This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa
File:                     323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa (raw, json)
Hash identifier:          4l2kEkGEoDRBPlC0TzGX9k5PVTQQDl4swbUGEXUxjFs=
Subject key identifier:   35:98:8F:35:6E:8B:40:6C:AE:79:DC:BB:91:BF:51:9D:6E:3E:24:3D
Certificate issuer:       /CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
Certificate serial:       2CC19E5BC58CA9A8A268AA4806394092C3A648C8
Authority key identifier: DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa
Signing time:             Tue 06 Jan 2026 04:17:07 +0000
ROA not before:           Tue 06 Jan 2026 04:12:07 +0000
ROA not after:            Tue 05 Jan 2027 04:17:07 +0000
asID:                     271394
IP address blocks:        2804:7ad4:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl
                          rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 00:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c1:9e:5b:c5:8c:a9:a8:a2:68:aa:48:06:39:40:92:c3:a6:48:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
        Validity
            Not Before: Jan  6 04:12:07 2026 GMT
            Not After : Jan  5 04:17:07 2027 GMT
        Subject: CN=35988F356E8B406CAE79DCBB91BF519D6E3E243D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:1d:58:ff:6d:3e:4b:26:e9:30:6c:01:d3:
                    79:e1:d5:18:b0:b1:45:e2:a4:77:77:89:95:06:e2:
                    0c:b9:92:4b:3b:f6:e9:9d:2f:d8:42:1b:6a:f7:ef:
                    1a:2a:be:40:b3:67:99:3f:92:89:f1:2e:aa:a8:98:
                    cc:3f:ee:03:db:60:58:d8:93:55:32:c1:88:06:94:
                    87:20:f3:1e:18:91:12:a1:60:f0:91:dd:c3:a8:07:
                    5e:9f:94:f1:ca:9a:c3:29:cd:56:2b:4c:5d:8a:b2:
                    94:ef:61:d0:98:29:43:e6:a1:d3:91:32:4e:50:02:
                    7b:49:eb:55:3c:64:7e:86:72:92:dd:4c:c9:3a:83:
                    6c:11:98:5c:2c:b3:1b:97:a4:6c:b1:e6:eb:49:14:
                    e0:e7:12:db:83:97:23:42:d5:4d:7c:1e:04:09:c1:
                    0c:db:cf:90:8d:4a:32:9f:a3:10:46:23:7f:01:ba:
                    78:28:91:da:a9:1f:33:8f:8c:cd:c1:8c:57:3e:aa:
                    63:63:39:60:3a:66:be:22:ab:ae:c8:5b:b7:55:30:
                    44:54:be:8a:d8:7e:bb:ef:77:1e:ea:e7:e5:f0:6e:
                    2e:38:21:cd:02:74:a7:4f:66:96:b7:4d:c3:a0:f8:
                    ed:a5:59:6a:f8:87:58:6e:37:26:52:20:e5:0c:30:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:8F:35:6E:8B:40:6C:AE:79:DC:BB:91:BF:51:9D:6E:3E:24:3D
            X509v3 Authority Key Identifier:
                keyid:DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ad4:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:70:35:f4:09:01:ae:f2:55:7a:4c:73:b7:47:b1:a9:25:96:
