This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a3a2f33322d3332203d3e20323731353939.roa File: 323830343a376530633a3a2f33322d3332203d3e20323731353939.roa (raw, json) Hash identifier: xiXX9eZJL1+/OMczNbTSk0x7o52uRFaZuLM4J7Rfzdc= Subject key identifier: DC:8A:30:2A:A5:8B:E0:78:EE:0F:EC:41:DD:6E:D3:D1:CC:3B:E9:AF Certificate issuer: /CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54 Certificate serial: 1E98A9C01FAC1A887725316E97045F57733AAAD6 Authority key identifier: 5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer Subject info access: rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a3a2f33322d3332203d3e20323731353939.roa Signing time: Tue 06 Jan 2026 03:16:10 +0000 ROA not before: Tue 06 Jan 2026 03:11:10 +0000 ROA not after: Tue 05 Jan 2027 03:16:10 +0000 asID: 271599 IP address blocks: 2804:7e0c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 16:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:98:a9:c0:1f:ac:1a:88:77:25:31:6e:97:04:5f:57:73:3a:aa:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54 Validity Not Before: Jan 6 03:11:10 2026 GMT Not After : Jan 5 03:16:10 2027 GMT Subject: CN=DC8A302AA58BE078EE0FEC41DD6ED3D1CC3BE9AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:4e:ce:e7:ae:60:ff:05:b3:dd:3e:e8:72: a5:bd:e4:57:df:88:0b:01:09:bf:be:56:db:9b:61: 82:49:ad:02:7e:c7:15:fc:a1:78:62:cd:ba:0f:ea: a8:c3:8a:ce:33:2c:b1:d5:80:16:00:6b:99:f9:be: b8:56:19:44:f4:8d:1a:17:42:08:87:94:32:f9:90: c3:fa:d2:74:d1:21:18:2d:8a:63:df:19:8e:a9:b9: a7:94:e2:52:43:83:fb:09:64:41:7e:90:4e:c2:39: 04:86:95:f2:d3:ff:da:6b:31:85:f6:c6:07:83:88: cd:6e:45:9a:69:ce:9e:9b:45:14:31:b1:2d:9e:10: 75:00:55:30:6a:b2:0f:aa:c4:4d:f4:da:3f:68:8b: f2:81:ba:ce:6b:13:1f:7b:67:93:f2:69:c7:ea:29: b7:e5:49:aa:ca:c4:e0:77:6d:a6:9a:6a:94:f9:49: 8a:11:fa:4e:3b:cb:39:5e:c7:6d:31:53:6e:c0:6d: c4:7c:af:47:fa:6c:7c:54:df:41:52:50:db:33:e9: bc:9b:3d:58:c5:3e:1a:0c:90:9f:51:0c:28:8f:bb: 22:ee:0f:27:10:0e:d4:9f:15:20:a4:ba:8e:bc:00: da:54:3d:1a:c1:51:71:e7:a3:8d:d0:52:df:f9:c4: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8A:30:2A:A5:8B:E0:78:EE:0F:EC:41:DD:6E:D3:D1:CC:3B:E9:AF X509v3 Authority Key Identifier: keyid:5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a3a2f33322d3332203d3e20323731353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7e0c::/32 Signature Algorithm: sha256WithRSAEncryption a1:3d:13:b7:72:56:c0:85:96:c8:76:e5:af:d5:f9:90:0a:78: e8:ce:49:08:64:07:25:3c:3d:db:70:16:f3:d3:63:da:c3:75: 