This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/323830343a363732383a3a2f33332d3333203d3e20323639363038.roa
File:                     323830343a363732383a3a2f33332d3333203d3e20323639363038.roa (raw, json)
Hash identifier:          OPKHd2H1bqkORKeFijnb19xZNAri9NMBjB6OQzqEMto=
Subject key identifier:   E5:69:6E:61:E0:F0:75:F8:31:34:98:BE:57:F1:1D:FA:8B:DC:A0:F1
Certificate issuer:       /CN=77858F0B49CF01FBE34EAD0268D2D6A0B31685C4
Certificate serial:       3018FB71ABABE9F2DBB687DB7935A7D91EDEBF62
Authority key identifier: 77:85:8F:0B:49:CF:01:FB:E3:4E:AD:02:68:D2:D6:A0:B3:16:85:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/323830343a363732383a3a2f33332d3333203d3e20323639363038.roa
Signing time:             Tue 30 Dec 2025 16:15:31 +0000
ROA not before:           Tue 30 Dec 2025 16:10:31 +0000
ROA not after:            Tue 29 Dec 2026 16:15:31 +0000
asID:                     269608
IP address blocks:        2804:6728::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.crl
                          rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 10:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:18:fb:71:ab:ab:e9:f2:db:b6:87:db:79:35:a7:d9:1e:de:bf:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77858F0B49CF01FBE34EAD0268D2D6A0B31685C4
        Validity
            Not Before: Dec 30 16:10:31 2025 GMT
            Not After : Dec 29 16:15:31 2026 GMT
        Subject: CN=E5696E61E0F075F8313498BE57F11DFA8BDCA0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:bf:11:ae:58:36:e8:c1:5b:02:14:80:ec:
                    b5:8d:1f:dd:b7:21:1d:5b:61:c6:92:55:fc:3e:44:
                    69:32:94:41:7b:9f:1e:cb:5b:65:d9:9c:e2:26:60:
                    4e:4a:9b:87:a3:58:6a:a3:e4:3e:39:bd:27:55:5f:
                    18:03:5f:f7:8e:69:4d:bc:74:64:7f:a4:dc:09:d9:
                    d4:27:b7:ee:19:27:f6:06:eb:fc:3e:e9:6a:93:74:
                    1c:7b:1d:b0:15:4f:5f:5e:21:53:e5:1e:55:d8:fe:
                    68:59:b7:59:5b:3b:3f:1c:13:d0:30:85:6d:65:0f:
                    32:2e:49:0c:b4:90:f3:2a:c3:c5:3a:c8:a3:68:26:
                    2d:39:a0:5e:1a:f6:68:a9:b5:54:bf:2f:26:af:d4:
                    95:cf:af:54:9c:89:db:81:bd:69:8c:f6:46:9f:26:
                    f4:3d:0a:a5:d5:95:88:39:65:94:63:d7:39:16:a7:
                    d1:5d:2c:d6:4f:58:50:a5:a4:27:10:bf:44:be:cd:
                    5f:51:4f:69:e3:cc:c7:2e:a0:5e:4e:9c:b1:c3:56:
                    b4:a7:b0:f5:d3:0a:9d:af:9c:53:fe:69:36:5e:b0:
                    50:57:5f:e9:07:e6:4d:ee:c0:6d:bb:26:7b:ca:cf:
                    c3:5e:b8:1f:7b:98:6b:22:33:d1:8d:d6:39:55:3e:
                    b7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:69:6E:61:E0:F0:75:F8:31:34:98:BE:57:F1:1D:FA:8B:DC:A0:F1
            X509v3 Authority Key Identifier:
                keyid:77:85:8F:0B:49:CF:01:FB:E3:4E:AD:02:68:D2:D6:A0:B3:16:85:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/323830343a363732383a3a2f33332d3333203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6728::/33

    Signature Algorithm: sha256WithRSAEncryption
         dd:93:f5:13:34:d5:39:67:fa:1d:85:f8:c1:93:e5:e6:99:4f:
         2e:11:fa:a7:8a:70:e7:8f:a2:52:17:96:3a:46:0a:b4:85:67:
         c5:87:3f:fa:cb:4f:87:82:41:23:40:61:47:2a:39:d5:93:d2:
         49:01:43:ee:13:c2:58:f8:35:8b:e5:9e:77:17:a0:b7:ef:43:
         33:05:f8:32:84:ca:75:6c:53:cb:c9:31:01:15:bc:aa:2c:85:
         49:f4:e2:91:c8:43:b1:8f:e7:5e:57:c7:92:78:44:1a:9e:3d:
         7a:32:fe:94:c1:b7:6b:d0:c9:a9:5e:c5:93:b9:da:77:ce:66:
         a9:9f:74:51:da:36:74:24:dc:13:ba:f0:34:6d:85:5f:01:db:
         62:f1:76:d8:57:f9:f6:e3:3c:39:3c:1c:08:a3:ab:c3:a0:0f:
         0f:5f:8f:52:37:b0:14:ff:ee:26:86:25:c8:58:01:05:bb:2a:
         0b:ad:e8:7e:a1:1b:c3:f8:0e:4c:68:5d:ba:f9:07:46:5d:b0:
         51:c2:c3:1e:2a:48:6d:24:65:32:44:1b:42:3a:41:d4:1b:44:
         9f:a5:70:e5:18:80:9d:4e:09:c0:fa:45:7b:02:73:7a:2d:11:
         87:0c:2a:f3:0c:ce:7a:a6:99:f5:15:97:77:c7:e1:00:04:2b:
         bc:2f:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 20:39:11 2026 by rpki-client