         4b:5e:50:a6:df:b1:f4:24:1e:fb:8b:11:96:ae:94:c0:5a:a9:
         ef:93:2c:f8:e2:56:7d:ff:dd:c8:e5:59:9d:06:56:58:4d:ca:
         05:c5:11:aa:cd:27:1f:79:ab:e9:ea:53:88:eb:1f:43:39:90:
         f0:db:c8:90:b6:6f:3a:dc:e1:4e:2f:40:9d:93:eb:31:9b:7e:
         d9:6f:27:27:96:a4:f1:e9:19:e0:89:ca:df:5b:d8:5e:7b:4e:
         50:fe:8e:3a:f4:d2:8e:0e:c7:19:0d:c1:33:cc:e1:2f:2b:bc:
         99:9c:42:8a:5b:5c:a9:49:bd:1e:82:83:9c:78:71:ee:04:da:
         d0:c7:03:63:12:0d:de:a8:3d:c0:71:6f:7c:2d:a5:d7:b0:6e:
         66:f0:9b:3e:4e:ff:1a:b9:4c:f4:8a:3f:a3:45:da:d2:c1:28:
         de:91:40:eb:35:54:6b:9e:84:4a:78:14:27:e5:09:20:57:6a:
         ac:34:1d:eb:90:a5:04:1a:f8:f4:06:b8:f3:cb:5e:4a:ed:f1:
         9e:bb:2c:b1:89:f0:61:62:de:a8:da:cc:00:76:f2:7d:9b:56:
         bb:56:40:44:4c:b4:2a:39:77:65:ba:31:85:d9:1d:aa:5d:01:
         6e:01:7e:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULMGeW8WMqaiiaKpIBjlAksOmSMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyNzFGMjQyREYwRDg2MTdFOEQ3NTk3MjgzRUI2MEJE
Qjg2QzJGRDAeFw0yNjAxMDYwNDEyMDdaFw0yNzAxMDUwNDE3MDdaMDMxMTAvBgNV
BAMTKDM1OTg4RjM1NkU4QjQwNkNBRTc5RENCQjkxQkY1MTlENkUzRTI0M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqB1Y/20+SybpMGwB03nh1Riw
sUXipHd3iZUG4gy5kks79umdL9hCG2r37xoqvkCzZ5k/konxLqqomMw/7gPbYFjY
k1UywYgGlIcg8x4YkRKhYPCR3cOoB16flPHKmsMpzVYrTF2KspTvYdCYKUPmodOR
Mk5QAntJ61U8ZH6GcpLdTMk6g2wRmFwssxuXpGyx5utJFODnEtuDlyNC1U18HgQJ
wQzbz5CNSjKfoxBGI38BungokdqpHzOPjM3BjFc+qmNjOWA6Zr4iq67IW7dVMERU
vorYfrvvdx7q5+Xwbi44Ic0CdKdPZpa3TcOg+O2lWWr4h1huNyZSIOUMMPlBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNZiPNW6LQGyuedy7kb9RnW4+JD0wHwYDVR0j
BBgwFoAU3ScfJC3w2GF+jXWXKD62C9uGwv0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2lubnBuU3hneTZSYTZra0dkNnZmNGV2eGRYZ0hYOXM1VnVHVGc4eHNR
bkgvMC9ERDI3MUYyNDJERjBEODYxN0U4RDc1OTcyODNFQjYwQkRCODZDMkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMjcxRjI0MkRGMEQ4NjE3
RThENzU5NzI4M0VCNjBCREI4NkMyRkQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzdpbm5wblN4Z3k2UmE2a2tHZDZ2ZjRldnhkWGdIWDlzNVZ1R1RnOHhzUW5ILzAv
MzIzODMwMzQzYTM3NjE2NDM0M2E2NTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzEzMzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBHrUDjANBgkqhkiG9w0BAQsFAAOC
AQEAQnA19AkBrvJVekxzt0exqSWWS15Qpt+x9CQe+4sRlq6UwFqp75Ms+OJWff/d
yOVZnQZWWE3KBcURqs0nH3mr6epTiOsfQzmQ8NvIkLZvOtzhTi9AnZPrMZt+2W8n
J5ak8ekZ4InK31vYXntOUP6OOvTSjg7HGQ3BM8zhLyu8mZxCiltcqUm9HoKDnHhx
7gTa0McDYxIN3qg9wHFvfC2l17BuZvCbPk7/GrlM9Io/o0Xa0sEo3pFA6zVUa56E
SngUJ+UJIFdqrDQd65ClBBr49Aa488teSu3xnrsssYnwYWLeqNrMAHbyfZtWu1ZA
REy0Kjl3Zboxhdkdql0BbgF+RA==
-----END CERTIFICATE-----
Generated at Tue Jan 13 13:47:25 2026 by rpki-client