This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3a2f33322d3434203d3e20323632333734.roa File: 323830343a3837383a3a2f33322d3434203d3e20323632333734.roa (raw, json) Hash identifier: xAQQ+ie4RFRjlCo0mxXKoDr+bhx/CaXOh7XiZsk9UFU= Subject key identifier: 6D:AB:C9:C1:97:23:4E:FA:CB:F4:96:1D:15:77:41:29:B4:9B:F1:C2 Certificate issuer: /CN=63D4C65E48A39E7890002AD13B94416CFD8B9DC6 Certificate serial: 4F95EDDCFA77FA846EDE3C144E89E433B7CE48A8 Authority key identifier: 63:D4:C6:5E:48:A3:9E:78:90:00:2A:D1:3B:94:41:6C:FD:8B:9D:C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3a2f33322d3434203d3e20323632333734.roa Signing time: Tue 06 Jan 2026 17:02:01 +0000 ROA not before: Tue 06 Jan 2026 16:57:01 +0000 ROA not after: Tue 05 Jan 2027 17:02:01 +0000 asID: 262374 IP address blocks: 2804:878::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.crl rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 00:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:95:ed:dc:fa:77:fa:84:6e:de:3c:14:4e:89:e4:33:b7:ce:48:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63D4C65E48A39E7890002AD13B94416CFD8B9DC6 Validity Not Before: Jan 6 16:57:01 2026 GMT Not After : Jan 5 17:02:01 2027 GMT Subject: CN=6DABC9C197234EFACBF4961D15774129B49BF1C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:b5:5a:71:1d:55:9f:ba:fd:27:2b:ad:5c: 39:f1:bd:80:16:38:e6:99:11:8b:e1:c8:fe:f5:82: 85:4c:f0:a5:fc:bf:d6:00:d0:ed:dc:be:88:cd:ca: 29:7c:15:49:cf:e1:6d:8a:25:04:7d:05:48:d4:58: fc:31:40:58:ac:6b:55:5a:7a:65:9f:b4:19:2f:dd: 14:d5:d3:74:0a:89:33:aa:8c:ff:38:e7:42:15:8e: 60:88:41:a1:dc:06:a9:22:5e:b8:a6:c1:aa:ef:09: d7:fb:e7:15:20:bf:01:97:44:16:06:88:6a:8c:87: 24:0d:78:48:af:94:ca:8f:58:8f:6c:a1:64:9c:96: c8:fd:b8:a4:a3:a1:48:45:9c:52:87:50:59:d8:eb: d8:67:ff:dc:49:e4:3d:00:fa:02:82:74:38:dd:82: 5f:dc:93:4b:ea:0d:40:d6:0d:9d:0e:68:0b:23:dc: 6e:7d:16:73:c6:2d:91:5c:62:c1:0a:49:95:91:1a: 22:35:d3:d2:b0:5d:60:20:4b:14:04:d5:8a:3c:a8: 92:c1:d2:0e:6e:df:72:a8:83:17:07:39:99:ba:86: 9e:92:cc:3d:43:86:43:8e:68:91:e9:38:49:8c:2e: a6:73:2c:46:8d:04:72:21:3a:17:94:5d:44:44:06: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AB:C9:C1:97:23:4E:FA:CB:F4:96:1D:15:77:41:29:B4:9B:F1:C2 X509v3 Authority Key Identifier: keyid:63:D4:C6:5E:48:A3:9E:78:90:00:2A:D1:3B:94:41:6C:FD:8B:9D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3a2f33322d3434203d3e20323632333734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:878::/32 Signature Algorithm: sha256WithRSAEncryption 51:8b:8f:47:4f:55:64:33:b6:75:5a:64:e2:c7:69:7a:6d:8e: 