This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a3a2f33322d3438203d3e203238323032.roa File: 323830343a3837633a3a2f33322d3438203d3e203238323032.roa (raw, json) Hash identifier: uRcxByPgGpwdCQGFQHYI2KZfqYf7YrK201gbhCKWSo0= Subject key identifier: EA:27:D0:31:A9:4B:B4:DA:7F:80:B6:53:44:CC:53:56:20:9F:CF:2C Certificate issuer: /CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2 Certificate serial: 321C85C8753452DE27C589949820603E211F82FF Authority key identifier: E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a3a2f33322d3438203d3e203238323032.roa Signing time: Mon 29 Dec 2025 17:40:43 +0000 ROA not before: Mon 29 Dec 2025 17:35:43 +0000 ROA not after: Mon 28 Dec 2026 17:40:43 +0000 asID: 28202 IP address blocks: 2804:87c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 18:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1c:85:c8:75:34:52:de:27:c5:89:94:98:20:60:3e:21:1f:82:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2 Validity Not Before: Dec 29 17:35:43 2025 GMT Not After : Dec 28 17:40:43 2026 GMT Subject: CN=EA27D031A94BB4DA7F80B65344CC5356209FCF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3b:b4:b5:65:27:8a:19:33:d3:db:ca:af:2a: 84:1e:94:11:18:5f:02:91:60:d0:08:2d:7b:2e:99: 7f:4b:78:3b:da:6f:e6:3c:ba:9c:1e:3b:c0:e4:32: d7:65:f0:b8:25:77:dd:10:3e:45:e9:06:46:cf:28: 0a:a3:18:cb:70:ca:6d:95:2e:e8:4e:f6:25:dc:6c: 06:fd:50:37:57:69:78:c2:7e:dd:db:9c:b6:85:db: a9:9f:02:32:1f:16:ef:2c:dd:46:09:c1:4f:d2:74: fb:c7:db:35:94:58:fa:8d:ee:6c:21:f0:0e:bf:9a: f1:2a:a9:ec:9e:9e:01:d0:2a:c8:6a:bb:e2:04:fb: 18:61:b9:0d:ca:45:fb:05:cf:25:16:2c:2a:67:d1: 0c:ee:4f:09:0f:84:46:4e:f1:c9:19:40:b1:9d:ad: 71:a4:da:eb:af:45:40:c1:3a:13:d6:0b:3d:cc:42: 96:e3:7b:52:11:97:d3:3a:55:b9:5e:44:ad:fb:0d: 00:84:42:aa:86:8a:b7:9c:66:91:d8:70:dc:74:8d: 58:6b:06:de:89:a5:2a:d1:17:74:0b:44:5d:6b:e3: 48:5f:fd:33:41:30:15:de:9b:2c:13:36:92:60:ad: c7:b3:3c:2a:0c:17:f2:9b:67:43:b7:bd:65:93:cf: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:27:D0:31:A9:4B:B4:DA:7F:80:B6:53:44:CC:53:56:20:9F:CF:2C X509v3 Authority Key Identifier: keyid:E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a3a2f33322d3438203d3e203238323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:87c::/32 Signature Algorithm: sha256WithRSAEncryption 6f:32:eb:4a:12:26:80:df:d5:84:4f:ec:f7:ae:ca:54:ed:90: 38:b5:1c:3d:6c:c7:de:79:bb:55:4d:15:f3:43:7a:7e:22:27: 9c:ef:f7:23:da:ef:29:55:02:d6:51:9b:74:9d:a3:0b:8e:53: 86:83:27:bf:8d:45:06:55:c4:bc:de:01:12:ac:3e:14:b3:44: a5:61:85:07:13:1b:47:4e:a2:cb:52:2e:39:8c:f2:12:11:70: 05:f7:36:a8:03:eb:82:2f:60:f2:1e:43:02:e9:bd:f7:62:92: d6:6a:3c:32:b6:8b:4b:68:94:dc:72:69:04:65:56:34:ee:54: 17:b1:81:ff:47:62:74:c2:0f:be:9c:3d:1d:aa:de:d7:f1:42: 60:a1:d7:0f:26:62:92:1c:c1:70:b7:aa:31:83:66:58:a6:a4: 7b:ae:7c:d9:4a:2f:b9:7c:e3:8e:38:9d:68:92:39:e3:86:af: b8:4d:0d:e0:18:9d:d1:15:65:bf:15:05:37:00:64:67:55:ab: 1b:78:f0:92:17:b6:f9:65:08:c7:f8:7d:7d:b9:57:7f:f4:75: c0:32:b5:a6:7e:be:d0:da:0f:e3:7c:97:bf:db:dd:ee:b3:5a: b1:ff:94:a2:a6:4e:bc:58:8e:9c:7a:f2:09:e1:55:fd:55:46: 05:6e:fb:50 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUMhyFyHU0Ut4nxYmUmCBgPiEfgv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ1NEFERTMwMDVCNENFNjNFM0EyOUEzOTdDQTIyMzVE NTQ4MjFFMjAeFw0yNTEyMjkxNzM1NDNaFw0yNjEyMjgxNzQwNDNaMDMxMTAvBgNV BAMTKEVBMjdEMDMxQTk0QkI0REE3RjgwQjY1MzQ0Q0M1MzU2MjA5RkNGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgO7S1ZSeKGTPT28qvKoQelBEY XwKRYNAILXsumX9LeDvab+Y8upweO8DkMtdl8Lgld90QPkXpBkbPKAqjGMtwym2V LuhO9iXcbAb9UDdXaXjCft3bnLaF26mfAjIfFu8s3UYJwU/SdPvH2zWUWPqN7mwh 8A6/mvEqqeyengHQKshqu+IE+xhhuQ3KRfsFzyUWLCpn0QzuTwkPhEZO8ckZQLGd rXGk2uuvRUDBOhPWCz3MQpbje1IRl9M6VbleRK37DQCEQqqGirecZpHYcNx0jVhr Bt6JpSrRF3QLRF1r40hf/TNBMBXemywTNpJgrcezPCoMF/KbZ0O3vWWTzxE7AgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU6ifQMalLtNp/gLZTRMxTViCfzywwHwYDVR0j BBgwFoAU5FSt4wBbTOY+Oimjl8oiNdVIIeIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V V00vMC9FNDU0QURFMzAwNUI0Q0U2M0UzQTI5QTM5N0NBMjIzNUQ1NDgyMUUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0NTRBREUzMDA1QjRDRTYz RTNBMjlBMzk3Q0EyMjM1RDU0ODIxRTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAv MzIzODMwMzQzYTM4Mzc2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMjMw MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBAh8MA0GCSqGSIb3DQEBCwUAA4IBAQBvMutKEiaA39WE T+z3rspU7ZA4tRw9bMfeebtVTRXzQ3p+Iiec7/cj2u8pVQLWUZt0naMLjlOGgye/ jUUGVcS83gESrD4Us0SlYYUHExtHTqLLUi45jPISEXAF9zaoA+uCL2DyHkMC6b33 YpLWajwytotLaJTccmkEZVY07lQXsYH/R2J0wg++nD0dqt7X8UJgodcPJmKSHMFw t6oxg2ZYpqR7rnzZSi+5fOOOOJ1okjnjhq+4TQ3gGJ3RFWW/FQU3AGRnVasbePCS F7b5ZQjH+H19uVd/9HXAMrWmfr7Q2g/jfJe/293us1qx/5Sipk68WI6cevIJ4VX9 VUYFbvtQ -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:55 2026 by rpki-client