[routing-wg] Add BGPsec support to Hosted RPKI?

Hi Rubens, others,

On Sun, Sep 19, 2021 at 08:06:54PM -0300, Rubens Kuhl wrote:
> Our experience in Brazil is that delegated RPKI is not much of an
> issue provided its software deployment is easy enough. Krill + Lagosta
> + Up/Down activation + Upwards ROA publishing adds to being really
> effective.

Good to hear from Brazil! Indeed a number of organizations have worked
hard to remove as many barriers as possible towards the Delegated RPKI.
Impressive progress.

My message was not intended to take away from "Delegated RPKI"
deployments (I run one myself!), but rather to suggest that the
"Hosted RPKI" Dashboard should _also_ make it possible to certify &
publish BGPsec Router keys.

I suspect that "Hosted RPKI" will always be popular: clearly many
operators feel comfortable outsourcing the issuance & publication of
their ROAs to the RIR. I think it is important to study feature gaps
between "Hosted" and "Delegated".

Kind regards,

Job

ps. A: What about ASPA? Q: why not both? :-) I'm working to start an
IANA "Early Allocation" procedure to obtain codepoints for ASPA. When
progress has been made I'll circle back to routing-wg@ in a new thread,
unless someone beats me to it. :-)