This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33322d3438203d3e20323638393434.roa
File:                     323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (raw, json)
Hash identifier:          O08NSJb25HJGZs3YGzGl4OExua6GHD2piOyw0WoMws4=
Subject key identifier:   D7:6A:80:C1:6C:97:F1:65:C0:70:54:73:DF:6C:6D:EB:0D:11:76:8D
Certificate issuer:       /CN=007847D4CBDEE0BDD0560BDFF939E8C5EC4E481F
Certificate serial:       30D876C2EFE59746DA7BED08DC61C89E36E78A8F
Authority key identifier: 00:78:47:D4:CB:DE:E0:BD:D0:56:0B:DF:F9:39:E8:C5:EC:4E:48:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/007847D4CBDEE0BDD0560BDFF939E8C5EC4E481F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33322d3438203d3e20323638393434.roa
Signing time:             Sat 10 Jan 2026 18:12:52 +0000
ROA not before:           Sat 10 Jan 2026 18:07:52 +0000
ROA not after:            Sat 09 Jan 2027 18:12:52 +0000
asID:                     268944
IP address blocks:        2804:5cfc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/007847D4CBDEE0BDD0560BDFF939E8C5EC4E481F.crl
                          rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/007847D4CBDEE0BDD0560BDFF939E8C5EC4E481F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/007847D4CBDEE0BDD0560BDFF939E8C5EC4E481F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Feb 2026 10:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d8:76:c2:ef:e5:97:46:da:7b:ed:08:dc:61:c8:9e:36:e7:8a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007847D4CBDEE0BDD0560BDFF939E8C5EC4E481F
        Validity
            Not Before: Jan 10 18:07:52 2026 GMT
            Not After : Jan  9 18:12:52 2027 GMT
        Subject: CN=D76A80C16C97F165C0705473DF6C6DEB0D11768D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8e:11:eb:09:ef:08:e6:1f:5b:9d:68:c5:14:
                    ca:8d:90:56:3f:56:20:ad:c5:3c:9b:e6:8c:05:37:
                    39:04:bd:bf:ec:f9:14:04:d0:73:32:ec:5e:cf:a2:
                    64:52:e9:c3:a4:a5:30:27:ca:10:ae:17:f3:6e:5e:
                    26:a0:50:dc:1c:ad:e5:cb:b2:f8:89:73:22:3c:c4:
                    b2:e5:4e:29:79:1b:3a:df:df:a4:e7:cd:21:2f:7b:
                    d9:f9:e7:bb:88:64:94:55:0d:bb:f5:ae:49:ad:6c:
                    94:03:79:d9:a5:64:6a:02:b0:91:c8:1f:5f:eb:ff:
                    20:cc:d0:fa:77:ae:15:42:38:e5:4c:3a:d5:b2:93:
                    6b:e6:ca:1f:b9:9a:29:20:fe:08:22:51:51:90:c9:
                    5d:1a:7b:d2:63:af:be:5d:10:8f:67:e3:fe:8f:13:
                    eb:e2:50:c1:b2:be:c8:c1:f6:35:44:71:c7:86:f4:
                    0f:6f:a4:6c:72:7b:d6:d1:0c:0a:b5:87:81:64:a0:
                    11:0f:3f:ad:d3:ec:5e:d3:bd:a9:6a:07:9c:03:5a:
                    50:cf:14:dc:5e:eb:82:d0:c1:7b:2b:98:91:9c:99:
                    e0:fa:80:7d:44:80:fd:2d:0a:a5:e9:e0:31:af:63:
                    17:23:df:82:c8:db:e2:47:fb:fe:00:78:33:9c:44:
                    64:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:80:C1:6C:97:F1:65:C0:70:54:73:DF:6C:6D:EB:0D:11:76:8D
            X509v3 Authority Key Identifier:
                keyid:00:78:47:D4:CB:DE:E0:BD:D0:56:0B:DF:F9:39:E8:C5:EC:4E:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/007847D4CBDEE0BDD0560BDFF939E8C5EC4E481F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/007847D4CBDEE0BDD0560BDFF939E8C5EC4E481F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33322d3438203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:13:d0:5c:46:fb:bc:85:50:65:8c:2e:b4:85:3b:5d:34:d4:
         b9:00:5f:00:49:f2:42:6b:a6:c2:6c:6c:5e:92:50:7c:09:68:
         11:51:ba:fd:8e:36:7e:12:f6:4c:5f:00:2d:73:07:b1:ea:99:
         b0:e5:87:63:a2:93:9b:58:e1:3e:59:bb:2e:bf:51:1a:7f:e0:
         3b:78:1f:5e:c9:ce:9e:f8:33:72:2a:71:e5:ed:9c:99:9a:cc:
         32:dc:70:d7:9e:ff:0c:84:37:06:b0:08:36:c6:c6:21:30:18:
         90:12:f8:2e:18:73:2c:fc:92:06:5a:af:dc:64:39:0d:9f:74:
         ac:27:ca:af:16:ba:c2:38:8e:49:24:80:00:b3:dc:44:d3:42:
         f6:61:50:c5:87:35:8b:d8:06:83:60:d2:d4:4d:a1:8a:66:99:
         9e:e9:c4:d8:67:d5:a8:51:dd:eb:e1:04:00:26:6c:6b:d5:e2:
         d5:32:56:51:2a:4d:bf:d1:92:d9:3e:1c:d0:a4:72:20:9f:c7:
         05:6f:7e:25:62:d8:42:87:c1:71:52:28:b7:92:29:32:c1:95:
         13:e1:96:34:04:21:5e:0f:43:77:67:7d:b3:7a:ac:b1:c2:34:
         a3:e6:37:14:3a:86:02:60:c7:58:49:9f:62:1c:6d:f1:12:87:
         1c:81:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:58:55 2026 by rpki-client