This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/323830343a366462303a3a2f33322d313238203d3e20323730353439.roa File: 323830343a366462303a3a2f33322d313238203d3e20323730353439.roa (raw, json) Hash identifier: tN8uHcGG4+T4Rnb2ZeiMRkh73RMhdJ6wWrk75KWkb04= Subject key identifier: 8E:8D:8D:47:21:DE:F7:D8:8C:10:8B:4D:48:F2:8A:1A:B1:FB:DA:89 Certificate issuer: /CN=A7B6E6F4B5F4533577A18C3F0C3C6569A3BBF07B Certificate serial: 402F3F929DC0925255613F17E505DF71D718559C Authority key identifier: A7:B6:E6:F4:B5:F4:53:35:77:A1:8C:3F:0C:3C:65:69:A3:BB:F0:7B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7B6E6F4B5F4533577A18C3F0C3C6569A3BBF07B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/323830343a366462303a3a2f33322d313238203d3e20323730353439.roa Signing time: Wed 21 Jan 2026 19:01:48 +0000 ROA not before: Wed 21 Jan 2026 18:56:48 +0000 ROA not after: Wed 20 Jan 2027 19:01:48 +0000 asID: 270549 IP address blocks: 2804:6db0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/A7B6E6F4B5F4533577A18C3F0C3C6569A3BBF07B.crl rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/A7B6E6F4B5F4533577A18C3F0C3C6569A3BBF07B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7B6E6F4B5F4533577A18C3F0C3C6569A3BBF07B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2f:3f:92:9d:c0:92:52:55:61:3f:17:e5:05:df:71:d7:18:55:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7B6E6F4B5F4533577A18C3F0C3C6569A3BBF07B Validity Not Before: Jan 21 18:56:48 2026 GMT Not After : Jan 20 19:01:48 2027 GMT Subject: CN=8E8D8D4721DEF7D88C108B4D48F28A1AB1FBDA89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:30:a6:65:12:4d:49:5f:c1:bd:81:fe:18: a5:0a:03:5c:28:d2:ee:c3:1e:0e:34:11:d4:1a:9c: 24:92:4f:f9:33:ab:c2:9b:75:21:fe:8c:39:07:71: ad:8c:d8:fd:15:43:22:e8:7b:97:d1:87:b1:0d:54: b2:59:3c:f5:17:9d:29:60:f1:2e:98:86:58:ac:2a: 80:a6:31:c0:5a:d7:75:c6:d5:97:2a:d4:c8:09:1e: d5:e3:4a:3b:15:c4:0e:76:e8:57:64:f4:a1:2b:6c: cd:cc:44:d5:51:cc:d8:94:bc:fe:3b:d1:c0:47:5f: 3b:53:79:c0:33:75:d2:93:eb:f9:9f:2e:78:b9:46: f3:62:5d:5e:45:16:d8:4f:b2:6e:46:35:0a:1d:b6: 1d:16:89:13:25:af:e9:ca:7e:47:1e:a7:01:b9:23: 49:eb:de:86:2d:a2:6a:6b:66:96:61:3d:69:19:4b: 80:7d:ab:ae:06:be:58:26:7b:79:d2:d4:fa:90:6d: 2c:28:31:70:44:c3:15:c4:fa:4f:d8:e1:ae:f6:eb: 25:59:80:26:35:5f:37:23:6e:2f:0e:66:bc:ea:0e: 25:25:86:f8:0c:30:93:db:06:2a:72:9d:4c:ad:c0: 48:82:e9:ef:f6:4b:77:99:b8:a7:41:69:3e:d3:7f: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:8D:47:21:DE:F7:D8:8C:10:8B:4D:48:F2:8A:1A:B1:FB:DA:89 X509v3 Authority Key Identifier: keyid:A7:B6:E6:F4:B5:F4:53:35:77:A1:8C:3F:0C:3C:65:69:A3:BB:F0:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/A7B6E6F4B5F4533577A18C3F0C3C6569A3BBF07B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7B6E6F4B5F4533577A18C3F0C3C6569A3BBF07B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/323830343a366462303a3a2f33322d313238203d3e20323730353439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6db0::/32 