This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a3a2f33322d313238203d3e20323637333339.roa File: 323830343a346266343a3a2f33322d313238203d3e20323637333339.roa (raw, json) Hash identifier: kT6z9MdnJhY+/rtXwN4nffJFPJVSyyZhj+/aWt7p19U= Subject key identifier: 68:DE:74:7E:52:68:3D:E8:22:6A:75:F5:CD:C4:60:39:FF:F8:69:57 Certificate issuer: /CN=2790865F71C22A29E6AAC376A6A33439446A37D3 Certificate serial: 1DC91897E30B88ED0F9716BA0D2A6C8C9EA60C3D Authority key identifier: 27:90:86:5F:71:C2:2A:29:E6:AA:C3:76:A6:A3:34:39:44:6A:37:D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2790865F71C22A29E6AAC376A6A33439446A37D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a3a2f33322d313238203d3e20323637333339.roa Signing time: Tue 13 Jan 2026 20:09:31 +0000 ROA not before: Tue 13 Jan 2026 20:04:31 +0000 ROA not after: Tue 12 Jan 2027 20:09:31 +0000 asID: 267339 IP address blocks: 2804:4bf4::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/2790865F71C22A29E6AAC376A6A33439446A37D3.crl rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/2790865F71C22A29E6AAC376A6A33439446A37D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2790865F71C22A29E6AAC376A6A33439446A37D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c9:18:97:e3:0b:88:ed:0f:97:16:ba:0d:2a:6c:8c:9e:a6:0c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2790865F71C22A29E6AAC376A6A33439446A37D3 Validity Not Before: Jan 13 20:04:31 2026 GMT Not After : Jan 12 20:09:31 2027 GMT Subject: CN=68DE747E52683DE8226A75F5CDC46039FFF86957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:be:52:34:b4:1a:32:58:71:37:84:b0:75:1e: 33:7d:66:9c:83:86:51:61:05:79:11:3c:2f:23:8f: 9b:b8:b5:40:22:07:79:96:b9:80:f9:a7:9c:67:dd: 10:b7:8f:fd:df:71:05:b6:2d:7b:6d:c3:ae:93:45: fb:7e:6d:16:a5:b9:f8:b7:ec:07:c5:48:95:96:4b: ce:7e:54:cb:dd:32:2c:8c:c3:ea:7d:d8:cc:cf:9d: 0d:3d:fa:5b:fe:a1:f3:2f:05:71:ab:94:04:11:28: 14:ab:49:9b:ad:cb:d6:6e:3a:b2:ac:6b:05:f0:df: 38:4f:c1:31:96:72:37:ed:7b:f0:84:99:72:3a:da: e5:b3:f7:d9:53:77:1d:cc:d5:f9:8f:56:7c:11:e0: 79:e9:c1:af:97:87:9a:15:11:80:27:db:aa:da:51: 75:2d:82:df:f4:50:0f:d0:3d:b8:c4:98:7c:a9:48: 1c:43:e8:64:04:50:a4:9e:0b:95:4a:ef:40:aa:5e: 2e:b9:26:a6:e4:50:91:4f:6a:47:cd:c8:3f:75:99: c7:5b:13:28:9e:4c:2c:c2:e2:0b:e0:80:64:fa:41: 04:fa:f6:fd:d9:aa:b2:cf:6f:40:b4:06:2d:5b:06: f9:e1:b8:8d:b8:c9:dc:6d:59:a1:37:01:fa:8e:cc: 58:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DE:74:7E:52:68:3D:E8:22:6A:75:F5:CD:C4:60:39:FF:F8:69:57 X509v3 Authority Key Identifier: keyid:27:90:86:5F:71:C2:2A:29:E6:AA:C3:76:A6:A3:34:39:44:6A:37:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/2790865F71C22A29E6AAC376A6A33439446A37D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2790865F71C22A29E6AAC376A6A33439446A37D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a3a2f33322d313238203d3e20323637333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4bf4::/32 