This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33322d313238203d3e20323639353036.roa File: 323830343a363561383a3a2f33322d313238203d3e20323639353036.roa (raw, json) Hash identifier: isyo4AEyA0Vc1z7Fsg430vVLC8/9nb4ni11smIFDl6Y= Subject key identifier: BE:62:9B:2C:09:00:20:5C:FB:68:60:E9:AD:E2:CF:BE:0C:66:96:CF Certificate issuer: /CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E Certificate serial: 60B49B71B1C52ED7BA31D8E9085C28B99F9B0AE2 Authority key identifier: E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33322d313238203d3e20323639353036.roa Signing time: Sun 04 Jan 2026 02:59:50 +0000 ROA not before: Sun 04 Jan 2026 02:54:50 +0000 ROA not after: Sun 03 Jan 2027 02:59:50 +0000 asID: 269506 IP address blocks: 2804:65a8::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 09:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b4:9b:71:b1:c5:2e:d7:ba:31:d8:e9:08:5c:28:b9:9f:9b:0a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E Validity Not Before: Jan 4 02:54:50 2026 GMT Not After : Jan 3 02:59:50 2027 GMT Subject: CN=BE629B2C0900205CFB6860E9ADE2CFBE0C6696CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:7f:ca:61:03:b2:f7:72:5f:45:7e:66:2d: dd:8f:4e:0e:4e:48:71:03:34:15:c0:2f:11:68:1d: 53:07:05:2c:f8:ca:8f:0d:a5:a6:2b:60:e5:7e:d2: 7f:49:55:ef:dc:41:04:c6:77:cb:aa:92:19:33:c4: 91:87:06:05:f5:93:d0:1e:bc:01:b8:e4:c5:78:58: ac:00:44:aa:95:d8:8e:d1:29:31:8f:7b:02:d6:f5: c8:46:10:bd:46:29:e1:0c:f1:e3:be:82:0a:6f:89: d5:c9:79:c7:1b:86:fe:ff:6b:1e:27:65:37:e7:e7: 81:9a:7f:77:11:85:fc:d8:29:65:f6:fa:df:5c:2c: 18:21:c7:01:42:fa:0b:60:66:17:15:03:67:61:7a: e9:7a:07:6f:13:53:e9:50:78:22:20:2f:d7:2e:8f: 3f:52:30:42:73:e7:13:68:97:1f:d9:18:31:89:b4: 58:5f:9b:89:5e:90:71:97:0a:40:d2:74:66:7c:6b: c5:f5:2f:06:b6:86:37:17:89:eb:f0:75:ca:65:ba: c4:8f:8f:4b:d0:4c:85:88:26:42:3b:56:9a:b8:62: 68:c1:dc:5c:b1:28:5e:ef:d7:95:63:f6:4d:e8:e1: 69:5f:e1:51:e5:1a:6c:ed:dc:2a:be:bb:08:9e:2c: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:62:9B:2C:09:00:20:5C:FB:68:60:E9:AD:E2:CF:BE:0C:66:96:CF X509v3 Authority Key Identifier: keyid:E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33322d313238203d3e20323639353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:65a8::/32 Signature Algorithm: sha256WithRSAEncryption 14:23:fa:22:1c:ad:85:ae:d8:c1:bc:5d:1d:6e:59:9f:d3:8e: bc:9a:d7:90:4b:f9:a4:88:29:5d:44:57:0c:a5:04:c0:88:f6: d4:d3:29:f5:d0:12:2e:e0:3a:6c:94:0a:cd:8f:a5:dd:fe:e1: 