This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/323830343a353466383a3a2f33322d3434203d3e20323638363831.roa File: 323830343a353466383a3a2f33322d3434203d3e20323638363831.roa (raw, json) Hash identifier: o/gpDXvqvaRkxa6CAqYEYHsYarEILJjhIK382D9d5Bc= Subject key identifier: B4:DC:70:92:92:86:E9:4E:E1:31:83:3F:53:D9:8A:28:1F:09:64:A6 Certificate issuer: /CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49 Certificate serial: 0B0225D4374CD14B424E9C87AE92D87E4D199A2F Authority key identifier: C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/323830343a353466383a3a2f33322d3434203d3e20323638363831.roa Signing time: Tue 30 Dec 2025 21:05:37 +0000 ROA not before: Tue 30 Dec 2025 21:00:37 +0000 ROA not after: Tue 29 Dec 2026 21:05:37 +0000 asID: 268681 IP address blocks: 2804:54f8::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 17:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:02:25:d4:37:4c:d1:4b:42:4e:9c:87:ae:92:d8:7e:4d:19:9a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49 Validity Not Before: Dec 30 21:00:37 2025 GMT Not After : Dec 29 21:05:37 2026 GMT Subject: CN=B4DC70929286E94EE131833F53D98A281F0964A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:f3:08:73:3b:85:cc:0a:93:ac:5d:8d:3c: 49:24:4c:3e:72:c0:a2:bc:2f:59:30:b1:de:49:9b: 18:d8:d1:27:da:82:32:74:9e:ba:f6:ae:6e:a5:f4: 81:8d:56:f6:80:6d:0b:ab:45:4a:87:02:35:79:05: 0b:ca:92:fe:7d:13:f0:9b:0b:9f:00:e2:16:6c:57: ed:c7:d3:06:8d:cc:06:a7:27:19:04:7e:56:2c:99: 90:8c:d3:9f:b0:9c:93:71:76:05:02:42:bb:f3:7b: c4:6e:2d:cf:9a:0c:44:ab:ae:e3:3d:bf:14:8e:29: 87:21:08:fa:74:ef:19:41:4c:84:c9:75:8a:80:b2: d8:44:85:50:33:cb:79:e8:57:f4:84:2c:bf:5d:92: 7c:f5:f0:22:98:19:17:5f:b9:95:e6:81:ec:6e:9c: 36:60:79:3f:af:fd:9a:3c:73:0f:63:87:3c:a7:09: ce:59:00:35:df:c7:0e:ba:5e:d0:46:c0:29:74:21: 1e:18:45:9a:6b:9f:34:7c:e9:56:1c:40:ca:2b:ae: 15:6f:fe:cc:0e:23:c7:a3:fe:ea:82:66:5c:9c:ce: 04:55:2b:1f:39:40:67:11:d8:2f:cf:37:ce:0c:f5: 55:14:3d:53:fd:41:21:37:cb:e5:15:08:20:6c:32: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DC:70:92:92:86:E9:4E:E1:31:83:3F:53:D9:8A:28:1F:09:64:A6 X509v3 Authority Key Identifier: keyid:C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/323830343a353466383a3a2f33322d3434203d3e20323638363831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:54f8::/32 Signature Algorithm: sha256WithRSAEncryption 30:bb:be:a1:e2:d0:20:9b:f1:f9:e8:9e:74:8f:db:d4:59:6d: e8:66:e7:5d:ce:fd:42:51:0f:a0:4e:a4:ec:8a:a1:ca:33:11: 