Signature Algorithm: sha256WithRSAEncryption 8e:be:e1:3d:c7:da:e8:dc:ea:9b:69:12:3f:b9:f9:1a:06:50: c9:0b:8f:83:8f:af:61:12:5b:55:2a:1f:36:aa:ba:a3:31:46: 5c:f4:03:57:6c:19:ff:68:39:2c:88:9c:a2:bf:bd:78:7c:ce: b2:38:67:60:b4:18:45:d7:79:17:5b:2b:62:55:a7:af:c9:4b: 26:8a:e3:6c:14:29:e8:c8:15:a6:7c:b9:89:46:f9:ab:15:1e: 5d:db:55:b8:85:94:ff:82:74:e2:a8:95:e2:1a:b2:19:79:ac: 0f:45:6e:6e:c3:7e:12:d7:c6:49:d6:5d:25:db:7d:6f:5b:0d: 52:ad:15:f0:2b:8c:9a:37:00:56:8f:82:c4:39:40:3f:16:d8: 61:20:f7:84:d4:f0:2d:4a:b1:f3:c5:ea:41:55:f0:65:7e:20: d4:a0:3e:dc:ec:7d:45:43:7a:35:d7:00:64:42:5a:f7:52:12: 7d:c4:5a:bc:62:13:ba:ec:8e:db:e4:20:65:dd:47:02:49:13: cb:e6:e5:00:4b:6f:a8:c5:85:23:d2:ad:d4:ab:3c:ec:95:9c: 7b:3e:ed:c5:fd:f5:28:03:3f:cb:b7:ef:a8:2b:a1:3e:6e:be: 1a:63:41:20:14:3d:73:3c:82:50:82:d5:d1:8a:80:ce:ac:9a: d8:63:9f:d4 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUHckYl+MLiO0Plxa6DSpsjJ6mDD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5MDg2NUY3MUMyMkEyOUU2QUFDMzc2QTZBMzM0Mzk0 NDZBMzdEMzAeFw0yNjAxMTMyMDA0MzFaFw0yNzAxMTIyMDA5MzFaMDMxMTAvBgNV BAMTKDY4REU3NDdFNTI2ODNERTgyMjZBNzVGNUNEQzQ2MDM5RkZGODY5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYvlI0tBoyWHE3hLB1HjN9ZpyD hlFhBXkRPC8jj5u4tUAiB3mWuYD5p5xn3RC3j/3fcQW2LXttw66TRft+bRalufi3 7AfFSJWWS85+VMvdMiyMw+p92MzPnQ09+lv+ofMvBXGrlAQRKBSrSZuty9ZuOrKs awXw3zhPwTGWcjfte/CEmXI62uWz99lTdx3M1fmPVnwR4Hnpwa+Xh5oVEYAn26ra UXUtgt/0UA/QPbjEmHypSBxD6GQEUKSeC5VK70CqXi65JqbkUJFPakfNyD91mcdb EyieTCzC4gvggGT6QQT69v3ZqrLPb0C0Bi1bBvnhuI24ydxtWaE3AfqOzFgXAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUaN50flJoPegianX1zcRgOf/4aVcwHwYDVR0j BBgwFoAUJ5CGX3HCKinmqsN2pqM0OURqN9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQW9CYndxeFg5MURleGgxVFRxeng5WDlab0ZDNFQ1VEw0OGIycVJTcm9E WVcvMC8yNzkwODY1RjcxQzIyQTI5RTZBQUMzNzZBNkEzMzQzOTQ0NkEzN0QzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3OTA4NjVGNzFDMjJBMjlF NkFBQzM3NkE2QTMzNDM5NDQ2QTM3RDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FvQmJ3cXhYOTFEZXhoMVRUcXp4OVg5Wm9GQzRUNVRMNDhiMnFSU3JvRFlXLzAv MzIzODMwMzQzYTM0NjI2NjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzczMzMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBEv0MA0GCSqGSIb3DQEBCwUAA4IBAQCOvuE9 x9ro3OqbaRI/ufkaBlDJC4+Dj69hEltVKh82qrqjMUZc9ANXbBn/aDksiJyiv714 fM6yOGdgtBhF13kXWytiVaevyUsmiuNsFCnoyBWmfLmJRvmrFR5d21W4hZT/gnTi qJXiGrIZeawPRW5uw34S18ZJ1l0l231vWw1SrRXwK4yaNwBWj4LEOUA/FthhIPeE 1PAtSrHzxepBVfBlfiDUoD7c7H1FQ3o11wBkQlr3UhJ9xFq8YhO67I7b5CBl3UcC SRPL5uUAS2+oxYUj0q3UqzzslZx7Pu3F/fUoAz/Lt++oK6E+br4aY0EgFD1zPIJQ gtXRioDOrJrYY5/U -----END CERTIFICATE-----Generated at Mon Jan 26 01:30:59 2026 by rpki-client