This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa File: 323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa (raw, json) Hash identifier: 5D9aXFlbU9fjLoiSVvBefi4iRP3TG6aejX0Oq29ADJQ= Subject key identifier: D9:A7:0A:00:F6:04:79:7F:E1:DE:14:E7:1B:5D:40:96:28:DE:85:3D Certificate issuer: /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Certificate serial: 2FF2842C1253429900E5C59FECE582D685617C6A Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa Signing time: Fri 09 Jan 2026 15:47:37 +0000 ROA not before: Fri 09 Jan 2026 15:42:37 +0000 ROA not after: Fri 08 Jan 2027 15:47:37 +0000 asID: 271367 IP address blocks: 2804:7a60:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 07:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f2:84:2c:12:53:42:99:00:e5:c5:9f:ec:e5:82:d6:85:61:7c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Validity Not Before: Jan 9 15:42:37 2026 GMT Not After : Jan 8 15:47:37 2027 GMT Subject: CN=D9A70A00F604797FE1DE14E71B5D409628DE853D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:0e:e4:a2:69:ba:5d:b1:91:a5:b4:e9:d1: 57:e8:30:ba:17:3d:ea:9f:23:11:80:39:b5:1c:62: b3:66:db:ed:67:38:e4:e2:25:6d:90:ca:16:af:8e: 54:0c:d3:97:0d:28:9e:16:ed:f1:93:86:3f:ff:6d: 8a:86:7b:38:cb:b5:71:e3:60:c5:e9:19:66:92:35: 9a:30:5d:81:dd:05:56:54:66:2b:19:87:67:06:3c: ab:23:e7:c3:ad:0d:3f:cd:37:85:72:96:4c:81:9b: 92:3c:ed:e7:b5:d8:0a:c0:37:9f:3e:ba:61:77:e1: a9:2f:3f:ab:64:09:e4:03:aa:61:9e:d8:35:6c:27: c8:8b:b6:da:e5:18:a4:23:68:af:b0:0c:d2:95:1c: 5f:65:35:73:06:69:8c:60:d6:7c:d2:b5:6e:94:73: 11:ba:5a:83:60:ae:8e:50:d4:78:72:33:a9:50:97: fa:13:47:5a:6e:9a:59:be:c4:21:22:93:a6:c3:e3: 52:3e:04:78:16:4d:49:30:4b:df:59:d5:81:3a:fb: 80:56:1c:94:a0:07:94:4e:6f:ad:95:cb:50:36:2e: 2d:4a:be:41:7d:f5:56:10:04:71:9b:80:ab:58:e3: d6:f7:cf:86:e3:8f:d1:51:cf:50:3a:ae:9d:37:1b: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A7:0A:00:F6:04:79:7F:E1:DE:14:E7:1B:5D:40:96:28:DE:85:3D X509v3 Authority Key Identifier: keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7a60:1000::/40 Signature Algorithm: sha256WithRSAEncryption 64:67:0a:55:2c:90:fd:b3:08:6c:d1:ce:01:32:94:ec:3a:1f: bc:ef:9a:47:cf:dc:9d:c2:3b:06:28:b2:19:ca:e0:ac:fc:b6: 9f:9b:7b:55:9a:c8:ae:19:4c:bc:cf:92:5b:b1:66:0d:df:c1: 85:97:c9:c2:af:35:87:5f:f3:71:1c:17:6f:df:cd:a8:74:ce: 7e:73:9d:f5:8c:02:44:ec:62:3d:00:d5:75:8d:72:70:11:59: 06:fe:90:16:14:ff:3b:f8:2e:a6:e1:df:d5:e0:fe:f5:2e:e5: 1b:de:00:5b:73:25:9f:5e:dc:bc:44:32:de:58:78:4f:f8:0e: 87:58:45:c2:d7:60:8b:b1:01:ff:2f:a5:6d:8e:24:7d:03:f7: 5b:cc:ca:5c:db:26:db:5d:87:9a:6e:5e:bb:39:07:df:4b:13: ac:15:89:15:fa:31:5d:49:06:6d:6a:e0:8e:e1:56:98:86:b8: b1:47:b5:aa:6d:cf:4f:c9:99:d6:36:4a:9c:54:42:12:d6:4e: b7:d6:1b:0e:f5:ac:7d:a6:07:20:09:aa:45:d5:0b:69:5a:b6: 13:22:bd:8a:32:64:60:39:3c:e2:05:ff:3b:0f:d2:9e:e7:47: f7:76:40:e7:f6:15:1f:ef:43:da:1c:e1:a2:36:41:a8:4d:a3: 32:b8:39:56 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUL/KELBJTQpkA5cWf7OWC1oVhfGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCRjk2RDE4RTdFMDVBMjRFREFBMTE3RDJCOUU3NkEw N0ZFQzVDRTAeFw0yNjAxMDkxNTQyMzdaFw0yNzAxMDgxNTQ3MzdaMDMxMTAvBgNV BAMTKEQ5QTcwQTAwRjYwNDc5N0ZFMURFMTRFNzFCNUQ0MDk2MjhERTg1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEg7komm6XbGRpbTp0VfoMLoX PeqfIxGAObUcYrNm2+1nOOTiJW2QyhavjlQM05cNKJ4W7fGThj//bYqGezjLtXHj YMXpGWaSNZowXYHdBVZUZisZh2cGPKsj58OtDT/NN4VylkyBm5I87ee12ArAN58+ umF34akvP6tkCeQDqmGe2DVsJ8iLttrlGKQjaK+wDNKVHF9lNXMGaYxg1nzStW6U cxG6WoNgro5Q1HhyM6lQl/oTR1pumlm+xCEik6bD41I+BHgWTUkwS99Z1YE6+4BW HJSgB5ROb62Vy1A2Li1KvkF99VYQBHGbgKtY49b3z4bjj9FRz1A6rp03GxqHAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU2acKAPYEeX/h3hTnG11AlijehT0wHwYDVR0j BBgwFoAUOr+W0Y5+BaJO2qEX0rnnagf+xc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZZSHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3Vz Z3IvMS8zQUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVDNUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBQkY5NkQxOEU3RTA1QTI0 RURBQTExN0QyQjlFNzZBMDdGRUM1Q0UuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JGWUh5M3BCa1lSUXRyQjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzEv MzIzODMwMzQzYTM3NjEzNjMwM2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzczMTMzMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEemAQMA0GCSqGSIb3DQEBCwUA A4IBAQBkZwpVLJD9swhs0c4BMpTsOh+875pHz9ydwjsGKLIZyuCs/Lafm3tVmsiu GUy8z5JbsWYN38GFl8nCrzWHX/NxHBdv382odM5+c531jAJE7GI9ANV1jXJwEVkG /pAWFP87+C6m4d/V4P71LuUb3gBbcyWfXty8RDLeWHhP+A6HWEXC12CLsQH/L6Vt jiR9A/dbzMpc2ybbXYeabl67OQffSxOsFYkV+jFdSQZtauCO4VaYhrixR7Wqbc9P yZnWNkqcVEIS1k631hsO9ax9pgcgCapF1QtpWrYTIr2KMmRgOTziBf87D9Ke50f3 dkDn9hUf70PaHOGiNkGoTaMyuDlW -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:02 2026 by rpki-client