This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/323830343a353034633a3a2f33322d313238203d3e20323638333830.roa
File:                     323830343a353034633a3a2f33322d313238203d3e20323638333830.roa (raw, json)
Hash identifier:          8J1hB5BAu1XVFQHDgLilU6L5l5MFCf90DjsTkR6fDMU=
Subject key identifier:   7D:44:22:9F:AA:E0:41:F3:31:F8:4C:33:84:A5:3F:85:1C:58:BB:B4
Certificate issuer:       /CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Certificate serial:       482355D09CD5CC1DF2469B2CCF03568B279BE4F3
Authority key identifier: 9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/323830343a353034633a3a2f33322d313238203d3e20323638333830.roa
Signing time:             Sun 04 Jan 2026 02:59:51 +0000
ROA not before:           Sun 04 Jan 2026 02:54:51 +0000
ROA not after:            Sun 03 Jan 2027 02:59:51 +0000
asID:                     268380
IP address blocks:        2804:504c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
                          rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 16:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:23:55:d0:9c:d5:cc:1d:f2:46:9b:2c:cf:03:56:8b:27:9b:e4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
        Validity
            Not Before: Jan  4 02:54:51 2026 GMT
            Not After : Jan  3 02:59:51 2027 GMT
        Subject: CN=7D44229FAAE041F331F84C3384A53F851C58BBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:8b:49:e9:af:54:a6:d6:8e:30:93:a3:71:
                    10:7c:52:e7:54:0a:30:cf:aa:47:66:3d:24:fa:4c:
                    ef:88:bd:ed:aa:10:50:5b:a0:48:24:18:ce:aa:65:
                    8d:63:3b:b3:ac:30:05:03:b5:49:2f:4b:a3:7a:5b:
                    7d:d8:73:0e:83:53:ff:de:e9:61:49:09:60:2b:f6:
                    81:54:97:e8:5b:cd:8f:3b:3d:03:64:a4:eb:d8:f9:
                    3d:49:68:d0:09:e2:7d:24:c6:3e:84:c4:24:e1:f1:
                    58:5b:ff:db:8d:ae:e3:4c:af:4b:43:66:f3:3b:36:
                    17:7d:8f:34:94:a6:3b:fd:41:ba:12:e4:d0:3e:ef:
                    03:5c:68:75:55:49:01:b0:aa:9b:d9:5e:40:84:18:
                    cb:d1:15:13:ba:e0:8e:b6:49:7c:ba:b2:08:86:0e:
                    55:da:98:fe:2c:ce:5f:33:9a:57:a4:f0:5f:40:71:
                    c8:d0:34:1e:28:99:74:11:d2:2e:08:ee:73:0c:ca:
                    2b:3d:89:69:1a:23:c5:c8:1c:f7:3e:75:4c:b6:31:
                    f4:92:55:99:a8:a4:bf:83:4e:d1:ef:b3:1e:b5:9d:
                    52:60:8e:0c:4c:a0:78:92:1a:cf:fd:1a:41:95:47:
                    68:57:fc:99:71:f2:58:4f:98:aa:52:d7:d4:fd:37:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:44:22:9F:AA:E0:41:F3:31:F8:4C:33:84:A5:3F:85:1C:58:BB:B4
            X509v3 Authority Key Identifier:
                keyid:9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/323830343a353034633a3a2f33322d313238203d3e20323638333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:504c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:1d:88:aa:72:53:8a:e0:fc:66:0f:e4:db:ca:ff:06:a8:f6:
         24:5d:e1:cd:83:f0:5d:d6:72:f5:89:f4:0d:60:3a:ea:86:94:
         6b:4b:a0:15:b0:69:d3:91:fb:5d:ee:4e:c4:3b:8d:b5:d6:fa:
         4d:8e:a6:6e:e7:ea:c0:e1:1e:4c:e7:09:6e:0c:9c:3a:2b:29:
         56:89:f0:ec:74:4d:80:87:63:e3:58:66:f8:ef:7e:41:0c:f3:
         84:23:4f:9c:30:bf:d2:e5:0e:84:2d:84:5f:91:f7:f8:05:42:
         c1:a9:ed:23:ce:f0:f7:36:7f:c1:fc:a7:a5:6e:ce:3c:c6:63:
         42:78:8a:ea:d3:65:22:86:df:a2:2c:a6:28:bf:4f:7b:d5:7c:
         f3:67:a7:c9:07:4c:f9:2d:04:ca:5d:cc:bf:21:58:ba:2b:9f:
         3f:42:6e:52:6e:47:f8:7e:ed:3f:3d:69:c7:2a:80:d8:ef:78:
         c9:fc:43:ef:cb:86:d1:e6:19:70:b0:62:6a:e0:78:47:57:56:
         90:5d:e8:f5:2a:96:d8:1e:c1:d7:06:54:b6:7f:85:56:b4:74:
         bc:b0:f8:9c:e5:f7:31:bb:c4:e2:71:b1:e8:e8:a4:fd:ea:35:
         63:bf:da:c2:9f:81:e1:01:e8:87:e9:db:05:78:e2:f4:30:83:
         42:1c:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:17:49 2026 by rpki-client