This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGRKjEuaziBvgH1BFdoFAQPoeBNRXsr8VtNXhFBRx1xo/0/323830343a376433303a3a2f33322d313238203d3e20323731353435.roa
File:                     323830343a376433303a3a2f33322d313238203d3e20323731353435.roa (raw, json)
Hash identifier:          e106azfTzw8Z3+5CNjzX9u3xEBUhslPn8tMy99yVpjU=
Subject key identifier:   67:89:9D:AE:23:FE:FC:D0:38:7D:AC:AF:F3:12:D2:3D:D4:F8:DB:45
Certificate issuer:       /CN=BA8805C57D28B1F5FE116D0F66268761D3B6FD35
Certificate serial:       2A4CB0418D8DE8E029BF253B11899D267119224C
Authority key identifier: BA:88:05:C5:7D:28:B1:F5:FE:11:6D:0F:66:26:87:61:D3:B6:FD:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA8805C57D28B1F5FE116D0F66268761D3B6FD35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGRKjEuaziBvgH1BFdoFAQPoeBNRXsr8VtNXhFBRx1xo/0/323830343a376433303a3a2f33322d313238203d3e20323731353435.roa
Signing time:             Mon 05 Jan 2026 15:00:24 +0000
ROA not before:           Mon 05 Jan 2026 14:55:24 +0000
ROA not after:            Mon 04 Jan 2027 15:00:24 +0000
asID:                     271545
IP address blocks:        2804:7d30::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGRKjEuaziBvgH1BFdoFAQPoeBNRXsr8VtNXhFBRx1xo/0/BA8805C57D28B1F5FE116D0F66268761D3B6FD35.crl
                          rsync://rpki-repo.registro.br/repo/DGRKjEuaziBvgH1BFdoFAQPoeBNRXsr8VtNXhFBRx1xo/0/BA8805C57D28B1F5FE116D0F66268761D3B6FD35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA8805C57D28B1F5FE116D0F66268761D3B6FD35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 08:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4c:b0:41:8d:8d:e8:e0:29:bf:25:3b:11:89:9d:26:71:19:22:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA8805C57D28B1F5FE116D0F66268761D3B6FD35
        Validity
            Not Before: Jan  5 14:55:24 2026 GMT
            Not After : Jan  4 15:00:24 2027 GMT
        Subject: CN=67899DAE23FEFCD0387DACAFF312D23DD4F8DB45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b7:9e:1f:9e:25:44:77:a3:90:06:00:3a:16:
                    44:ef:a1:74:67:d5:9f:4d:32:51:ba:55:93:6c:b7:
                    46:d2:06:54:8c:d6:ff:7a:ba:44:a1:64:8f:b5:12:
                    bb:cf:b6:fc:b5:13:95:ca:5f:42:23:fa:8d:f2:c4:
                    c0:4f:bc:3a:25:05:d5:92:e3:0f:ef:4d:bd:80:e3:
                    3a:38:49:f1:2b:3f:5b:0b:2c:39:2b:15:e3:b7:50:
                    57:60:a3:7d:8b:9f:e5:42:86:2d:82:a2:db:fb:8e:
                    84:ae:be:aa:5d:42:e1:58:84:2e:3c:a6:40:50:88:
                    21:66:e6:dc:cc:c8:75:bc:2b:b7:eb:cb:ff:96:91:
                    8f:64:23:71:f6:ed:1e:0f:44:fd:a9:72:81:76:73:
                    cb:f1:3c:a5:f3:25:16:5d:ae:03:d8:22:c9:83:75:
                    21:6d:1a:86:d6:95:6c:21:7b:3c:b6:f8:79:b2:12:
                    e4:3b:46:68:c5:d1:1c:3d:4c:0a:c1:9b:cf:74:45:
                    6f:a5:1a:ba:c8:6a:5a:cd:1c:97:c4:08:41:47:56:
                    c3:2e:69:dd:ad:ca:54:d5:09:fa:10:8b:89:c2:ee:
                    00:8e:22:b6:de:80:36:55:38:c3:6d:5f:9a:25:d3:
                    03:0e:0b:00:fa:12:5d:89:86:e0:b8:51:04:a2:ab:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:89:9D:AE:23:FE:FC:D0:38:7D:AC:AF:F3:12:D2:3D:D4:F8:DB:45
            X509v3 Authority Key Identifier:
                keyid:BA:88:05:C5:7D:28:B1:F5:FE:11:6D:0F:66:26:87:61:D3:B6:FD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGRKjEuaziBvgH1BFdoFAQPoeBNRXsr8VtNXhFBRx1xo/0/BA8805C57D28B1F5FE116D0F66268761D3B6FD35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA8805C57D28B1F5FE116D0F66268761D3B6FD35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGRKjEuaziBvgH1BFdoFAQPoeBNRXsr8VtNXhFBRx1xo/0/323830343a376433303a3a2f33322d313238203d3e20323731353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d30::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:68:2b:e3:bb:7d:55:6e:09:7b:79:cf:1c:32:ca:c4:f7:
         99:28:17:55:33:eb:1a:4d:c8:30:a3:aa:d6:bb:ad:f5:cd:01:
         0b:ae:c0:6f:7a:33:e8:04:2b:6c:39:a9:81:d2:4d:d2:4b:ab:
         86:18:e4:ed:ff:28:35:d2:be:fc:7d:67:f4:4d:67:1c:f4:03:
         7e:d4:21:fa:ca:2c:44:ea:23:eb:40:58:c2:25:0a:f2:ea:90:
         8a:db:4b:01:3f:8f:3d:e7:de:4f:2f:53:2c:19:5a:31:86:ba:
         be:b0:a0:8d:d6:6d:a5:92:31:94:80:fe:51:d0:ae:67:99:a7:
         33:97:06:f8:26:50:a9:4e:3f:88:24:3d:43:51:bc:1b:39:4a:
         2f:ca:b5:8b:68:a6:8a:e0:01:c2:25:fe:4c:a1:83:db:fe:6f:
         6f:1f:ac:56:d8:b8:21:b8:af:62:c3:6e:72:fd:c7:be:e3:e4:
         ec:b8:e9:02:45:7b:5a:9e:21:24:1a:43:2f:a3:a3:df:80:03:
         3c:03:51:a2:5e:4f:4f:04:dc:7d:b4:ce:e8:62:a9:5a:82:2c:
         7a:59:08:fb:c3:a3:1f:c5:a6:46:93:01:6e:5a:11:4d:0a:a4:
         8d:dc:88:f9:38:5d:53:ad:ae:3a:58:5c:38:5a:2d:6b:80:ff:
         6d:c6:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 22:02:38 2026 by rpki-client