This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/323830343a333430383a3a2f33322d313238203d3e20323635343332.roa File: 323830343a333430383a3a2f33322d313238203d3e20323635343332.roa (raw, json) Hash identifier: z9EmqTntC48ZpR2ElyQgOuTAzYri5BNOm+6rB9SSKsQ= Subject key identifier: 0F:CE:BF:FE:FA:E8:66:AA:95:ED:36:55:EF:16:49:63:BD:D0:0C:FE Certificate issuer: /CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C Certificate serial: 6649A8B1FAEEBAFC0BE24C530E0CD424EDD06D5F Authority key identifier: 2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/323830343a333430383a3a2f33322d313238203d3e20323635343332.roa Signing time: Mon 05 Jan 2026 14:42:27 +0000 ROA not before: Mon 05 Jan 2026 14:37:27 +0000 ROA not after: Mon 04 Jan 2027 14:42:27 +0000 asID: 265432 IP address blocks: 2804:3408::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 17:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:49:a8:b1:fa:ee:ba:fc:0b:e2:4c:53:0e:0c:d4:24:ed:d0:6d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C Validity Not Before: Jan 5 14:37:27 2026 GMT Not After : Jan 4 14:42:27 2027 GMT Subject: CN=0FCEBFFEFAE866AA95ED3655EF164963BDD00CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:d4:be:f3:e2:b7:db:f1:a2:fa:7e:8c:f7: 01:5c:22:de:6c:fc:1e:a7:08:fb:f8:d9:b8:80:4b: e1:86:0b:ee:16:89:c8:41:fb:b3:23:34:45:03:57: 9a:2e:87:0e:b9:95:d5:81:89:1b:91:59:5e:af:eb: 68:b6:54:e3:28:83:a5:8c:5c:00:26:ec:8c:37:23: c9:0b:c9:1d:39:69:0a:60:2e:eb:e2:7b:3d:92:bd: 35:2f:41:af:6f:09:f0:a0:18:59:63:3f:74:fe:e4: 45:f8:82:9e:d1:5a:85:0e:88:73:92:bf:6b:76:30: c8:66:bc:b8:9d:9c:43:ee:3c:3f:90:32:64:e3:59: b5:2c:bd:db:7e:87:20:c9:42:1f:7a:f4:e3:82:13: e0:44:da:87:ae:00:30:f5:b0:ae:89:de:bb:43:73: 36:e0:39:15:d2:98:06:2d:3e:ca:a2:7e:0e:de:ab: 5b:9a:dc:ed:51:b0:91:72:34:2e:73:8c:79:01:c3: bb:21:e1:90:42:88:e5:ef:c4:40:8b:e0:66:a6:00: 98:d4:d8:7f:6f:e3:f1:2e:9f:15:95:f0:e3:a3:52: 96:4c:a7:36:9b:18:2c:8e:ce:d7:7c:aa:aa:58:bf: 5b:28:fb:b1:95:e8:2d:fe:43:c8:2d:f5:26:54:79: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CE:BF:FE:FA:E8:66:AA:95:ED:36:55:EF:16:49:63:BD:D0:0C:FE X509v3 Authority Key Identifier: keyid:2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/323830343a333430383a3a2f33322d313238203d3e20323635343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3408::/32 Signature Algorithm: sha256WithRSAEncryption 1f:99:45:5e:2e:26:cd:ab:31:5b:e8:f1:02:1a:74:9e:b7:df: b2:f5:9f:c1:6a:42:4f:d6:ae:9f:f7:37:5e:fd:49:81:7f:1d: 