2d:dc:87:86:51:4a:b4:24:bc:61:c9:07:74:c5:8a:74:10:86: 00:78:2c:09:a9:5c:49:f3:27:70:c8:5b:77:08:9f:81:f6:da: f7:12:50:39:76:af:28:0c:31:5e:2b:d6:c3:33:9c:77:d3:b4: fe:a3:13:87:ef:84:47:55:43:50:e9:c8:39:9b:e5:dc:44:e2: bb:b7:aa:a1:a3:62:49:19:bf:ba:ff:8f:c8:2f:11:35:0f:58: 78:4e:f7:81:c4:73:25:d4:c7:4e:51:bc:69:80:05:e2:f5:8e: 47:c4:ac:bd:42:97:4f:23:1d:8c:b7:fc:9c:fb:c9:e2:76:0b: e1:48:fd:ce:0b:87:dd:a1:11:35:bb:47:ee:10:74:b2:2e:6b: 09:c9:b2:ae:f0:59:ba:2b:1a:2e:a8:fc:0a:4c:0f:b8:43:47: 9f:d5:75:d4:e7:54:58:26:aa:96:81:2e:f2:29:e2:c0:d5:6f: 6b:b7:d1:85:0c:2c:1e:be:27:cb:53:cb:33:71:e9:b7:15:a6: 42:32:27:a9:ba:74:a3:f6:26:3e:21:0d:2b:5d:09:92:f3:4a: 5d:7b:23:99 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUHpipwB+sGoh3JTFulwRfV3M6qtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMkJCOUM5NjMzODZBMTRBODZGODZENzJBOThGNzBE NUQyQUU1NDAeFw0yNjAxMDYwMzExMTBaFw0yNzAxMDUwMzE2MTBaMDMxMTAvBgNV BAMTKERDOEEzMDJBQTU4QkUwNzhFRTBGRUM0MURENkVEM0QxQ0MzQkU5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgU7O565g/wWz3T7ocqW95Fff iAsBCb++VtubYYJJrQJ+xxX8oXhizboP6qjDis4zLLHVgBYAa5n5vrhWGUT0jRoX QgiHlDL5kMP60nTRIRgtimPfGY6puaeU4lJDg/sJZEF+kE7COQSGlfLT/9prMYX2 xgeDiM1uRZppzp6bRRQxsS2eEHUAVTBqsg+qxE302j9oi/KBus5rEx97Z5Pyacfq KbflSarKxOB3baaaapT5SYoR+k47yzlex20xU27AbcR8r0f6bHxU30FSUNsz6byb PVjFPhoMkJ9RDCiPuyLuDycQDtSfFSCkuo68ANpUPRrBUXHno43QUt/5xGSnAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU3IowKqWL4HjuD+xB3W7T0cw76a8wHwYDVR0j BBgwFoAUXRK7nJYzhqFKhvhtcqmPcNXSrlQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnZQS2dvWGhvVk5CTmZYNEgyUkVFRloxUFZtRjhSOFhtVThxMVVVZGlt R2IvMC81RDEyQkI5Qzk2MzM4NkExNEE4NkY4NkQ3MkE5OEY3MEQ1RDJBRTU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMTJCQjlDOTYzMzg2QTE0 QTg2Rjg2RDcyQTk4RjcwRDVEMkFFNTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJ2UEtnb1hob1ZOQk5mWDRIMlJFRUZaMVBWbUY4UjhYbVU4cTFVVWRpbUdiLzAv MzIzODMwMzQzYTM3NjUzMDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx MzUzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAR+DDANBgkqhkiG9w0BAQsFAAOCAQEAoT0Tt3JW wIWWyHblr9X5kAp46M5JCGQHJTw923AW89Nj2sN1LdyHhlFKtCS8YckHdMWKdBCG AHgsCalcSfMncMhbdwifgfba9xJQOXavKAwxXivWwzOcd9O0/qMTh++ER1VDUOnI OZvl3ETiu7eqoaNiSRm/uv+PyC8RNQ9YeE73gcRzJdTHTlG8aYAF4vWOR8SsvUKX TyMdjLf8nPvJ4nYL4Uj9zguH3aERNbtH7hB0si5rCcmyrvBZuisaLqj8CkwPuENH n9V11OdUWCaqloEu8iniwNVva7fRhQwsHr4ny1PLM3HptxWmQjInqbp0o/YmPiEN K10JkvNKXXsjmQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:15:10 2026 by rpki-client