This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f33322d313238203d3e20323633303733.roa
File:                     323830343a3935343a3a2f33322d313238203d3e20323633303733.roa (raw, json)
Hash identifier:          eiaVYS411vtmDjcZFRlSmlXUYR0ZXKAOeMyCAFR4lMw=
Subject key identifier:   EC:F7:5F:1D:6A:D3:04:68:86:BA:9C:56:59:35:A8:98:53:1D:56:D7
Certificate issuer:       /CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920
Certificate serial:       71DBDB72F3189D7098C4634EE1AA933590653AA8
Authority key identifier: E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f33322d313238203d3e20323633303733.roa
Signing time:             Wed 31 Dec 2025 14:24:50 +0000
ROA not before:           Wed 31 Dec 2025 14:19:50 +0000
ROA not after:            Wed 30 Dec 2026 14:24:50 +0000
asID:                     263073
IP address blocks:        2804:954::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 08:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:db:db:72:f3:18:9d:70:98:c4:63:4e:e1:aa:93:35:90:65:3a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A3BB875E3C099F0B7527B57175ACBC2C52C920
        Validity
            Not Before: Dec 31 14:19:50 2025 GMT
            Not After : Dec 30 14:24:50 2026 GMT
        Subject: CN=ECF75F1D6AD3046886BA9C565935A898531D56D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:ab:f9:3c:92:60:c0:e8:8a:20:2d:08:ee:
                    c7:8f:c5:e2:dd:3d:09:d1:9c:21:b7:a5:81:45:b1:
                    b8:8f:8e:64:d3:50:b5:da:2a:a7:bc:28:c5:2b:32:
                    cd:14:54:cb:18:17:14:17:ae:de:37:bb:6d:28:27:
                    5d:06:05:99:0b:0b:63:83:f6:09:56:00:7b:05:4c:
                    cb:7e:ca:60:ac:ff:70:a4:31:83:9c:ba:db:8a:3d:
                    20:97:f3:de:7b:29:88:0c:7e:1e:6a:30:3d:3b:f3:
                    fe:a0:4a:07:aa:6e:04:89:d7:08:93:66:ab:a6:cf:
                    79:56:bd:79:6f:66:b1:41:73:39:a3:e5:8a:66:ce:
                    d2:ea:5f:db:33:40:4d:cd:40:43:b4:8d:f4:ef:29:
                    bc:bb:ce:e1:c9:9e:ee:30:44:79:12:81:6b:77:65:
                    89:fa:b8:7d:e3:e9:4a:02:d3:bb:6f:60:dd:36:6f:
                    80:c3:79:ee:a0:d2:3c:39:80:1b:7b:15:06:5d:bb:
                    06:04:7b:76:5b:c4:26:16:fe:0f:f3:fd:12:3e:aa:
                    21:14:30:d1:fd:51:09:00:7e:8b:09:61:f1:5d:85:
                    e7:a9:53:bd:64:03:89:e3:5e:c1:fb:d0:3a:77:5c:
                    64:bd:e5:81:5d:78:1d:20:3e:ab:3f:33:83:5f:e0:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F7:5F:1D:6A:D3:04:68:86:BA:9C:56:59:35:A8:98:53:1D:56:D7
            X509v3 Authority Key Identifier:
                keyid:E6:A3:BB:87:5E:3C:09:9F:0B:75:27:B5:71:75:AC:BC:2C:52:C9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A3BB875E3C099F0B7527B57175ACBC2C52C920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f33322d313238203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:67:a9:8d:02:93:dd:27:97:68:c1:90:2a:3c:2d:8b:61:
         f8:8f:42:4f:f6:38:57:58:42:e9:dc:d6:df:f9:ce:25:54:44:
         44:53:fa:c6:e8:cc:31:ac:e5:d3:2c:45:f1:5c:c7:06:0a:d6:
         cb:d5:4f:f1:a9:1b:18:97:d1:fd:a3:09:3d:25:51:7d:c7:04:
         43:cc:ba:42:e6:aa:69:40:f1:c7:62:dd:78:b6:16:e4:9e:51:
         cc:5f:8e:c2:39:15:d0:ae:2a:40:d3:80:57:eb:e8:78:55:81:
         09:11:00:5f:5b:73:7d:e1:96:a6:62:11:66:aa:a0:fb:7e:c2:
         da:e8:dd:f3:2e:d0:35:fc:ec:b6:c7:a3:b9:06:4a:a7:d9:d9:
         f9:e7:e6:8e:63:8d:e6:38:8b:01:d1:57:4d:69:10:20:a5:3b:
         35:bb:72:6c:52:3e:cf:a5:33:f4:48:23:3c:1b:4c:bc:ae:94:
         95:0c:00:ef:4b:44:13:3d:5b:bf:21:24:d9:ef:0a:a6:4c:5e:
         1e:ba:4b:ee:20:04:a6:6e:b6:f1:3f:62:0d:f8:b6:8f:ca:0d:
         40:f3:91:98:c5:cb:f3:2b:eb:f8:cb:e2:c9:81:3f:a4:01:b6:
         9f:bf:16:47:f1:64:96:26:fe:3a:e4:63:d6:80:5d:fe:ce:5a:
         9c:e7:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 22:39:37 2026 by rpki-client