This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/323830343a343235303a3a2f33322d3438203d3e20323637343932.roa File: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (raw, json) Hash identifier: 2SO6QSBGyBlimyPTsuFW5fiFM0SEVXclucf8ertVkmQ= Subject key identifier: 01:55:C9:C7:17:4F:13:5B:A7:1B:BC:F1:D5:28:77:E7:0F:EB:11:4E Certificate issuer: /CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C Certificate serial: 3F30A5DFF94FCC0A0B68A5547EC10C28ED6BF69E Authority key identifier: 2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/323830343a343235303a3a2f33322d3438203d3e20323637343932.roa Signing time: Sun 18 Jan 2026 05:54:04 +0000 ROA not before: Sun 18 Jan 2026 05:49:04 +0000 ROA not after: Sun 17 Jan 2027 05:54:04 +0000 asID: 267492 IP address blocks: 2804:4250::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 16:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:30:a5:df:f9:4f:cc:0a:0b:68:a5:54:7e:c1:0c:28:ed:6b:f6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C Validity Not Before: Jan 18 05:49:04 2026 GMT Not After : Jan 17 05:54:04 2027 GMT Subject: CN=0155C9C7174F135BA71BBCF1D52877E70FEB114E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:a5:80:82:3c:03:73:90:ca:cb:33:8b:5c: 88:07:c7:10:86:9e:23:a9:5a:13:88:1b:24:ef:06: f0:d7:a0:32:ce:08:37:9a:b9:53:74:76:74:7b:b3: 4a:d5:e4:46:bf:19:6e:b8:f9:60:a9:58:9c:af:a5: c3:a5:d4:f0:ab:42:22:b4:e7:40:10:44:c5:a9:55: 9a:bb:a3:a9:af:74:c8:62:9b:74:d9:6c:70:08:71: d6:5d:03:f9:0b:d6:aa:1c:eb:47:5a:ff:11:0b:ce: aa:35:43:34:e0:75:5a:a0:09:91:2c:ce:b0:de:98: c0:d8:94:75:ca:ff:41:a0:29:a1:0c:52:ad:b4:33: 94:c9:3a:b1:df:42:9d:84:85:44:70:45:f9:d0:72: 85:9c:33:97:90:cf:89:c8:c2:02:4a:c7:63:1f:57: ba:7a:64:34:1c:51:7c:8a:39:e9:bc:2b:8a:bb:69: 4f:80:63:23:b5:6a:93:29:7b:10:e2:76:a6:a0:ee: 46:1e:2a:7f:7a:f5:57:72:82:93:08:2e:6c:36:b8: de:aa:c7:3e:a4:90:f0:a7:60:2b:d7:d8:78:87:59: 0d:8b:1d:e7:7d:b8:b7:c5:01:89:52:2e:cd:69:58: f6:f0:09:e3:c8:fb:13:5b:a3:76:7a:1c:ac:c3:f6: dc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:55:C9:C7:17:4F:13:5B:A7:1B:BC:F1:D5:28:77:E7:0F:EB:11:4E X509v3 Authority Key Identifier: keyid:2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/323830343a343235303a3a2f33322d3438203d3e20323637343932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4250::/32 Signature Algorithm: sha256WithRSAEncryption 2f:9d:cd:1b:d0:a1:d6:4d:76:c3:f5:3f:7e:2f:0d:17:13:ad: 0f:d4:a7:52:1f:fd:9a:0c:f2:d2:3b:d9:2b:ec:c5:f1:88:f9: 