This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/323830343a323363383a3a2f33322d3332203d3e20323634313832.roa
File:                     323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (raw, json)
Hash identifier:          05v6weMxPsCHSZFG/18rlNzUzkKBG28q4DE7mfwpYf4=
Subject key identifier:   8D:78:3C:5F:8F:C9:35:D6:6B:D0:C0:62:4A:E4:E2:A0:DF:03:7B:81
Certificate issuer:       /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Certificate serial:       7184E8E5A45A49CD8575BA7172B260F36B733C8B
Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/323830343a323363383a3a2f33322d3332203d3e20323634313832.roa
Signing time:             Thu 05 Feb 2026 01:24:23 +0000
ROA not before:           Thu 05 Feb 2026 01:19:23 +0000
ROA not after:            Thu 04 Feb 2027 01:24:23 +0000
asID:                     264182
IP address blocks:        2804:23c8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl
                          rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Feb 2026 19:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:84:e8:e5:a4:5a:49:cd:85:75:ba:71:72:b2:60:f3:6b:73:3c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
        Validity
            Not Before: Feb  5 01:19:23 2026 GMT
            Not After : Feb  4 01:24:23 2027 GMT
        Subject: CN=8D783C5F8FC935D66BD0C0624AE4E2A0DF037B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:a4:bf:71:9a:50:05:75:76:cc:9c:d7:a3:
                    a3:5d:d1:e1:6f:7d:7b:b6:bb:8f:09:49:6c:7f:3b:
                    ec:66:79:3f:ea:9a:8d:dd:4f:aa:18:75:b4:68:3f:
                    db:79:1e:6d:e4:50:3e:fe:0b:e6:10:94:8d:0a:77:
                    d2:57:67:f1:4a:1d:de:f3:8a:8b:16:45:0c:47:82:
                    44:fd:e3:7f:2a:ca:9d:ac:17:42:07:a7:75:b6:02:
                    c1:ef:88:60:c1:9d:98:33:04:98:5f:b8:82:32:f9:
                    c5:22:0b:af:5a:b7:6e:b3:8e:8d:8c:94:4d:6d:fa:
                    b2:c0:54:12:40:69:39:b0:6a:2b:38:3b:77:03:75:
                    c0:84:53:d1:a6:99:6e:d5:e5:14:8d:e0:d0:e1:ff:
                    f4:5e:3f:cf:3a:59:b6:fb:b3:03:b3:e9:ee:37:3b:
                    78:5e:58:e9:93:ec:8d:d9:a4:db:b6:da:92:e0:0e:
                    1b:0e:21:51:05:4a:ff:62:c3:0c:17:bc:d5:0f:38:
                    ef:0e:3a:75:3d:8e:06:f1:37:51:80:1e:a5:a5:eb:
                    51:d1:49:8b:c1:c7:34:71:58:83:09:43:19:3a:4a:
                    77:98:36:a6:e3:b5:75:7e:d2:b4:f3:ca:94:9f:f4:
                    e1:cf:e5:3e:8e:71:23:11:55:b0:bf:96:6e:84:22:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:78:3C:5F:8F:C9:35:D6:6B:D0:C0:62:4A:E4:E2:A0:DF:03:7B:81
            X509v3 Authority Key Identifier:
                keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/323830343a323363383a3a2f33322d3332203d3e20323634313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:66:0f:8e:b8:7f:33:c7:79:3f:73:6d:34:2f:5f:d0:17:
         32:b6:4f:6d:71:58:1f:2c:51:60:e4:d2:49:39:93:9e:4f:46:
         0a:58:86:23:03:48:0b:49:a8:1e:09:15:63:5a:ba:18:f3:ad:
         92:4f:30:27:86:1b:66:98:33:80:fb:af:54:3b:eb:cd:4f:2a:
         69:73:12:92:51:21:01:01:d8:46:64:a2:0f:ee:81:e8:fc:3e:
         35:0c:8b:41:d1:9f:0d:b5:4d:15:e3:3d:08:cd:bc:fd:92:ad:
         b7:74:e7:63:12:c5:b5:6a:09:80:4c:c3:db:2c:0d:3d:a0:5e:
         d9:a8:51:1e:98:e4:31:80:1f:8e:84:39:22:c9:a9:cb:b8:62:
         3b:38:ce:90:1d:67:e9:53:14:51:75:b4:ae:c8:a8:6b:95:24:
         20:d7:81:a6:4c:46:07:1c:59:76:8a:bd:7c:98:fa:d6:39:53:
         91:24:d8:74:4b:d5:97:be:5d:46:be:78:90:e9:2c:5a:5c:a9:
         73:0c:86:75:ee:60:f2:b4:47:62:30:f4:a0:91:99:74:b1:6e:
         43:95:a8:c9:81:d3:77:4f:97:8a:e0:de:a2:c0:47:12:50:9b:
         7b:44:53:84:84:37:b3:56:7b:25:65:e2:82:8e:2c:98:ca:9f:
         bf:24:37:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:16:28 2026 by rpki-client