This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/323830343a393263633a3a2f33322d313238203d3e20323734373334.roa File: 323830343a393263633a3a2f33322d313238203d3e20323734373334.roa (raw, json) Hash identifier: D9TXsjmD30DVWRGtHSrPu9nnasYVml42ig3z9Ab9Yg8= Subject key identifier: E8:56:F3:47:82:4D:20:BB:7D:4E:F8:3F:70:BA:F6:40:7D:67:36:55 Certificate issuer: /CN=006590398F4D26A9E4F3110825291E8032AAF2BB Certificate serial: 2C9EE2E96A17A26DE8836E9346D83A217685291E Authority key identifier: 00:65:90:39:8F:4D:26:A9:E4:F3:11:08:25:29:1E:80:32:AA:F2:BB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/323830343a393263633a3a2f33322d313238203d3e20323734373334.roa Signing time: Mon 19 Jan 2026 19:53:00 +0000 ROA not before: Mon 19 Jan 2026 19:48:00 +0000 ROA not after: Mon 18 Jan 2027 19:53:00 +0000 asID: 274734 IP address blocks: 2804:92cc::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.crl rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 04:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9e:e2:e9:6a:17:a2:6d:e8:83:6e:93:46:d8:3a:21:76:85:29:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006590398F4D26A9E4F3110825291E8032AAF2BB Validity Not Before: Jan 19 19:48:00 2026 GMT Not After : Jan 18 19:53:00 2027 GMT Subject: CN=E856F347824D20BB7D4EF83F70BAF6407D673655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f8:c1:71:f2:73:1a:0c:21:3a:09:41:84:fd: be:06:d9:46:e0:2d:10:8c:32:68:7e:0f:b9:c9:43: b9:ad:ce:fb:8d:f9:6a:35:8e:ab:21:cc:ab:9d:6e: 2e:cf:9b:f8:1c:81:55:7f:cb:bf:0d:c9:6a:70:9b: bd:43:d4:1f:6b:26:49:08:73:ac:98:44:04:7e:80: 49:40:9f:10:24:39:5b:42:85:c1:2d:f3:31:ff:0b: ff:36:1b:c6:55:23:d6:dc:fd:dd:8d:6c:c2:25:e9: 13:e3:b6:02:5d:99:54:a6:bd:57:c4:ce:ba:d6:e9: 53:f2:2c:82:88:fd:d9:b1:49:23:7d:ce:32:89:9b: ee:de:dd:20:b2:e9:a1:42:8c:1f:f2:2b:c7:45:6e: 79:a9:15:0a:7c:b3:66:49:2f:48:4b:39:fe:79:76: 9f:2b:9b:ca:09:1e:3f:4a:46:b8:4b:5d:41:99:65: 33:50:38:2a:c2:55:9e:c3:af:32:6b:7a:8c:e6:94: b0:fc:64:a0:f1:c8:aa:ce:3b:4c:ac:ef:1f:f0:3b: 9e:5c:b0:22:6a:d7:24:26:50:1f:73:26:32:e4:25: 81:ab:eb:50:18:11:cf:5a:25:99:8e:ff:5e:e7:01: da:0f:f0:af:b2:53:36:a1:5d:36:35:4e:a5:42:00: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:F3:47:82:4D:20:BB:7D:4E:F8:3F:70:BA:F6:40:7D:67:36:55 X509v3 Authority Key Identifier: keyid:00:65:90:39:8F:4D:26:A9:E4:F3:11:08:25:29:1E:80:32:AA:F2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/323830343a393263633a3a2f33322d313238203d3e20323734373334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:92cc::/32 Signature Algorithm: sha256WithRSAEncryption 