08:bf:2b:28:0e:e7:9b:70:7a:12:ab:c3:eb:a0:ac:5b:24:41: 95:af:aa:e9:be:01:e4:fd:7d:6a:af:5c:8b:fd:6d:c8:aa:f9: 5d:b0:57:78:7a:42:f6:78:b7:c2:b1:af:de:9e:84:81:20:b1: b7:7d:ea:d2:4b:a3:71:50:d3:c6:fe:30:74:c8:14:60:bc:76: d4:0d:c0:db:42:73:0b:ea:12:93:3f:2e:07:17:17:fb:88:9f: 4d:7e:37:53:55:f2:df:ab:f5:9a:84:f3:df:92:b0:9e:14:aa: 68:f5:bd:08:0e:ed:c6:48:e1:6b:2f:ad:d3:00:49:b4:f6:8d: 73:ef:a6:7a:6d:0c:27:41:aa:79:9a:7a:92:91:d0:87:13:45: 8b:55:90:a1:24:2a:78:62:3a:1f:17:24:9b:9b:11:28:2a:f1: 6a:d8:f8:c1:94:26:ad:c9:f5:4f:e4:11:5a:80:3e:fd:cd:9f: 32:fb:32:1c:ae:25:8b:c0:56:cd:67:e2:20:68:54:09:53:f9: d3:9e:2b:a8:13:45:79:88:b5:80:3a:f1:94:29:3b:ac:4e:be: 7b:7f:3d:36 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUPzCl3/lPzAoLaKVUfsEMKO1r9p4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NTAxQkZBN0Q3RUZBREZFNzFFOUU1QzQ1QkM4RDM5 MjQwODg3QzAeFw0yNjAxMTgwNTQ5MDRaFw0yNzAxMTcwNTU0MDRaMDMxMTAvBgNV BAMTKDAxNTVDOUM3MTc0RjEzNUJBNzFCQkNGMUQ1Mjg3N0U3MEZFQjExNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EaWAgjwDc5DKyzOLXIgHxxCG niOpWhOIGyTvBvDXoDLOCDeauVN0dnR7s0rV5Ea/GW64+WCpWJyvpcOl1PCrQiK0 50AQRMWpVZq7o6mvdMhim3TZbHAIcdZdA/kL1qoc60da/xELzqo1QzTgdVqgCZEs zrDemMDYlHXK/0GgKaEMUq20M5TJOrHfQp2EhURwRfnQcoWcM5eQz4nIwgJKx2Mf V7p6ZDQcUXyKOem8K4q7aU+AYyO1apMpexDidqag7kYeKn969VdygpMILmw2uN6q xz6kkPCnYCvX2HiHWQ2LHed9uLfFAYlSLs1pWPbwCePI+xNbo3Z6HKzD9tzhAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUAVXJxxdPE1unG7zx1Sh35w/rEU4wHwYDVR0j BBgwFoAULVUBv6fX763+cenlxFvI05JAiHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JoOUNWbnVjWTdKV3N6REdGOFduMUVieDF5eWRxMm9Qcmd6aU52M1d4 NXkvMC8yRDU1MDFCRkE3RDdFRkFERkU3MUU5RTVDNDVCQzhEMzkyNDA4ODdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTUwMUJGQTdEN0VGQURG RTcxRTlFNUM0NUJDOEQzOTI0MDg4N0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiaDlDVm51Y1k3SldzekRHRjhXbjFFYngxeXlkcTJvUHJnemlOdjNXeDV5LzAv MzIzODMwMzQzYTM0MzIzNTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3 MzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARCUDANBgkqhkiG9w0BAQsFAAOCAQEAL53NG9Ch 1k12w/U/fi8NFxOtD9SnUh/9mgzy0jvZK+zF8Yj5CL8rKA7nm3B6EqvD66CsWyRB la+q6b4B5P19aq9ci/1tyKr5XbBXeHpC9ni3wrGv3p6EgSCxt33q0kujcVDTxv4w dMgUYLx21A3A20JzC+oSkz8uBxcX+4ifTX43U1Xy36v1moTz35KwnhSqaPW9CA7t xkjhay+t0wBJtPaNc++mem0MJ0GqeZp6kpHQhxNFi1WQoSQqeGI6Hxckm5sRKCrx atj4wZQmrcn1T+QRWoA+/c2fMvsyHK4li8BWzWfiIGhUCVP5054rqBNFeYi1gDrx lCk7rE6+e389Ng== -----END CERTIFICATE-----Generated at Mon Jan 26 04:27:22 2026 by rpki-client