This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa
File:                     323830343a383665383a3a2f33322d313238203d3e20323732363734.roa (raw, json)
Hash identifier:          WvoBXCoELz//rsBYXLPXxijKkU+6GFcFLo4nh3iYUlM=
Subject key identifier:   E9:28:A8:D2:73:41:F2:11:59:46:56:84:C5:4E:0B:5A:24:B9:94:2C
Certificate issuer:       /CN=BBFD07829824ED2E39C17D185BBAD3FFD99DE265
Certificate serial:       13C8276ED60E8C6C297301B63E9FDDFE1A4EE1FF
Authority key identifier: BB:FD:07:82:98:24:ED:2E:39:C1:7D:18:5B:BA:D3:FF:D9:9D:E2:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa
Signing time:             Tue 30 Dec 2025 18:59:25 +0000
ROA not before:           Tue 30 Dec 2025 18:54:25 +0000
ROA not after:            Tue 29 Dec 2026 18:59:25 +0000
asID:                     272674
IP address blocks:        2804:86e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.crl
                          rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Jan 2026 04:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c8:27:6e:d6:0e:8c:6c:29:73:01:b6:3e:9f:dd:fe:1a:4e:e1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBFD07829824ED2E39C17D185BBAD3FFD99DE265
        Validity
            Not Before: Dec 30 18:54:25 2025 GMT
            Not After : Dec 29 18:59:25 2026 GMT
        Subject: CN=E928A8D27341F21159465684C54E0B5A24B9942C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:34:2a:07:30:4d:23:2b:4c:1b:50:2f:4f:
                    ed:a4:fc:84:f7:70:72:95:38:f5:62:20:60:21:c6:
                    fb:52:25:71:2f:f4:29:5b:f4:68:ab:23:6f:5e:5a:
                    d3:25:95:c1:fb:b3:ea:a8:cf:b2:83:11:d8:01:74:
                    8d:e3:78:d0:8b:79:6d:28:f8:12:8e:18:48:b1:4c:
                    ae:80:65:a2:3f:b5:aa:1c:ef:d4:84:5e:86:37:cb:
                    b1:81:f5:1f:72:fc:a4:e5:c7:d9:35:cd:62:7d:4a:
                    b5:f0:fb:1a:cd:b1:50:04:9c:08:05:dd:52:3e:ee:
                    2b:b2:e7:e6:7c:09:0c:1d:79:3f:85:82:12:dc:b1:
                    8e:02:27:9e:36:16:16:f9:71:8d:52:2c:28:0d:24:
                    00:d7:a7:43:68:37:02:82:61:c6:2d:a0:f1:21:76:
                    8d:a4:7e:e6:59:e4:4d:47:25:8a:ea:77:62:b6:c9:
                    2e:76:82:52:e6:21:d7:73:de:43:5e:c4:a6:79:fb:
                    3e:5c:48:ff:80:21:1b:c4:d7:21:81:b6:18:a6:22:
                    8e:29:5f:97:a5:82:80:93:92:94:84:a5:6e:de:1a:
                    af:54:fc:7b:bf:75:3d:5f:49:25:41:15:76:3a:ab:
                    a8:9f:90:23:1a:77:e1:c8:00:30:39:5d:3a:db:a8:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:28:A8:D2:73:41:F2:11:59:46:56:84:C5:4E:0B:5A:24:B9:94:2C
            X509v3 Authority Key Identifier:
                keyid:BB:FD:07:82:98:24:ED:2E:39:C1:7D:18:5B:BA:D3:FF:D9:9D:E2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:a0:ce:6d:31:ac:68:5e:34:3e:33:af:c8:a2:34:20:33:
         5a:14:e9:77:11:6d:d2:ec:6c:27:ee:54:be:8e:12:0d:9e:ee:
         02:8d:3f:17:38:e2:69:9d:bb:1d:00:35:26:86:48:34:32:e3:
         ff:25:e8:44:2a:18:e1:48:e2:e6:62:c0:43:45:7c:f1:d7:43:
         2c:0a:66:e9:0b:49:ea:d8:6c:c2:9c:09:22:82:36:06:5f:42:
         cb:77:45:05:80:ba:0f:e4:58:db:db:b3:e4:36:3c:06:14:6f:
         4b:a7:c4:ef:54:1c:ad:4b:9e:b5:fe:e7:39:0c:3e:8a:6f:a3:
         05:38:92:63:31:64:ce:5f:ff:72:b0:58:a4:07:be:88:d0:e8:
         42:8a:8f:cc:05:3e:77:b2:1c:82:48:fc:2b:a0:46:2a:bd:2f:
         2b:5a:f3:c9:bf:e7:4e:4d:74:e3:d9:9f:82:dc:f2:ba:6f:64:
         85:72:e8:05:37:6c:cc:b6:d7:77:8e:bd:2f:50:a4:de:c3:4c:
         23:ab:92:7c:6d:0a:84:6c:17:c8:06:8f:47:8c:d7:f5:ed:88:
         36:94:14:cc:ce:47:07:bf:0f:05:99:60:c0:56:5d:08:f3:6b:
         1c:e9:2f:89:f5:4f:a7:69:47:92:36:c5:58:12:b0:8f:6f:61:
         d2:82:b3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:12:06 2026 by rpki-client