This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa File: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (raw, json) Hash identifier: dDsxwhFcl6PE21AzfgDizXZulzqHwHruSt9cpCA6uek= Subject key identifier: D7:22:13:4C:F4:D1:F6:6E:7E:E1:5A:B1:66:6C:EB:EB:BC:8B:30:AF Certificate issuer: /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Certificate serial: 2853B9DD397D810DDC7BF785F0AD6C569AC0E946 Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa Signing time: Sun 25 Jan 2026 02:00:00 +0000 ROA not before: Sun 25 Jan 2026 01:55:00 +0000 ROA not after: Sun 24 Jan 2027 02:00:00 +0000 asID: 264126 IP address blocks: 2804:22d8:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 03:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:53:b9:dd:39:7d:81:0d:dc:7b:f7:85:f0:ad:6c:56:9a:c0:e9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Validity Not Before: Jan 25 01:55:00 2026 GMT Not After : Jan 24 02:00:00 2027 GMT Subject: CN=D722134CF4D1F66E7EE15AB1666CEBEBBC8B30AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:f1:75:dc:44:90:cc:36:91:04:00:0d:8a: 6f:41:d4:25:8b:7e:7e:97:aa:b0:a0:23:9b:fd:9f: 3b:20:79:d6:16:56:45:f4:83:c1:ec:88:c1:80:26: 10:9c:f7:d1:28:e3:5c:56:7e:b0:66:96:a1:d9:39: 5a:05:2a:71:c7:9b:1c:a6:fb:ca:c4:8f:ce:ad:54: d3:46:95:a1:f0:7a:ad:87:8d:bd:f6:b0:ad:ed:ca: db:3a:e9:a6:3f:92:a7:9a:a2:9b:40:32:a9:0b:74: fc:b8:b1:06:1c:13:74:e8:08:8c:51:00:a8:b8:2e: 53:a2:bb:ac:ff:17:2c:38:cb:6c:8c:05:13:d5:3c: cc:ba:45:69:b0:54:95:f5:97:b9:de:b5:e6:19:62: 04:a3:1e:77:e9:98:ec:08:34:8e:9b:5b:aa:ec:b7: e3:03:5a:28:56:ae:bf:a3:a0:08:96:7a:19:50:80: eb:75:ef:f0:82:3b:0f:08:5c:6b:8f:77:1b:79:d5: 07:62:c6:ad:3d:ef:0d:01:05:53:f1:e4:bd:cb:38: 57:c4:42:28:91:a2:2b:f2:1e:32:74:4c:4e:4f:fc: 0e:5c:ab:09:af:20:17:46:d1:0f:70:fe:7e:fe:ef: d0:94:f4:7b:b6:dc:b6:27:d3:08:e8:c2:01:47:4d: 44:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:22:13:4C:F4:D1:F6:6E:7E:E1:5A:B1:66:6C:EB:EB:BC:8B:30:AF X509v3 Authority Key Identifier: keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22d8:8100::/40 Signature Algorithm: sha256WithRSAEncryption 45:b1:5c:c3:f8:29:46:6c:36:30:2c:63:98:a5:a0:50:82:6c: c6:b5:d9:4f:d5:f5:46:1c:8f:8b:4c:31:2c:69:61:c8:40:ec: b4:fe:01:e7:fc:97:39:ef:45:5a:b0:b4:ff:63:a2:a7:40:6a: c7:ff:f0:19:6b:54:3c:7f:db:39:05:4b:92:e6:21:76:16:83: 94:19:2b:58:31:c8:79:d4:c7:dc:7b:06:26:4c:36:47:00:a3: 41:1a:91:98:e8:06:73:bd:f1:5b:b1:84:11:ef:e8:b7:50:02: c3:17:4c:4a:34:eb:99:fd:93:dc:e5:cc:db:5c:61:e9:a4:18: 35:e4:fc:23:49:91:a1:ea:e3:8f:7b:f5:ed:e4:48:93:e7:89: e2:15:ce:84:e8:1d:30:34:5c:36:58:be:42:0c:b7:90:3f:fc: e3:76:46:2b:89:ef:1c:3b:0f:76:64:c0:01:77:a7:19:2a:63: 89:63:59:3a:0e:06:fe:d0:80:e6:ff:3f:a0:5a:31:dc:1f:9d: f7:d1:01:37:f4:b0:01:1c:0b:9e:37:ea:1c:a9:c1:7c:c4:ea: 4c:16:db:a3:0e:ad:15:c9:b0:be:de:12:dc:c7:e0:3c:9e:49: bc:99:d9:fd:ed:74:e0:42:54:b2:cc:d6:4a:7b:07:74:e2:cc: 89:68:0a:f6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUKFO53Tl9gQ3ce/eF8K1sVprA6UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMUZCODVCNUE4MjRDRTFGMTJFOTlEODQ5NDNDMjgx MjMzOEQ5QzAeFw0yNjAxMjUwMTU1MDBaFw0yNzAxMjQwMjAwMDBaMDMxMTAvBgNV BAMTKEQ3MjIxMzRDRjREMUY2NkU3RUUxNUFCMTY2NkNFQkVCQkM4QjMwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzcvF13ESQzDaRBAANim9B1CWL fn6XqrCgI5v9nzsgedYWVkX0g8HsiMGAJhCc99Eo41xWfrBmlqHZOVoFKnHHmxym +8rEj86tVNNGlaHweq2Hjb32sK3tyts66aY/kqeaoptAMqkLdPy4sQYcE3ToCIxR AKi4LlOiu6z/Fyw4y2yMBRPVPMy6RWmwVJX1l7neteYZYgSjHnfpmOwINI6bW6rs t+MDWihWrr+joAiWehlQgOt17/CCOw8IXGuPdxt51Qdixq097w0BBVPx5L3LOFfE QiiRoivyHjJ0TE5P/A5cqwmvIBdG0Q9w/n7+79CU9Hu23LYn0wjowgFHTUS3AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU1yITTPTR9m5+4VqxZmzr67yLMK8wHwYDVR0j BBgwFoAUK7H7hbWoJM4fEumdhJQ8KBIzjZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW azkvMS8yQkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjFGQjg1QjVBODI0Q0Ux RjEyRTk5RDg0OTQzQzI4MTIzMzhEOUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRIQTJoY0c0ZUF1WERHQlBhWXR0S2hjdEZndndid0Y1UEdNNUQyVVJ4Vms5LzEv MzIzODMwMzQzYTMyMzI2NDM4M2EzODMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNDMxMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEItiBMA0GCSqGSIb3DQEBCwUA A4IBAQBFsVzD+ClGbDYwLGOYpaBQgmzGtdlP1fVGHI+LTDEsaWHIQOy0/gHn/Jc5 70VasLT/Y6KnQGrH//AZa1Q8f9s5BUuS5iF2FoOUGStYMch51MfcewYmTDZHAKNB GpGY6AZzvfFbsYQR7+i3UALDF0xKNOuZ/ZPc5czbXGHppBg15PwjSZGh6uOPe/Xt 5EiT54niFc6E6B0wNFw2WL5CDLeQP/zjdkYrie8cOw92ZMABd6cZKmOJY1k6Dgb+ 0IDm/z+gWjHcH5330QE39LABHAueN+ocqcF8xOpMFtujDq0VybC+3hLcx+A8nkm8 mdn97XTgQlSyzNZKewd04syJaAr2 -----END CERTIFICATE-----Generated at Sun Jan 25 20:14:20 2026 by rpki-client