5c:da:0b:82:1b:18:96:
                    89:24:14:95:90:ff:11:6d:00:80:de:43:51:f0:6f:
                    66:e2:46:82:60:7b:20:6e:c7:34:59:f4:71:d9:fa:
                    02:a8:29:bf:89:15:99:a4:db:09:f9:43:7e:20:76:
                    94:b0:af:85:cc:0d:ff:4c:b1:1b:a1:d1:27:52:9b:
                    5f:10:8f:2d:e7:28:15:22:c0:0b:bc:b4:7f:f4:73:
                    a8:dd:c1:e4:72:b9:b4:5b:bb:f2:70:03:8c:5d:53:
                    46:96:b4:fa:21:f6:75:04:7c:54:fd:ff:90:42:68:
                    4f:6a:1f:13:03:5a:be:ae:83:78:3f:44:d2:4e:b2:
                    84:a2:37:66:c6:df:41:a6:e5:01:0e:85:92:f0:08:
                    cc:94:7c:61:4c:12:f8:8e:06:ef:49:e0:c0:a6:de:
                    6b:95:6d:92:dd:be:f3:ad:5d:c6:e3:90:e7:25:47:
                    40:4e:76:9e:6c:06:47:87:0a:29:0a:a7:07:3f:ee:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DE:73:1B:4F:79:8B:4A:79:EB:97:50:59:9D:4F:AC:3B:65:C1:39
            X509v3 Authority Key Identifier:
                keyid:77:85:8F:0B:49:CF:01:FB:E3:4E:AD:02:68:D2:D6:A0:B3:16:85:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/323830343a363732383a383830303a3a2f34302d3430203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6728:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:a4:e7:2b:c2:c1:c7:f1:53:6c:68:84:cb:12:79:8c:b1:56:
         1c:e7:d2:38:e6:de:01:81:bc:6b:be:b7:4c:61:b3:24:92:99:
         9b:10:16:e6:7a:dc:71:60:c5:c9:0c:2d:a2:40:16:df:a4:6d:
         ab:96:07:e4:fc:51:73:df:e2:2f:bd:c4:0f:b0:f9:22:05:fa:
         8e:3f:b3:9a:a6:3f:07:3e:a6:3e:38:0c:75:a8:2a:b0:71:8f:
         2d:69:1a:44:59:24:a6:91:b2:59:5a:d2:4a:34:d3:20:e9:74:
         9b:80:70:bc:a0:4b:22:ee:06:03:eb:3b:5a:b3:30:a6:07:02:
         2f:e1:83:f4:c8:bd:1f:f4:90:66:b9:0c:da:c6:6a:9b:61:ad:
         6b:90:be:ab:80:fd:4a:0e:52:91:c8:92:1d:6c:4c:0c:07:e3:
         da:2f:45:74:64:93:e4:95:17:24:25:6f:34:d8:a7:85:bb:e3:
         4b:5f:37:08:36:8f:b7:85:c4:df:53:4f:d0:61:4f:e9:fc:ef:
         00:77:cd:f5:30:b1:43:3c:a1:82:db:0e:95:2c:65:05:1b:85:
         fd:2d:7f:1c:11:96:5c:ba:84:3c:ff:db:a4:60:59:ed:ed:ae:
         66:37:ae:22:c9:9d:8f:76:1f:ec:13:a4:62:19:a2:94:d7:fd:
         62:39:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 20:39:10 2026 by rpki-client