12:3f:0d:48:3d:4d:00:6e:46:bc:cd:d2:66:01:14:bc:be:fa: 4c:73:85:9c:65:98:0e:eb:96:17:8f:3a:90:c9:d5:5b:86:26: bb:bc:42:e5:4d:ed:0c:6e:09:d4:d1:38:59:ae:99:66:72:71: 9d:c4:98:a0:a5:aa:b5:59:bc:f9:37:fd:e3:ec:1e:f5:c4:11: ca:3c:ec:35:a1:31:58:f6:ad:13:e1:f7:37:1f:43:17:93:c0: 96:db:c2:2b:ed:16:b1:d2:8a:c6:d8:86:66:d2:b7:d4:73:83: e4:03:f0:f3:e6:19:0f:9b:69:ab:4e:2d:3d:8b:08:83:16:4f: 6d:56:ab:a6:b0:1e:4c:ad:40:a2:e5:47:b5:ec:bc:ee:f7:52: 3e:5e:d4:2b:f4:ca:e3:48:ad:f2:6a:9a:22:d9:09:8a:5b:25: 0f:cb:d0:48:a4:8a:2e:f2:08:3b:b9:c4:a2:ab:07:36:35:dc: 64:d7:66:29:de:73:75:86:f6:45:f8:30:2b:eb:ad:1c:99:10: 7f:33:b3:56:23:4b:88:c0:7b:15:89:18:ec:5a:c5:20:d5:77: b4:86:b2:23 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUCwIl1DdM0UtCTpyHrpLYfk0Zmi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQxNTkyMkY1QkRDQjJDRENGNUMyMTQyRDQ5RjgwRjg3 ODlBMEY0OTAeFw0yNTEyMzAyMTAwMzdaFw0yNjEyMjkyMTA1MzdaMDMxMTAvBgNV BAMTKEI0REM3MDkyOTI4NkU5NEVFMTMxODMzRjUzRDk4QTI4MUYwOTY0QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY0PMIczuFzAqTrF2NPEkkTD5y wKK8L1kwsd5JmxjY0SfagjJ0nrr2rm6l9IGNVvaAbQurRUqHAjV5BQvKkv59E/Cb C58A4hZsV+3H0waNzAanJxkEflYsmZCM05+wnJNxdgUCQrvze8RuLc+aDESrruM9 vxSOKYchCPp07xlBTITJdYqAsthEhVAzy3noV/SELL9dknz18CKYGRdfuZXmgexu nDZgeT+v/Zo8cw9jhzynCc5ZADXfxw66XtBGwCl0IR4YRZprnzR86VYcQMorrhVv /swOI8ej/uqCZlyczgRVKx85QGcR2C/PN84M9VUUPVP9QSE3y+UVCCBsMhwBAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUtNxwkpKG6U7hMYM/U9mKKB8JZKYwHwYDVR0j BBgwFoAUxBWSL1vcss3PXCFC1J+A+HiaD0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFU SGMvMi9DNDE1OTIyRjVCRENCMkNEQ0Y1QzIxNDJENDlGODBGODc4OUEwRjQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0MTU5MjJGNUJEQ0IyQ0RD RjVDMjE0MkQ0OUY4MEY4Nzg5QTBGNDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNDTXNZUUVNNFFRdVRjQUtrQVNyZVRHdVR4THpieGZrY1pvYVJndkZBVEhjLzIv MzIzODMwMzQzYTM1MzQ2NjM4M2EzYTJmMzMzMjJkMzQzNDIwM2QzZTIwMzIzNjM4 MzYzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARU+DANBgkqhkiG9w0BAQsFAAOCAQEAMLu+oeLQ IJvx+eiedI/b1Flt6GbnXc79QlEPoE6k7IqhyjMREj8NSD1NAG5GvM3SZgEUvL76 THOFnGWYDuuWF486kMnVW4Ymu7xC5U3tDG4J1NE4Wa6ZZnJxncSYoKWqtVm8+Tf9 4+we9cQRyjzsNaExWPatE+H3Nx9DF5PAltvCK+0WsdKKxtiGZtK31HOD5APw8+YZ D5tpq04tPYsIgxZPbVarprAeTK1AouVHtey87vdSPl7UK/TK40it8mqaItkJilsl D8vQSKSKLvIIO7nEoqsHNjXcZNdmKd5zdYb2RfgwK+utHJkQfzOzViNLiMB7FYkY 7FrFINV3tIayIw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:20:51 2026 by rpki-client