Signature Algorithm: sha256WithRSAEncryption 99:b0:35:5c:41:ab:2d:f9:4d:d8:36:7b:f5:a3:02:de:38:a6: 0c:81:97:cf:9a:f8:69:95:28:6b:8d:5c:ea:66:97:f0:b4:64: b6:7a:71:f9:6d:00:da:ef:6c:0f:3b:83:ed:70:43:05:e7:c3: 06:90:ee:8d:31:49:cd:c2:21:0d:26:54:3b:69:1e:fd:17:b4: ca:19:7a:39:51:48:60:4b:f3:52:58:86:fa:ac:dd:7d:cf:ea: 2e:29:ad:8e:db:ec:e5:a9:29:56:6a:b2:7a:02:52:62:84:16: b5:f2:94:99:55:2f:0e:48:41:89:a9:7b:26:77:e6:b5:25:cd: 69:1d:9b:81:00:43:b0:0c:e9:74:b4:0e:d1:fb:3a:23:ae:1d: 65:65:6a:e9:10:f3:b1:87:a3:55:1e:f4:5d:08:8a:a8:98:f3: c7:b8:3d:b4:f0:cb:73:60:43:aa:34:24:a5:fc:96:c0:c8:d3: 73:59:51:47:44:fd:f2:bc:9a:94:6f:9a:3d:af:19:48:ff:73: 1f:67:ce:4d:9b:34:fc:48:9a:31:b6:eb:fc:d3:63:14:d2:0b: 05:0a:0d:9a:50:a5:b4:e5:3a:56:90:50:59:3d:04:c5:24:76: 9c:bc:a7:65:69:3d:74:ee:81:f7:eb:d0:43:83:00:51:2f:cd: 23:03:98:2e -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUQC8/kp3AklJVYT8X5QXfcdcYVZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdCNkU2RjRCNUY0NTMzNTc3QTE4QzNGMEMzQzY1NjlB M0JCRjA3QjAeFw0yNjAxMjExODU2NDhaFw0yNzAxMjAxOTAxNDhaMDMxMTAvBgNV BAMTKDhFOEQ4RDQ3MjFERUY3RDg4QzEwOEI0RDQ4RjI4QTFBQjFGQkRBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWoDCmZRJNSV/BvYH+GKUKA1wo 0u7DHg40EdQanCSST/kzq8KbdSH+jDkHca2M2P0VQyLoe5fRh7ENVLJZPPUXnSlg 8S6YhlisKoCmMcBa13XG1Zcq1MgJHtXjSjsVxA526Fdk9KErbM3MRNVRzNiUvP47 0cBHXztTecAzddKT6/mfLni5RvNiXV5FFthPsm5GNQodth0WiRMlr+nKfkcepwG5 I0nr3oYtomprZpZhPWkZS4B9q64Gvlgme3nS1PqQbSwoMXBEwxXE+k/Y4a726yVZ gCY1Xzcjbi8OZrzqDiUlhvgMMJPbBipynUytwEiC6e/2S3eZuKdBaT7Tf8/vAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUjo2NRyHe99iMEItNSPKKGrH72okwHwYDVR0j BBgwFoAUp7bm9LX0UzV3oYw/DDxlaaO78HswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHdqb2FzbzQyZ3VzaFlMS1g0TFE0elF2ekZmaWdXWmp1dzZVVkpnTHFT a3YvMC9BN0I2RTZGNEI1RjQ1MzM1NzdBMThDM0YwQzNDNjU2OUEzQkJGMDdCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QjZFNkY0QjVGNDUzMzU3 N0ExOEMzRjBDM0M2NTY5QTNCQkYwN0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzh3am9hc280Mmd1c2hZTEtYNExRNHpRdnpGZmlnV1pqdXc2VVZKZ0xxU2t2LzAv MzIzODMwMzQzYTM2NjQ2MjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzAzNTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBG2wMA0GCSqGSIb3DQEBCwUAA4IBAQCZsDVc Qast+U3YNnv1owLeOKYMgZfPmvhplShrjVzqZpfwtGS2enH5bQDa72wPO4PtcEMF 58MGkO6NMUnNwiENJlQ7aR79F7TKGXo5UUhgS/NSWIb6rN19z+ouKa2O2+zlqSlW arJ6AlJihBa18pSZVS8OSEGJqXsmd+a1Jc1pHZuBAEOwDOl0tA7R+zojrh1lZWrp EPOxh6NVHvRdCIqomPPHuD208MtzYEOqNCSl/JbAyNNzWVFHRP3yvJqUb5o9rxlI /3MfZ85NmzT8SJoxtuv802MU0gsFCg2aUKW05TpWkFBZPQTFJHacvKdlaT107oH3 69BDgwBRL80jA5gu -----END CERTIFICATE-----Generated at Sun Jan 25 23:52:39 2026 by rpki-client