01:99:3d:f0:93:be:69:33:3e:10:d6:d4:82:aa:8a:24:54:89: cb:f5:d7:fd:26:bc:bc:ce:eb:13:c8:cc:5e:80:c3:a9:a0:b9: 0f:be:a5:a3:40:9c:52:c8:fb:2e:9c:0f:af:19:1b:ce:26:59: 66:8d:62:3d:5b:85:f9:f7:4b:c7:99:39:f4:be:fa:3c:8c:00: c1:14:1d:65:d3:8b:8c:d2:0d:1f:dc:b6:97:65:b3:46:20:82: 63:45:4d:63:87:6a:85:a5:29:91:4d:c6:aa:6c:01:4c:5d:db: 53:95:d0:a1:94:cf:d4:bf:b4:89:6c:50:e4:a5:ae:ed:b2:26: b2:d6:cd:aa:a1:38:01:55:16:31:ce:42:9c:7e:7b:76:63:af: 75:13:22:23:ae:00:7f:c9:64:86:b1:40:da:7d:17:40:b3:cc: c7:a3:56:9d:61:3e:80:ae:d5:3c:99:b6:b2:ac:e5:7c:3d:ae: b6:8b:1a:21:af:6b:d0:33:d9:71:75:12:df:65:5b:38:b1:06: 6b:f6:0e:55:a8:c0:d7:5b:0a:51:64:0c:28:a4:29:94:e2:dc: 26:03:17:29 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUZkmosfruuvwL4kxTDgzUJO3QbV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGNkU4Mzk4NzgxQTQ1MjMxRTIxNjZGQkJFNEQxQzAw QkVFQUQ5QzAeFw0yNjAxMDUxNDM3MjdaFw0yNzAxMDQxNDQyMjdaMDMxMTAvBgNV BAMTKDBGQ0VCRkZFRkFFODY2QUE5NUVEMzY1NUVGMTY0OTYzQkREMDBDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvtS+8+K32/Gi+n6M9wFcIt5s /B6nCPv42biAS+GGC+4WichB+7MjNEUDV5ouhw65ldWBiRuRWV6v62i2VOMog6WM XAAm7Iw3I8kLyR05aQpgLuviez2SvTUvQa9vCfCgGFljP3T+5EX4gp7RWoUOiHOS v2t2MMhmvLidnEPuPD+QMmTjWbUsvdt+hyDJQh969OOCE+BE2oeuADD1sK6J3rtD czbgORXSmAYtPsqifg7eq1ua3O1RsJFyNC5zjHkBw7sh4ZBCiOXvxECL4GamAJjU 2H9v4/EunxWV8OOjUpZMpzabGCyOztd8qqpYv1so+7GV6C3+Q8gt9SZUeZPPAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUD86//vroZqqV7TZV7xZJY73QDP4wHwYDVR0j BBgwFoAULPboOYeBpFIx4hZvu+TRwAvurZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVKWUNwMWlrRk1rc1V5ZnFGbzRrb0RWYVZqU3Q3c1FwdTVYQVc3V1lL UkMvMC8yQ0Y2RTgzOTg3ODFBNDUyMzFFMjE2NkZCQkU0RDFDMDBCRUVBRDlDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDRjZFODM5ODc4MUE0NTIz MUUyMTY2RkJCRTREMUMwMEJFRUFEOUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzh1SllDcDFpa0ZNa3NVeWZxRm80a29EVmFWalN0N3NRcHU1WEFXN1dZS1JDLzAv MzIzODMwMzQzYTMzMzQzMDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzUzNDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBDQIMA0GCSqGSIb3DQEBCwUAA4IBAQAfmUVe LibNqzFb6PECGnSet9+y9Z/BakJP1q6f9zde/UmBfx0BmT3wk75pMz4Q1tSCqook VInL9df9Jry8zusTyMxegMOpoLkPvqWjQJxSyPsunA+vGRvOJllmjWI9W4X590vH mTn0vvo8jADBFB1l04uM0g0f3LaXZbNGIIJjRU1jh2qFpSmRTcaqbAFMXdtTldCh lM/Uv7SJbFDkpa7tsiay1s2qoTgBVRYxzkKcfnt2Y691EyIjrgB/yWSGsUDafRdA s8zHo1adYT6ArtU8mbayrOV8Pa62ixohr2vQM9lxdRLfZVs4sQZr9g5VqMDXWwpR ZAwopCmU4twmAxcp -----END CERTIFICATE-----Generated at Mon Jan 26 06:04:01 2026 by rpki-client