This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/323830343a363764633a3a2f33322d313238203d3e20323639363535.roa
File:                     323830343a363764633a3a2f33322d313238203d3e20323639363535.roa (raw, json)
Hash identifier:          +8OXA4+1n9CrEcsStvAfk96XwkqNpIIFw/srstcalTs=
Subject key identifier:   6F:36:08:8D:1C:5A:37:58:0A:F7:D1:15:A4:AC:AB:CE:00:4D:83:43
Certificate issuer:       /CN=B599F549032CE46FA7AE20E8E19156AF95C31ACF
Certificate serial:       55BAFD4A9204F27A21641AA02ADA5A5F2E3DB121
Authority key identifier: B5:99:F5:49:03:2C:E4:6F:A7:AE:20:E8:E1:91:56:AF:95:C3:1A:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B599F549032CE46FA7AE20E8E19156AF95C31ACF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/323830343a363764633a3a2f33322d313238203d3e20323639363535.roa
Signing time:             Tue 06 Jan 2026 12:51:25 +0000
ROA not before:           Tue 06 Jan 2026 12:46:25 +0000
ROA not after:            Tue 05 Jan 2027 12:51:25 +0000
asID:                     269655
IP address blocks:        2804:67dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/B599F549032CE46FA7AE20E8E19156AF95C31ACF.crl
                          rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/B599F549032CE46FA7AE20E8E19156AF95C31ACF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B599F549032CE46FA7AE20E8E19156AF95C31ACF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 17:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ba:fd:4a:92:04:f2:7a:21:64:1a:a0:2a:da:5a:5f:2e:3d:b1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B599F549032CE46FA7AE20E8E19156AF95C31ACF
        Validity
            Not Before: Jan  6 12:46:25 2026 GMT
            Not After : Jan  5 12:51:25 2027 GMT
        Subject: CN=6F36088D1C5A37580AF7D115A4ACABCE004D8343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:6f:68:8c:91:eb:dd:8e:3b:76:ab:61:10:
                    c9:57:f0:10:2c:c0:66:0f:64:a6:fd:01:3a:b8:37:
                    a4:6d:18:83:fa:38:93:e0:e9:62:17:a2:d1:e2:dc:
                    b2:90:90:1c:63:16:29:30:8f:04:ea:09:86:fb:86:
                    2a:68:a4:a2:d5:76:0a:7f:5a:b0:14:0f:7a:7f:a9:
                    ed:aa:6a:80:58:9c:2a:ec:a1:27:5a:cf:d6:fd:2d:
                    c1:28:00:78:ed:95:94:9e:ee:d0:b1:38:f4:1e:34:
                    41:26:a6:fe:d2:c5:53:b1:c9:e4:61:fd:cc:09:8b:
                    e8:32:41:0b:35:1b:7c:39:40:75:1c:30:f9:82:fe:
                    29:67:e8:0b:73:37:3b:d3:a0:2e:4d:e1:78:f6:8c:
                    aa:85:59:3a:b1:c9:86:f2:b9:b6:73:96:34:59:4d:
                    5a:a9:5d:82:83:6a:4d:ce:fd:cc:e7:0d:3a:00:40:
                    ae:42:c6:66:2b:79:65:d7:8a:10:77:44:ff:58:1e:
                    68:ad:5f:16:e9:88:d8:79:9b:33:42:1a:c0:4e:df:
                    3f:ae:93:6b:d2:5e:e7:02:a2:1a:07:5e:6d:bf:c8:
                    cc:73:e6:df:99:7b:a1:1b:24:33:78:93:7a:3a:f4:
                    95:4f:fe:53:9e:4b:9a:11:4e:85:81:0d:45:60:82:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:36:08:8D:1C:5A:37:58:0A:F7:D1:15:A4:AC:AB:CE:00:4D:83:43
            X509v3 Authority Key Identifier:
                keyid:B5:99:F5:49:03:2C:E4:6F:A7:AE:20:E8:E1:91:56:AF:95:C3:1A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/B599F549032CE46FA7AE20E8E19156AF95C31ACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B599F549032CE46FA7AE20E8E19156AF95C31ACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Jjq4t7JVPjrXu8m4UhZ7BPr8EFi7xAGMaZSNc2yosq/0/323830343a363764633a3a2f33322d313238203d3e20323639363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:ab:15:f4:81:9e:a9:eb:38:6a:c7:be:77:b6:b8:76:16:0c:
         e6:6b:5e:df:b7:37:89:8a:3c:44:3f:ff:2d:07:c4:01:35:87:
         9f:2c:ae:3a:3e:e8:ee:94:48:1f:e5:48:a5:0b:7e:25:98:86:
         73:7e:f2:b9:82:1a:bc:0e:af:9a:ec:27:5b:0f:1c:1e:ca:8e:
         f1:cd:20:23:41:26:90:c1:68:9d:6d:2e:27:4f:66:4d:75:ec:
         1c:5d:c7:63:c0:20:3f:63:07:e3:d2:5a:d8:aa:bd:f1:43:87:
         d3:be:fd:02:c0:89:b1:ab:47:c8:a6:37:44:97:70:57:9c:99:
         d3:8d:aa:d0:da:04:f1:57:09:65:95:4e:af:a7:d7:94:0c:66:
         3e:8e:a3:23:9a:25:d0:aa:02:46:dc:87:e3:29:f6:9b:4b:11:
         3f:64:c0:c2:b4:9f:0c:43:94:8e:a1:39:7c:7b:7e:da:db:9b:
         f3:d3:5f:64:5a:3f:a7:02:eb:ad:a5:c0:96:e7:dc:77:eb:46:
         8a:16:5c:55:22:26:d5:ec:aa:7b:db:7c:b5:f4:3d:e0:89:b9:
         20:dd:c0:14:2a:86:e9:23:54:59:93:00:33:6a:f2:5d:70:ed:
         5f:7a:00:c9:e4:ea:df:95:ad:e7:d7:57:76:d5:68:54:34:3c:
         a3:07:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:33 2026 by rpki-client