This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a3a2f33322d3438203d3e203533303438.roa File: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (raw, json) Hash identifier: 6V34vYOx2MLgtwHD9a/e8nKBoFUO7kEonmSNUlw0zWM= Subject key identifier: 04:B9:60:27:35:50:85:6D:CA:E6:08:2A:57:B0:60:07:E2:D6:A7:D4 Certificate issuer: /CN=A910E04F27510FFF1E8362052070412C903FFD8B Certificate serial: 429BF4056E2E8E9CC305CF764518307B9AC46DD6 Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a3a2f33322d3438203d3e203533303438.roa Signing time: Fri 02 Jan 2026 13:00:48 +0000 ROA not before: Fri 02 Jan 2026 12:55:48 +0000 ROA not after: Fri 01 Jan 2027 13:00:48 +0000 asID: 53048 IP address blocks: 2804:1b04::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 19:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9b:f4:05:6e:2e:8e:9c:c3:05:cf:76:45:18:30:7b:9a:c4:6d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B Validity Not Before: Jan 2 12:55:48 2026 GMT Not After : Jan 1 13:00:48 2027 GMT Subject: CN=04B960273550856DCAE6082A57B06007E2D6A7D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:b0:d6:24:ed:94:12:a4:ef:d0:62:c7:ad: b7:40:b6:70:54:c0:ea:6c:ed:bb:21:49:fc:c3:64: 7d:e0:af:e5:9a:9a:b5:92:0a:ce:56:69:6b:7d:d9: 63:42:0c:e1:b9:e0:4b:e3:9f:20:7d:6b:c1:40:d8: 07:10:d5:15:1e:1d:2b:52:13:aa:f3:70:ff:37:34: c4:41:cd:33:d3:af:45:cc:58:d0:7a:5a:56:82:fe: 9f:3d:dd:a1:5c:4a:b4:c5:0a:b2:14:51:b6:c8:09: 6c:e4:60:24:a0:60:c6:d1:bc:32:ff:1e:0e:48:34: ce:bf:27:4e:32:60:00:5e:f9:1c:fb:0b:90:38:04: 05:f0:c7:a5:5b:83:1b:13:d2:48:2e:ac:e6:46:c8: 39:2a:c9:97:1f:f7:f8:61:4f:71:20:23:7f:66:1a: 17:de:ae:e7:99:59:d5:85:4a:d5:ce:55:83:7d:63: da:ca:0c:16:21:73:2f:e0:6b:cb:8c:64:ca:f1:cd: d9:23:ae:c3:bd:f5:66:ad:d5:9f:06:f1:2a:8f:ff: 73:1f:bf:88:a8:d7:77:d5:a0:42:d2:78:90:d1:10: 16:52:28:1a:50:ff:60:82:c2:11:85:4f:e1:39:1f: aa:d3:a7:a8:1f:84:9b:1d:6c:a5:58:ac:07:21:bc: c0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B9:60:27:35:50:85:6D:CA:E6:08:2A:57:B0:60:07:E2:D6:A7:D4 X509v3 Authority Key Identifier: keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a3a2f33322d3438203d3e203533303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1b04::/32 Signature Algorithm: sha256WithRSAEncryption 26:05:c1:5f:2e:ce:0c:e5:d3:8d:80:12:f2:83:fc:18:d3:b9: e2:c5:2f:19:c9:ee:2d:96:fb:da:96:74:2b:c7:06:fe:b0:01: d9:58:30:da:a4:a5:be:3e:7d:35:8f:65:03:c4:2c:c6:0a:a1: 26:cb:d0:7b:4a:87:e7:bc:48:f9:a0:9c:61:95:a1:40:62:1f: 86:93:16:d8:a3:c4:48:5f:56:ad:26:87:fc:3a:d0:ff:52:d2: d0:6c:63:9b:53:3e:a9:88:19:9f:18:1b:28:31:f9:e5:87:97: fc:f8:42:7d:41:df:58:7d:81:3f:2e:5f:c7:3c:17:d5:11:be: fb:0a:38:4e:94:56:68:1b:8b:05:b0:81:bd:ea:f2:6b:03:44: 1d:d0:7c:91:9f:43:a5:fe:21:61:b8:7d:d0:7b:1d:58:85:48: 0a:74:20:9f:c9:2d:6d:18:b7:e4:e6:2d:e1:a4:ce:b0:fc:9a: 60:cb:e1:bb:07:ca:93:6e:98:b3:f3:58:c3:78:c5:eb:b6:4b: a3:61:cf:cb:56:47:e1:c6:d9:7a:e0:f4:fd:ec:e5:32:9b:49: 84:da:6e:ad:d8:03:2c:17:2c:d9:d1:e4:4f:9f:6c:f6:1d:f0: a1:1e:60:ec:6a:97:8e:ba:7b:c3:b1:a3:82:18:15:25:2b:20: f8:2f:1e:12 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUQpv0BW4ujpzDBc92RRgwe5rEbdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMEUwNEYyNzUxMEZGRjFFODM2MjA1MjA3MDQxMkM5 MDNGRkQ4QjAeFw0yNjAxMDIxMjU1NDhaFw0yNzAxMDExMzAwNDhaMDMxMTAvBgNV BAMTKDA0Qjk2MDI3MzU1MDg1NkRDQUU2MDgyQTU3QjA2MDA3RTJENkE3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWrDWJO2UEqTv0GLHrbdAtnBU wOps7bshSfzDZH3gr+WamrWSCs5WaWt92WNCDOG54EvjnyB9a8FA2AcQ1RUeHStS E6rzcP83NMRBzTPTr0XMWNB6WlaC/p893aFcSrTFCrIUUbbICWzkYCSgYMbRvDL/ Hg5INM6/J04yYABe+Rz7C5A4BAXwx6VbgxsT0kgurOZGyDkqyZcf9/hhT3EgI39m GhferueZWdWFStXOVYN9Y9rKDBYhcy/ga8uMZMrxzdkjrsO99Wat1Z8G8SqP/3Mf v4io13fVoELSeJDREBZSKBpQ/2CCwhGFT+E5H6rTp6gfhJsdbKVYrAchvMAVAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUBLlgJzVQhW3K5ggqV7BgB+LWp9QwHwYDVR0j BBgwFoAUqRDgTydRD/8eg2IFIHBBLJA//YswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF QWkvMC9BOTEwRTA0RjI3NTEwRkZGMUU4MzYyMDUyMDcwNDEyQzkwM0ZGRDhCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MTBFMDRGMjc1MTBGRkYx RTgzNjIwNTIwNzA0MTJDOTAzRkZEOEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv MzIzODMwMzQzYTMxNjIzMDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMw MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEGwQwDQYJKoZIhvcNAQELBQADggEBACYFwV8uzgzl 042AEvKD/BjTueLFLxnJ7i2W+9qWdCvHBv6wAdlYMNqkpb4+fTWPZQPELMYKoSbL 0HtKh+e8SPmgnGGVoUBiH4aTFtijxEhfVq0mh/w60P9S0tBsY5tTPqmIGZ8YGygx +eWHl/z4Qn1B31h9gT8uX8c8F9URvvsKOE6UVmgbiwWwgb3q8msDRB3QfJGfQ6X+ IWG4fdB7HViFSAp0IJ/JLW0Yt+TmLeGkzrD8mmDL4bsHypNumLPzWMN4xeu2S6Nh z8tWR+HG2Xrg9P3s5TKbSYTabq3YAywXLNnR5E+fbPYd8KEeYOxql466e8Oxo4IY FSUrIPgvHhI= -----END CERTIFICATE-----Generated at Mon Jan 26 08:24:31 2026 by rpki-client