3f:8a:68:85:59:6b:42:85:20:4a:5b:ac:59:c3:aa:76:41:7c: c2:f0:8e:02:9d:e1:0e:bb:45:72:9f:54:94:ef:e4:71:1c:28: f5:67:4b:0a:7a:13:2c:71:f4:12:39:76:36:58:9b:a9:0e:3b: f8:7b:48:76:47:88:8e:71:61:93:88:86:a8:d8:ab:21:2c:37: 51:6a:10:ab:0c:b1:7b:9c:f0:37:c9:a2:ad:e7:d2:24:44:d9: 92:53:c0:27:f8:67:cd:4d:fe:c2:ba:63:27:be:3c:48:ba:28: 0b:0d:5f:6c:3b:21:2d:8e:50:91:f9:ac:f5:2b:02:df:a1:d4: a4:9e:fc:36:1f:31:2d:f9:cf:1d:8a:fd:79:de:72:a7:55:ad: e6:de:37:39:6b:af:d6:d1:13:10:74:47:6c:18:e3:d5:11:15: bd:6d:7c:e8:88:3d:b6:02:35:62:ac:b3:46:02:dc:a1:33:8b: 32:19:39:aa:02:ce:60:79:7b:83:f7:3a:ed:4c:21:50:f8:41: 93:d8:a7:fd:5d:3f:38:c2:85:05:bf:a8:eb:45:20:1d:99:31: a9:89:55:c1:8e:fa:f5:1b:6c:5c:73:0f:45:75:04:fd:ce:60: a4:e8:75:49:13:4d:b3:19:2a:43:4c:9d:b4:c3:e9:18:81:32: f2:a0:f1:57 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIULJ7i6WoXom3og26TRtg6IXaFKR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA2NTkwMzk4RjREMjZBOUU0RjMxMTA4MjUyOTFFODAz MkFBRjJCQjAeFw0yNjAxMTkxOTQ4MDBaFw0yNzAxMTgxOTUzMDBaMDMxMTAvBgNV BAMTKEU4NTZGMzQ3ODI0RDIwQkI3RDRFRjgzRjcwQkFGNjQwN0Q2NzM2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf+MFx8nMaDCE6CUGE/b4G2Ubg LRCMMmh+D7nJQ7mtzvuN+Wo1jqshzKudbi7Pm/gcgVV/y78NyWpwm71D1B9rJkkI c6yYRAR+gElAnxAkOVtChcEt8zH/C/82G8ZVI9bc/d2NbMIl6RPjtgJdmVSmvVfE zrrW6VPyLIKI/dmxSSN9zjKJm+7e3SCy6aFCjB/yK8dFbnmpFQp8s2ZJL0hLOf55 dp8rm8oJHj9KRrhLXUGZZTNQOCrCVZ7DrzJreozmlLD8ZKDxyKrOO0ys7x/wO55c sCJq1yQmUB9zJjLkJYGr61AYEc9aJZmO/17nAdoP8K+yUzahXTY1TqVCAEmbAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU6FbzR4JNILt9Tvg/cLr2QH1nNlUwHwYDVR0j BBgwFoAUAGWQOY9NJqnk8xEIJSkegDKq8rswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGd6RW44TlZrTnpZb1BqUHlTR2F5eDNMUTNyTjZSZGhSRFZLdkRFa0FR ODQvMC8wMDY1OTAzOThGNEQyNkE5RTRGMzExMDgyNTI5MUU4MDMyQUFGMkJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwNjU5MDM5OEY0RDI2QTlF NEYzMTEwODI1MjkxRTgwMzJBQUYyQkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhnekVuOE5Wa056WW9QalB5U0dheXgzTFEzck42UmRoUkRWS3ZERWtBUTg0LzAv MzIzODMwMzQzYTM5MzI2MzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzQzNzMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBJLMMA0GCSqGSIb3DQEBCwUAA4IBAQA/imiF WWtChSBKW6xZw6p2QXzC8I4CneEOu0Vyn1SU7+RxHCj1Z0sKehMscfQSOXY2WJup Djv4e0h2R4iOcWGTiIao2KshLDdRahCrDLF7nPA3yaKt59IkRNmSU8An+GfNTf7C umMnvjxIuigLDV9sOyEtjlCR+az1KwLfodSknvw2HzEt+c8div153nKnVa3m3jc5 a6/W0RMQdEdsGOPVERW9bXzoiD22AjVirLNGAtyhM4syGTmqAs5geXuD9zrtTCFQ +EGT2Kf9XT84woUFv6jrRSAdmTGpiVXBjvr1G2xccw9FdQT9zmCk6HVJE02zGSpD TJ20w+kYgTLyoPFX -----END CERTIFICATE-----Generated at Sun Jan 25 22:07:09 2026 by rpki-client