This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/323830343a343639383a3a2f33322d313238203d3e20323636393939.roa
File:                     323830343a343639383a3a2f33322d313238203d3e20323636393939.roa (raw, json)
Hash identifier:          /+SM2mbEAtvdAecUR/zid/BFrKdm/2bMCvK2pfiiYZg=
Subject key identifier:   19:06:8B:2B:5D:21:CD:5B:93:5E:FB:64:F7:6A:DB:93:73:EC:20:F6
Certificate issuer:       /CN=E1150EE28057B73789BBB07AA39FC373B568668D
Certificate serial:       04E44FA40E941BA0AA8A35847E67E600C4697716
Authority key identifier: E1:15:0E:E2:80:57:B7:37:89:BB:B0:7A:A3:9F:C3:73:B5:68:66:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1150EE28057B73789BBB07AA39FC373B568668D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/323830343a343639383a3a2f33322d313238203d3e20323636393939.roa
Signing time:             Sun 28 Dec 2025 18:39:59 +0000
ROA not before:           Sun 28 Dec 2025 18:34:59 +0000
ROA not after:            Sun 27 Dec 2026 18:39:59 +0000
asID:                     266999
IP address blocks:        2804:4698::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/E1150EE28057B73789BBB07AA39FC373B568668D.crl
                          rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/E1150EE28057B73789BBB07AA39FC373B568668D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1150EE28057B73789BBB07AA39FC373B568668D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 05:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e4:4f:a4:0e:94:1b:a0:aa:8a:35:84:7e:67:e6:00:c4:69:77:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1150EE28057B73789BBB07AA39FC373B568668D
        Validity
            Not Before: Dec 28 18:34:59 2025 GMT
            Not After : Dec 27 18:39:59 2026 GMT
        Subject: CN=19068B2B5D21CD5B935EFB64F76ADB9373EC20F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:6c:9f:ac:45:0c:e3:77:93:55:a0:b3:44:
                    c5:4e:6c:01:be:97:33:3c:9c:de:4f:cb:eb:3c:2d:
                    24:b9:69:e4:d0:cd:e5:3d:99:63:45:2b:3d:f9:80:
                    40:ca:92:10:6b:fb:1b:38:64:3a:d0:63:f4:7c:90:
                    1a:6b:f3:54:3b:ab:4c:36:fe:4b:c2:34:a1:08:4c:
                    13:21:3b:33:87:a2:cf:53:9f:6c:82:ad:71:ba:aa:
                    d7:d4:0d:8b:6d:b9:59:66:4c:22:00:72:2e:c3:ca:
                    d3:16:70:24:43:6c:5b:89:e7:47:6b:6a:7f:c9:04:
                    0b:99:ec:9e:42:50:15:ea:e1:fa:49:41:25:5d:87:
                    f1:ee:2f:d9:05:ee:dc:76:4f:54:92:cd:48:72:c9:
                    42:ba:2f:0b:29:19:59:2f:fe:cb:63:5d:cf:a1:df:
                    f6:1c:9b:b6:bf:b4:a0:92:1e:34:19:0f:ca:f7:25:
                    b7:53:53:5d:be:59:52:89:07:cd:39:fb:8a:e8:8b:
                    86:5a:98:51:20:52:9a:8b:a9:71:e4:a1:16:46:6c:
                    81:ad:e2:a4:30:77:59:28:b5:3e:f2:9d:c4:32:77:
                    8f:09:b4:8f:eb:21:3c:c8:a0:03:61:7a:69:c3:e0:
                    11:08:64:3a:8d:69:af:fa:d8:64:59:aa:33:c4:b0:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:06:8B:2B:5D:21:CD:5B:93:5E:FB:64:F7:6A:DB:93:73:EC:20:F6
            X509v3 Authority Key Identifier:
                keyid:E1:15:0E:E2:80:57:B7:37:89:BB:B0:7A:A3:9F:C3:73:B5:68:66:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/E1150EE28057B73789BBB07AA39FC373B568668D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1150EE28057B73789BBB07AA39FC373B568668D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/323830343a343639383a3a2f33322d313238203d3e20323636393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4698::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:88:dc:e7:1b:96:fd:9b:6d:74:2d:f8:41:77:67:3a:df:08:
         22:6f:f7:50:f6:4e:9b:cd:4a:f9:7b:7e:c0:81:4b:f4:54:4e:
         89:da:74:ba:20:a7:cf:bd:f6:93:e3:b1:6d:ba:ba:ea:ea:87:
         00:25:d6:e9:70:b0:ab:36:a6:eb:e2:40:30:8d:f3:50:81:a3:
         6c:0a:a0:59:f3:13:fc:01:99:2b:0e:ea:db:7d:4f:2d:a0:de:
         eb:da:d6:87:c0:e9:d5:eb:4f:c5:00:b9:bd:e1:88:a8:51:c6:
         4a:22:ba:dd:42:d1:09:c9:4e:e0:0a:ae:a0:83:19:cd:4d:6e:
         a7:f7:13:56:9b:cd:40:6c:0f:45:7e:d9:19:7d:ed:9c:3c:b5:
         3f:d4:94:67:de:28:fd:a8:97:74:89:5e:c3:6b:f2:ba:3b:f3:
         cb:31:27:f8:36:ba:e3:ec:81:5d:c7:5c:ea:f1:1d:a8:88:c3:
         c8:ae:11:f2:b6:28:10:a8:f9:01:a9:59:fe:42:7f:b5:f2:7b:
         3f:e4:bd:89:46:89:59:e5:f0:d8:26:8d:90:c0:a2:ae:5e:be:
         1c:69:f9:f3:4c:f6:d7:27:74:69:ae:0c:bf:48:11:92:d6:ed:
         b8:9a:24:89:e8:60:c6:5e:c7:b8:89:60:3c:67:63:12:e7:2a:
         44:29:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 22:00:59 2026 by rpki-client