19:09:0c:f6:61:81:72:50:77:0e:91:15:f0:b7:c5:9a:0e:ba: 70:8f:da:e5:6a:e3:52:de:9a:34:1f:5d:f7:e1:c0:b7:c8:9a: 88:c8:f1:eb:b9:25:93:0b:4f:1a:39:d0:02:18:78:64:33:95: 9d:c3:16:5b:10:db:d2:5f:09:71:c8:0a:90:d6:6f:6d:ef:49: 11:6d:eb:45:3d:5c:1f:0f:d8:bd:e3:b8:3e:d8:06:a2:ff:66: 9a:16:a5:e0:c7:a8:37:7e:e2:73:4d:7a:0e:e4:bd:91:9f:14: bf:d0:47:38:2c:c7:1d:37:5c:6c:a9:e1:cc:1a:70:8d:09:23: e1:8c:e2:70:d4:9b:8a:b2:02:70:79:3d:f4:be:58:8e:d8:8a: 2c:0d:68:f5:33:71:8e:82:2d:d8:eb:e0:e0:20:f7:39:84:d6: b7:71:dd:e5:fb:c0:10:ab:26:5b:8b:6a:61:e8:4b:24:fe:95: 9a:d1:1f:5c:85:c6:46:0f:5f:af:1f:ec:e4:36:49:f7:75:0b: 0e:2f:01:37 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUYLSbcbHFLte6MdjpCFwouZ+bCuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUyQ0ZERDc5QUJCNEI5QjI2QThBQUMzODQ2Qzk2MzI2 QTAzRUUwRTAeFw0yNjAxMDQwMjU0NTBaFw0yNzAxMDMwMjU5NTBaMDMxMTAvBgNV BAMTKEJFNjI5QjJDMDkwMDIwNUNGQjY4NjBFOUFERTJDRkJFMEM2Njk2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxg3/KYQOy93JfRX5mLd2PTg5O SHEDNBXALxFoHVMHBSz4yo8NpaYrYOV+0n9JVe/cQQTGd8uqkhkzxJGHBgX1k9Ae vAG45MV4WKwARKqV2I7RKTGPewLW9chGEL1GKeEM8eO+ggpvidXJeccbhv7/ax4n ZTfn54Gaf3cRhfzYKWX2+t9cLBghxwFC+gtgZhcVA2dheul6B28TU+lQeCIgL9cu jz9SMEJz5xNolx/ZGDGJtFhfm4lekHGXCkDSdGZ8a8X1Lwa2hjcXievwdcplusSP j0vQTIWIJkI7Vpq4YmjB3FyxKF7v15Vj9k3o4Wlf4VHlGmzt3Cq+uwieLO/HAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUvmKbLAkAIFz7aGDpreLPvgxmls8wHwYDVR0j BBgwFoAU5Sz915q7S5smqKrDhGyWMmoD7g4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEg1dG1kRmVDVmJ0UzQxR2E4bk5ucncxNVRyQU5vRDZrWFFUZThxNDJK TEsvMC9FNTJDRkRENzlBQkI0QjlCMjZBOEFBQzM4NDZDOTYzMjZBMDNFRTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MkNGREQ3OUFCQjRCOUIy NkE4QUFDMzg0NkM5NjMyNkEwM0VFMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhINXRtZEZlQ1ZidFM0MUdhOG5ObnJ3MTVUckFOb0Q2a1hRVGU4cTQySkxLLzAv MzIzODMwMzQzYTM2MzU2MTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzkzNTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBGWoMA0GCSqGSIb3DQEBCwUAA4IBAQAUI/oi HK2FrtjBvF0dblmf0468mteQS/mkiCldRFcMpQTAiPbU0yn10BIu4DpslArNj6Xd /uEZCQz2YYFyUHcOkRXwt8WaDrpwj9rlauNS3po0H1334cC3yJqIyPHruSWTC08a OdACGHhkM5WdwxZbENvSXwlxyAqQ1m9t70kRbetFPVwfD9i947g+2Aai/2aaFqXg x6g3fuJzTXoO5L2RnxS/0Ec4LMcdN1xsqeHMGnCNCSPhjOJw1JuKsgJweT30vliO 2IosDWj1M3GOgi3Y6+DgIPc5hNa3cd3l+8AQqyZbi2ph6Esk/pWa0R9chcZGD1+v H+zkNkn3dQsOLwE3 -----END CERTIFICATE-----Generated at Sun Jan 25 21:32:06 2026 by rpki-client