This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/323830343a313936383a3a2f33322d3333203d3e203631373933.roa File: 323830343a313936383a3a2f33322d3333203d3e203631373933.roa (raw, json) Hash identifier: Wd/p9rxZeRNtdLw7pCb+SI9h8E3bnh81/slgtlu7lm4= Subject key identifier: 99:67:39:F3:95:FE:A1:A6:96:66:E4:57:88:25:54:06:1B:DD:47:E7 Certificate issuer: /CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1 Certificate serial: 7BCAE370F1CE243504AE18B323FF34368272B75F Authority key identifier: AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/323830343a313936383a3a2f33322d3333203d3e203631373933.roa Signing time: Fri 23 Jan 2026 16:44:47 +0000 ROA not before: Fri 23 Jan 2026 16:39:47 +0000 ROA not after: Fri 22 Jan 2027 16:44:47 +0000 asID: 61793 IP address blocks: 2804:1968::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 05:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ca:e3:70:f1:ce:24:35:04:ae:18:b3:23:ff:34:36:82:72:b7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1 Validity Not Before: Jan 23 16:39:47 2026 GMT Not After : Jan 22 16:44:47 2027 GMT Subject: CN=996739F395FEA1A69666E457882554061BDD47E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:ef:ef:e4:8d:c8:60:7c:0a:1f:8e:c5:9d: 0c:74:81:a3:23:c9:7f:80:c3:4c:ba:1c:1b:23:89: ea:98:2f:98:a9:dc:59:8f:d2:f3:66:b4:37:d9:65: 52:21:5f:f7:17:28:e7:bc:d2:63:f1:bf:ac:cd:f6: b1:0c:3b:75:7f:1a:3b:92:ec:99:3a:af:02:5e:ed: 4e:65:f6:c0:6a:68:1a:02:6a:57:84:58:dc:7e:ba: 10:9e:39:79:06:79:09:71:58:27:03:2d:f5:60:9f: 9e:e2:8d:d2:36:05:5e:26:2c:b5:dc:a8:45:e0:0c: c4:fd:49:b5:7c:72:dd:4c:aa:ce:01:0b:e6:df:04: 0f:73:35:ce:57:c7:0e:f6:0a:9a:d8:15:6c:f7:14: 68:ec:6b:1b:8f:76:b4:15:b9:fa:90:30:cb:d1:9e: 40:75:44:f1:66:92:81:fd:c9:14:0d:f5:95:f0:f3: c6:52:de:1a:cc:c7:c0:95:6a:7b:25:f4:70:82:02: c7:e3:e6:9a:24:ed:48:6b:f6:25:58:a3:1d:a7:5c: f8:a8:43:b2:d9:cf:fa:d9:3e:ea:87:74:fd:a4:a6: 96:51:24:ac:85:9e:08:c3:b6:f7:47:2e:b0:81:56: 53:82:ad:81:f9:af:80:d7:e0:5e:38:84:53:1b:ac: 32:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:67:39:F3:95:FE:A1:A6:96:66:E4:57:88:25:54:06:1B:DD:47:E7 X509v3 Authority Key Identifier: keyid:AF:79:14:C7:87:AF:DC:BF:CF:FF:DD:94:5C:5A:0E:CF:D8:DB:C6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF7914C787AFDCBFCFFFDD945C5A0ECFD8DBC6B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9e5KmdboDCcJn69oqu9kjhHhxnvgXYc6YMHtVpaFGyPQ/0/323830343a313936383a3a2f33322d3333203d3e203631373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1968::/32 Signature Algorithm: sha256WithRSAEncryption 3d:67:59:bc:7b:6e:8c:7a:cc:88:93:fe:5e:a2:66:83:47:9d: a8:db:e0:f9:1d:a3:2a:50:86:0d:14:7b:17:e2:8d:45:3b:48: ce:1e:ba:9f:e1:f7:be:ba:1e:4f:4c:c4:3b:a1:23:f0:54:fb: 96:4a:f2:bc:a5:7b:c3:28:34:48:b7:6b:01:21:46:01:ab:c6: 8e:0a:a4:09:8e:3f:b3:c5:5f:85:26:f1:78:e2:f8:e6:f4:f6: a9:bb:77:14:bb:92:67:3f:ff:f9:3c:bc:28:24:3e:7a:b8:7f: 19:c8:55:11:f8:fb:30:11:c7:f0:ff:36:c8:b2:96:34:d9:40: 9d:99:59:42:61:63:43:28:bb:6e:b5:29:10:30:fa:e4:31:aa: 35:bc:39:1e:ce:4d:74:00:96:e8:70:33:87:a8:d6:3a:0f:51: 2f:01:50:bd:ab:c6:e7:ae:61:4e:e0:97:dc:6f:ed:46:59:b8: 38:41:a2:8b:b5:f1:24:85:8b:89:90:b4:a7:73:6e:d8:f7:85: 1e:c0:e8:34:7b:4e:31:59:98:e4:30:f8:0f:6b:c5:db:a1:95: d5:77:e5:6c:15:6e:ba:50:13:5c:7d:e0:3a:28:28:75:a2:1c: dc:c2:fc:0d:4f:05:78:b0:83:e9:6f:91:6b:b5:f8:e4:03:24: 24:84:68:e6 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUe8rjcPHOJDUErhizI/80NoJyt18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3OTE0Qzc4N0FGRENCRkNGRkZERDk0NUM1QTBFQ0ZE OERCQzZCMTAeFw0yNjAxMjMxNjM5NDdaFw0yNzAxMjIxNjQ0NDdaMDMxMTAvBgNV BAMTKDk5NjczOUYzOTVGRUExQTY5NjY2RTQ1Nzg4MjU1NDA2MUJERDQ3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJe/v5I3IYHwKH47FnQx0gaMj yX+Aw0y6HBsjieqYL5ip3FmP0vNmtDfZZVIhX/cXKOe80mPxv6zN9rEMO3V/GjuS 7Jk6rwJe7U5l9sBqaBoCaleEWNx+uhCeOXkGeQlxWCcDLfVgn57ijdI2BV4mLLXc qEXgDMT9SbV8ct1Mqs4BC+bfBA9zNc5Xxw72CprYFWz3FGjsaxuPdrQVufqQMMvR nkB1RPFmkoH9yRQN9ZXw88ZS3hrMx8CVansl9HCCAsfj5pok7Uhr9iVYox2nXPio Q7LZz/rZPuqHdP2kppZRJKyFngjDtvdHLrCBVlOCrYH5r4DX4F44hFMbrDITAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUmWc585X+oaaWZuRXiCVUBhvdR+cwHwYDVR0j BBgwFoAUr3kUx4ev3L/P/92UXFoOz9jbxrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWU1S21kYm9EQ2NKbjY5b3F1OWtqaEhoeG52Z1hZYzZZTUh0VnBhRkd5 UFEvMC9BRjc5MTRDNzg3QUZEQ0JGQ0ZGRkREOTQ1QzVBMEVDRkQ4REJDNkIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzkxNEM3ODdBRkRDQkZD RkZGREQ5NDVDNUEwRUNGRDhEQkM2QjEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzllNUttZGJvRENjSm42OW9xdTlramhIaHhudmdYWWM2WU1IdFZwYUZHeVBRLzAv MzIzODMwMzQzYTMxMzkzNjM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzYzMTM3 MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEGWgwDQYJKoZIhvcNAQELBQADggEBAD1nWbx7box6 zIiT/l6iZoNHnajb4PkdoypQhg0UexfijUU7SM4eup/h9766Hk9MxDuhI/BU+5ZK 8ryle8MoNEi3awEhRgGrxo4KpAmOP7PFX4Um8Xji+Ob09qm7dxS7kmc///k8vCgk Pnq4fxnIVRH4+zARx/D/NsiyljTZQJ2ZWUJhY0Mou261KRAw+uQxqjW8OR7OTXQA luhwM4eo1joPUS8BUL2rxueuYU7gl9xv7UZZuDhBoou18SSFi4mQtKdzbtj3hR7A 6DR7TjFZmOQw+A9rxduhldV35WwVbrpQE1x94DooKHWiHNzC/A1PBXiwg+lvkWu1 +OQDJCSEaOY= -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:43 2026 by rpki-client