This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3332203d3e20323637343239.roa
File:                     323830343a343136303a3a2f33322d3332203d3e20323637343239.roa (raw, json)
Hash identifier:          cQ36dWVp/HRgvSRpMvscY1zVy+8ev/sdbmEfizV0ViA=
Subject key identifier:   80:CD:4C:23:82:4F:31:14:4E:F7:B6:D6:50:BF:8B:46:B4:5D:C2:15
Certificate issuer:       /CN=0084D2812FD4426DEBEC7AAA2AEED1934928762A
Certificate serial:       0E5C1EED1116D60993DCCB4BFD07B9158A3C0156
Authority key identifier: 00:84:D2:81:2F:D4:42:6D:EB:EC:7A:AA:2A:EE:D1:93:49:28:76:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0084D2812FD4426DEBEC7AAA2AEED1934928762A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3332203d3e20323637343239.roa
Signing time:             Mon 05 Jan 2026 17:03:05 +0000
ROA not before:           Mon 05 Jan 2026 16:58:05 +0000
ROA not after:            Mon 04 Jan 2027 17:03:05 +0000
asID:                     267429
IP address blocks:        2804:4160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/0084D2812FD4426DEBEC7AAA2AEED1934928762A.crl
                          rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/0084D2812FD4426DEBEC7AAA2AEED1934928762A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0084D2812FD4426DEBEC7AAA2AEED1934928762A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 18:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5c:1e:ed:11:16:d6:09:93:dc:cb:4b:fd:07:b9:15:8a:3c:01:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0084D2812FD4426DEBEC7AAA2AEED1934928762A
        Validity
            Not Before: Jan  5 16:58:05 2026 GMT
            Not After : Jan  4 17:03:05 2027 GMT
        Subject: CN=80CD4C23824F31144EF7B6D650BF8B46B45DC215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:44:27:85:02:a6:9c:9c:56:ce:d7:02:b5:
                    96:47:91:d8:a8:f7:1a:80:4f:75:c1:b9:dc:91:67:
                    8d:f6:fa:1f:a9:9f:88:51:15:09:87:79:78:3f:51:
                    d8:28:1b:c3:c3:6b:88:e3:35:cb:62:84:29:2f:f0:
                    4d:92:d9:dd:39:00:e1:1e:8a:be:05:b1:56:59:f0:
                    32:8a:99:5f:a8:91:c4:0b:fc:34:f4:30:ed:06:9d:
                    0e:27:cf:bb:76:7a:51:f0:0f:05:62:59:85:d0:68:
                    13:fb:25:9f:2c:6f:a9:1b:96:f0:ae:7a:61:28:4b:
                    5d:22:bf:b3:9a:6c:a6:b9:26:90:cc:b7:95:69:31:
                    ab:da:8d:7f:cc:8a:66:b7:bf:18:88:f4:0a:4c:17:
                    04:ff:c1:93:4f:c4:1b:c8:cc:7b:2a:33:94:8d:77:
                    ee:97:21:b2:04:3d:3b:ef:ae:63:e6:17:2e:23:36:
                    a6:36:5d:20:76:d9:c7:13:6d:7a:af:81:c9:c6:9d:
                    0c:40:ac:6f:33:37:61:54:d2:88:7d:63:ba:c0:00:
                    b9:a8:87:0d:ec:3a:4a:f3:e2:f9:f9:c3:4d:f1:7f:
                    fa:f7:22:73:0f:25:69:51:30:bf:c3:5c:fb:26:61:
                    60:b9:3b:8f:bc:6e:4d:4a:95:3d:f5:67:33:07:4a:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CD:4C:23:82:4F:31:14:4E:F7:B6:D6:50:BF:8B:46:B4:5D:C2:15
            X509v3 Authority Key Identifier:
                keyid:00:84:D2:81:2F:D4:42:6D:EB:EC:7A:AA:2A:EE:D1:93:49:28:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/0084D2812FD4426DEBEC7AAA2AEED1934928762A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0084D2812FD4426DEBEC7AAA2AEED1934928762A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a3a2f33322d3332203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4160::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:c7:34:98:2a:ca:72:39:0b:be:a5:67:25:f5:a7:22:04:ab:
         8e:62:e3:e0:4b:11:9b:ef:6f:70:75:e2:9e:c7:02:11:b1:55:
         c6:88:22:31:e2:51:98:8a:f4:a3:63:56:e7:75:7e:08:5f:9f:
         26:81:88:f9:30:16:62:27:1b:c3:3d:c1:f9:6b:93:37:ab:4d:
         9d:f5:ea:b9:4e:01:b1:0a:ae:99:95:48:4f:0e:8a:0c:29:79:
         4b:af:af:b7:33:b5:7a:22:43:98:ee:ab:79:08:6e:c8:07:56:
         81:dd:b6:15:0f:f1:92:1d:fb:74:af:8c:6f:13:2f:d4:da:f7:
         f5:58:e1:d5:0d:53:7d:47:96:33:09:21:59:06:ca:3d:77:5e:
         00:ba:5b:32:66:c6:b2:e1:d7:58:18:d8:3e:64:19:08:b3:af:
         7b:a2:c7:9a:79:47:46:0e:2c:f3:17:3e:93:48:01:b1:05:10:
         69:76:57:05:39:b1:b5:d7:70:8c:63:4c:ce:54:d3:42:8c:0a:
         77:ee:17:c0:50:c9:a1:b8:33:ab:85:21:f7:e9:b1:65:8d:e6:
         4f:29:ff:30:d2:8c:05:cd:c4:72:3c:bf:b4:ef:d7:74:36:65:
         38:71:ae:7e:76:b7:f4:3b:da:a7:5c:c1:cd:63:1b:42:f1:e1:
         ff:25:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:14:37 2026 by rpki-client