This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa
File:                     323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa (raw, json)
Hash identifier:          XB6xEybqfKNTKIQ+74RwwMmN/Hc/MgziC6FL5DwFxdM=
Subject key identifier:   F3:D8:7E:D4:2A:78:25:F8:EA:EB:90:BC:5B:ED:5D:BE:1A:17:21:1A
Certificate issuer:       /CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Certificate serial:       6F28613841876936C07ED6CE83D893FCA5611989
Authority key identifier: B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa
Signing time:             Fri 02 Jan 2026 21:33:36 +0000
ROA not before:           Fri 02 Jan 2026 21:28:36 +0000
ROA not after:            Fri 01 Jan 2027 21:33:36 +0000
asID:                     263518
IP address blocks:        2804:1324:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
                          rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 16:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:28:61:38:41:87:69:36:c0:7e:d6:ce:83:d8:93:fc:a5:61:19:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
        Validity
            Not Before: Jan  2 21:28:36 2026 GMT
            Not After : Jan  1 21:33:36 2027 GMT
        Subject: CN=F3D87ED42A7825F8EAEB90BC5BED5DBE1A17211A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:07:be:86:7b:8a:32:d4:dc:5e:ce:7a:e0:
                    a8:65:47:78:98:36:50:1b:a6:e0:79:e4:44:bc:f8:
                    e4:99:25:92:23:8f:dd:e2:d6:32:07:16:76:df:d6:
                    7c:ba:00:a7:26:05:91:60:c4:92:b9:79:58:cb:1c:
                    2a:c7:48:02:ed:4d:1f:79:b5:89:7a:ca:b4:8c:32:
                    d8:37:f7:51:07:b7:ad:7f:6a:59:54:37:e4:93:37:
                    50:14:98:32:a9:47:97:21:61:2b:55:b7:11:f8:cb:
                    bc:8c:7f:ac:7f:8d:5a:5a:0f:ad:75:e6:0e:f8:ff:
                    81:20:12:49:cc:89:8f:4e:cf:b6:71:dc:06:66:1c:
                    93:ae:ed:92:2d:fd:ca:0f:a9:a4:20:d0:07:44:0c:
                    77:ce:e7:dd:68:5c:d3:1e:3b:e6:83:07:44:fa:3e:
                    f1:04:85:6e:1a:01:98:96:79:30:5f:99:c3:59:0b:
                    fa:b2:3b:4b:6b:98:90:22:c0:15:cd:9a:3a:4b:54:
                    ac:09:87:59:d1:4e:f2:98:12:c8:6f:f1:f8:d8:a4:
                    ba:3b:6f:3a:ed:cd:e0:db:d8:43:0e:61:0a:d9:24:
                    74:c7:cf:c6:e2:4c:b2:9b:a2:a9:f1:6f:c8:1b:3d:
                    9a:b9:4b:e6:70:08:bd:0f:8b:f5:7e:44:5a:d2:fc:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D8:7E:D4:2A:78:25:F8:EA:EB:90:BC:5B:ED:5D:BE:1A:17:21:1A
            X509v3 Authority Key Identifier:
                keyid:B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:40:26:b2:08:8f:32:f6:11:c4:5d:66:f1:33:bd:ae:45:da:
         df:bd:62:c8:f1:b4:61:2a:10:da:66:5a:ab:fc:0e:77:43:56:
         df:4e:04:d6:c6:e6:e0:c7:88:7a:64:73:c9:1c:b5:1b:09:e8:
         e5:ae:26:0e:cb:fa:d9:10:fc:49:7b:40:fb:e0:24:63:1d:55:
         e1:5c:7e:7c:fd:74:c3:73:a2:0b:8f:96:6f:0c:94:ae:b2:26:
         5e:54:ea:a4:61:48:a8:65:a0:d6:67:57:f5:fd:05:78:ba:fd:
         0d:83:e3:cc:64:bd:ea:dc:a0:85:2a:22:d9:b7:e3:dc:35:65:
         9e:1b:73:44:dd:9d:9b:7c:d5:2e:ca:be:cc:aa:16:0e:62:60:
         ca:e1:ef:de:87:e5:7c:80:65:5d:58:79:12:d6:e6:ae:f5:b8:
         86:40:50:9a:be:93:74:44:3f:de:40:d1:8a:6b:10:40:9f:95:
         3c:10:6d:1c:be:80:3e:69:3d:29:93:b7:30:b9:66:bd:a2:b4:
         5b:a5:16:6a:7b:dd:95:1a:70:7b:af:ce:40:9c:40:4b:50:9e:
         88:77:2e:61:82:c3:8e:29:b0:8b:1a:ff:38:10:c2:d0:45:b9:
         7c:94:67:23:77:63:10:9d:66:d1:eb:ad:70:cc:eb:76:78:80:
         70:46:4c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:30 2026 by rpki-client