This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa
File:                     323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa (raw, json)
Hash identifier:          sGUwP61XeKYhWYn+3licC9OV7OCXAlTuBBcw9YXfvoI=
Subject key identifier:   C8:E0:D1:9E:68:CE:00:AC:BB:1B:F3:5E:39:8E:B3:A4:D5:79:FF:62
Certificate issuer:       /CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Certificate serial:       55FEBEDC6116A755ACA645F09DA5B8446FFAA59B
Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa
Signing time:             Tue 20 Jan 2026 17:35:00 +0000
ROA not before:           Tue 20 Jan 2026 17:30:00 +0000
ROA not after:            Tue 19 Jan 2027 17:35:00 +0000
asID:                     268744
IP address blocks:        2804:0:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Feb 2026 12:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fe:be:dc:61:16:a7:55:ac:a6:45:f0:9d:a5:b8:44:6f:fa:a5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5
        Validity
            Not Before: Jan 20 17:30:00 2026 GMT
            Not After : Jan 19 17:35:00 2027 GMT
        Subject: CN=C8E0D19E68CE00ACBB1BF35E398EB3A4D579FF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:02:fb:12:a5:35:66:e1:1f:48:9b:f3:9c:
                    b9:71:a4:69:8f:48:f2:66:5c:6f:87:17:25:27:99:
                    1f:34:d6:86:b5:86:75:76:03:af:77:44:3c:cd:86:
                    0b:cd:e2:25:1d:35:0b:49:8a:b0:f8:6b:b4:c2:ea:
                    44:53:f2:4b:75:83:d1:0a:09:53:09:52:7f:2a:0d:
                    5f:c0:a1:3a:52:cf:ae:97:90:61:48:a7:50:1e:b4:
                    62:ef:5b:7d:60:78:cf:81:c5:49:15:03:cc:4a:9a:
                    96:02:91:f9:4e:2f:88:e9:c4:ae:e4:3b:e1:ac:32:
                    3f:37:22:66:a3:71:d0:1e:a4:5e:1a:98:2d:22:01:
                    82:bc:9d:e1:39:89:3e:6b:a9:eb:83:67:47:84:77:
                    7b:f2:ec:c8:91:2a:84:77:fd:88:33:5c:b2:17:33:
                    db:3c:ae:5b:ae:7b:dc:22:62:02:8f:c3:78:a5:9c:
                    88:f6:dd:62:4a:92:7e:f1:b8:21:6b:15:de:6d:2b:
                    d5:c9:d7:d9:17:60:af:52:34:5e:19:87:18:1a:4d:
                    b1:48:68:25:be:63:6e:4d:0c:68:95:ed:72:1e:a8:
                    29:f2:45:9b:b4:ff:ee:45:77:e7:e1:4d:fb:c2:47:
                    90:a8:6a:9e:08:bc:94:db:5d:d0:80:63:e4:58:ce:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E0:D1:9E:68:CE:00:AC:BB:1B:F3:5E:39:8E:B3:A4:D5:79:FF:62
            X509v3 Authority Key Identifier:
                keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/323830343a303a313830303a3a2f34382d3438203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:5d:21:83:d3:7a:bc:48:bb:e6:8b:61:4e:d0:c8:c0:87:68:
         48:3a:87:c2:1c:a4:f2:02:fe:b0:19:aa:f3:ca:29:31:f8:3c:
         09:22:c1:6c:6a:68:ac:b3:c1:14:01:bb:a8:fb:54:c9:94:b2:
         16:2e:bf:8e:8c:ac:55:25:b5:10:b6:02:98:75:bc:49:5d:be:
         8f:f5:4b:fd:36:8a:3f:b2:eb:9c:90:d7:10:4e:21:cc:c2:fc:
         61:40:9a:e1:98:00:92:62:58:da:ef:59:a9:55:e1:d7:2f:1e:
         df:84:0b:2b:94:da:1c:6d:9c:e3:eb:f6:40:cf:7c:98:33:09:
         59:25:0e:42:96:88:45:9b:33:83:8f:d3:98:72:24:b7:12:24:
         f3:a2:8c:2a:20:8b:34:c9:ba:f1:a0:79:15:6f:0f:76:2a:b7:
         d9:82:39:8c:68:de:f6:7a:70:bd:52:f8:64:72:87:69:4d:4c:
         de:fb:54:00:65:46:b4:04:be:84:ff:9b:54:34:f3:31:28:56:
         05:e2:b4:b9:a0:71:ba:47:65:d5:4c:67:dc:2d:31:2c:27:4c:
         29:84:03:2f:16:85:b3:6c:21:5e:c8:47:0d:09:68:00:45:05:
         9c:e9:34:39:13:3c:1f:2d:69:4c:34:4e:37:2d:ca:06:71:51:
         0f:21:90:c5
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUVf6+3GEWp1WspkXwnaW4RG/6pZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk0MEVFQjIxQjQxMjgyMTZGOEZGQjNCMEE5OTc5NDY2
OTc2MzJGNTAeFw0yNjAxMjAxNzMwMDBaFw0yNzAxMTkxNzM1MDBaMDMxMTAvBgNV
BAMTKEM4RTBEMTlFNjhDRTAwQUNCQjFCRjM1RTM5OEVCM0E0RDU3OUZGNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+QL7EqU1ZuEfSJvznLlxpGmP
SPJmXG+HFyUnmR801oa1hnV2A693RDzNhgvN4iUdNQtJirD4a7TC6kRT8kt1g9EK
CVMJUn8qDV/AoTpSz66XkGFIp1AetGLvW31geM+BxUkVA8xKmpYCkflOL4jpxK7k
O+GsMj83ImajcdAepF4amC0iAYK8neE5iT5rqeuDZ0eEd3vy7MiRKoR3/YgzXLIX
M9s8rluue9wiYgKPw3ilnIj23WJKkn7xuCFrFd5tK9XJ19kXYK9SNF4ZhxgaTbFI
aCW+Y25NDGiV7XIeqCnyRZu0/+5Fd+fhTfvCR5Coap4IvJTbXdCAY+RYzlIxAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUyODRnmjOAKy7G/NeOY6zpNV5/2IwHwYDVR0j
BBgwFoAUSUDushtBKCFvj/s7Cpl5Rml2MvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEViNEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFT
d2EvMC80OTQwRUVCMjFCNDEyODIxNkY4RkZCM0IwQTk5Nzk0NjY5NzYzMkY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5NDBFRUIyMUI0MTI4MjE2
RjhGRkIzQjBBOTk3OTQ2Njk3NjMyRjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFYjRBR2pmTlk5emQ3dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzAv
MzIzODMwMzQzYTMwM2EzMTM4MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzODM3MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEAAAYADANBgkqhkiG9w0BAQsFAAOCAQEA
W10hg9N6vEi75othTtDIwIdoSDqHwhyk8gL+sBmq88opMfg8CSLBbGporLPBFAG7
qPtUyZSyFi6/joysVSW1ELYCmHW8SV2+j/VL/TaKP7LrnJDXEE4hzML8YUCa4ZgA
kmJY2u9ZqVXh1y8e34QLK5TaHG2c4+v2QM98mDMJWSUOQpaIRZszg4/TmHIktxIk
86KMKiCLNMm68aB5FW8Pdiq32YI5jGje9npwvVL4ZHKHaU1M3vtUAGVGtAS+hP+b
VDTzMShWBeK0uaBxukdl1Uxn3C0xLCdMKYQDLxaFs2whXshHDQloAEUFnOk0ORM8
Hy1pTDRONy3KBnFRDyGQxQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:58:53 2026 by rpki-client