63:d7:48:f0:7e:0e:2d:dc:04:c7:29:bd:d3:df:3f:a1:ad:24: e9:fc:77:f4:13:d5:4d:b8:2a:8f:fb:2b:ad:8c:14:b8:d9:c4: da:41:b1:7e:03:d9:af:a6:18:a3:d3:84:37:84:9a:31:91:c3: 66:d7:49:73:d1:7c:17:e4:ce:44:6a:9b:18:55:a5:21:f7:b5: b2:ac:f5:fc:15:e6:8f:79:f4:f8:b3:33:ea:1b:5e:92:32:70: 80:c3:b9:39:10:fc:45:ac:8d:42:cf:ad:02:d8:fc:04:b5:36: b5:25:6e:a5:80:74:36:59:27:65:18:5c:84:8d:9c:de:3c:b6: 31:1a:f5:3d:af:58:b6:4a:f8:3e:ef:11:65:d0:29:53:40:83: c4:5c:24:2c:41:e7:31:ad:78:be:eb:52:3b:ec:e1:58:e3:4d: 11:86:41:7b:d5:db:d1:8f:2f:27:7c:01:ab:a6:60:03:d2:01: d8:93:45:4c:ca:6f:2d:9c:b9:d3:e2:57:86:de:4f:3c:74:c1: a8:7c:6e:bf:b2:ce:f1:f2:bd:bc:a2:d2:af:f5:50:65:33:9a: 2d:a4:f3:1a:de:9a:2c:5f:52:1d:c1:5a:0e:1a:4c:ab:21:24: 8b:27:96:53 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUT5Xt3Pp3+oRu3jwUTonkM7fOSKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNENEM2NUU0OEEzOUU3ODkwMDAyQUQxM0I5NDQxNkNG RDhCOURDNjAeFw0yNjAxMDYxNjU3MDFaFw0yNzAxMDUxNzAyMDFaMDMxMTAvBgNV BAMTKDZEQUJDOUMxOTcyMzRFRkFDQkY0OTYxRDE1Nzc0MTI5QjQ5QkYxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWbVacR1Vn7r9JyutXDnxvYAW OOaZEYvhyP71goVM8KX8v9YA0O3cvojNyil8FUnP4W2KJQR9BUjUWPwxQFisa1Va emWftBkv3RTV03QKiTOqjP8450IVjmCIQaHcBqkiXrimwarvCdf75xUgvwGXRBYG iGqMhyQNeEivlMqPWI9soWSclsj9uKSjoUhFnFKHUFnY69hn/9xJ5D0A+gKCdDjd gl/ck0vqDUDWDZ0OaAsj3G59FnPGLZFcYsEKSZWRGiI109KwXWAgSxQE1Yo8qJLB 0g5u33KogxcHOZm6hp6SzD1DhkOOaJHpOEmMLqZzLEaNBHIhOheUXUREBuFHAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUbavJwZcjTvrL9JYdFXdBKbSb8cIwHwYDVR0j BBgwFoAUY9TGXkijnniQACrRO5RBbP2LncYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGVraDVOd0pySmk4OWNLWTlvS3g0YVVLMXNoTFVCazk5ZE53RUh6N1c1 Sm4vMC82M0Q0QzY1RTQ4QTM5RTc4OTAwMDJBRDEzQjk0NDE2Q0ZEOEI5REM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzRDRDNjVFNDhBMzlFNzg5 MDAwMkFEMTNCOTQ0MTZDRkQ4QjlEQzYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzhla2g1TndKckppODljS1k5b0t4NGFVSzFzaExVQms5OWROd0VIejdXNUpuLzAv MzIzODMwMzQzYTM4MzczODNhM2EyZjMzMzIyZDM0MzQyMDNkM2UyMDMyMzYzMjMz MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgECHgwDQYJKoZIhvcNAQELBQADggEBAFGLj0dPVWQz tnVaZOLHaXptjmPXSPB+Di3cBMcpvdPfP6GtJOn8d/QT1U24Ko/7K62MFLjZxNpB sX4D2a+mGKPThDeEmjGRw2bXSXPRfBfkzkRqmxhVpSH3tbKs9fwV5o959PizM+ob XpIycIDDuTkQ/EWsjULPrQLY/AS1NrUlbqWAdDZZJ2UYXISNnN48tjEa9T2vWLZK +D7vEWXQKVNAg8RcJCxB5zGteL7rUjvs4VjjTRGGQXvV29GPLyd8AaumYAPSAdiT RUzKby2cudPiV4beTzx0wah8br+yzvHyvbyi0q/1UGUzmi2k8xremixfUh3BWg4a TKshJIsnllM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:26:07 2026 by rpki-client