This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3332203d3e20323731333637.roa File: 323830343a376136303a3a2f33322d3332203d3e20323731333637.roa (raw, json) Hash identifier: wj2v8FaXrypVWJ5QgcZuYBN25ZTB3posFfJqz3YLkcc= Subject key identifier: DD:2E:9D:AF:C4:EF:BC:54:9D:64:4B:DF:12:21:8C:B6:DE:3C:5F:E9 Certificate issuer: /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Certificate serial: 63B98355A78B19B69FF8F4D985DEC226A38CC94B Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3332203d3e20323731333637.roa Signing time: Fri 09 Jan 2026 15:47:37 +0000 ROA not before: Fri 09 Jan 2026 15:42:37 +0000 ROA not after: Fri 08 Jan 2027 15:47:37 +0000 asID: 271367 IP address blocks: 2804:7a60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 07:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b9:83:55:a7:8b:19:b6:9f:f8:f4:d9:85:de:c2:26:a3:8c:c9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Validity Not Before: Jan 9 15:42:37 2026 GMT Not After : Jan 8 15:47:37 2027 GMT Subject: CN=DD2E9DAFC4EFBC549D644BDF12218CB6DE3C5FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:ce:6b:f6:ce:e5:59:75:44:ce:c1:f4:d4: 88:87:33:43:64:eb:30:5d:bb:16:bf:2f:83:e5:05: 73:03:c4:3e:41:08:e4:8c:52:f5:71:5e:2c:f6:51: 04:93:b1:92:13:df:81:67:7b:a3:f3:99:30:df:ff: cd:72:fa:ee:a8:1d:bf:8d:68:34:4c:92:1b:75:7f: 5b:fd:73:29:46:85:5f:fd:2d:55:04:dc:c5:ec:8a: f5:be:e5:eb:b6:f8:d8:34:a1:5b:07:88:8f:4e:ae: 38:56:63:d9:d8:c2:1f:7a:5d:10:be:e2:71:b6:ca: 36:6d:e2:48:d7:42:7c:75:2e:fa:d3:5d:7f:fd:d6: d2:4f:a7:59:50:45:30:dc:5c:5d:cb:d7:3e:b7:58: 9d:d3:73:7c:4c:f7:c2:44:36:58:07:fb:68:d5:3f: 5f:7b:66:f7:58:e3:a5:9b:78:e6:65:2c:1f:5b:00: a9:9e:7f:59:09:fd:6d:af:fe:55:73:9b:7b:40:36: af:d7:23:2b:03:15:ee:7c:52:0a:73:ed:44:e0:bc: 24:3a:b0:93:04:50:e7:c9:5f:06:d5:c3:b3:8d:81: ac:02:36:cf:a9:0c:34:82:41:be:cc:5c:c0:99:8e: 03:67:16:65:0b:93:24:2a:a7:de:fe:92:a1:be:d9: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2E:9D:AF:C4:EF:BC:54:9D:64:4B:DF:12:21:8C:B6:DE:3C:5F:E9 X509v3 Authority Key Identifier: keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/323830343a376136303a3a2f33322d3332203d3e20323731333637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7a60::/32 Signature Algorithm: sha256WithRSAEncryption 28:7a:da:1e:2e:d2:f9:bf:64:0e:91:7a:02:53:ee:79:af:02: c0:4e:de:79:a4:b1:9d:5a:98:8d:77:e8:88:b6:20:89:4c:0d: f7:c9:dd:e4:e4:af:28:89:68:9a:cf:f2:c3:fc:0e:46:08:f7: fa:ba:be:d9:77:24:20:6a:69:5c:cd:95:22:93:44:c9:4c:b8: c0:dd:12:2a:16:ad:68:0e:ac:6f:1a:95:59:5a:01:b1:f3:0a: 12:2b:f2:27:c4:02:16:cf:8a:0a:33:63:30:fd:c3:e6:65:5c: 3a:c0:81:5b:3f:ef:e3:46:a4:61:a5:a7:ef:1d:4e:c8:82:3c: 42:71:d3:80:bd:d0:c2:4f:b6:13:6b:8a:b1:31:10:8e:cf:90: 75:b3:82:b9:e3:2d:a8:1c:e7:08:8a:a1:9b:40:fa:14:30:d6: 28:cd:73:e0:64:da:75:a6:7f:cb:85:0a:c2:bf:04:30:68:33: c4:41:31:ff:e2:5b:af:7e:c8:ec:f1:95:ca:a7:75:9c:08:55: 53:9d:74:5f:15:0d:02:d0:2e:62:65:4e:63:5a:66:a8:a1:c8: 19:98:d5:1a:f1:94:0c:f3:e7:31:04:65:3e:2a:d6:7e:54:a2: f8:bf:06:90:3c:56:a4:f4:0a:dd:67:17:64:8b:ad:13:6f:57: 06:42:eb:fb -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUY7mDVaeLGbaf+PTZhd7CJqOMyUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCRjk2RDE4RTdFMDVBMjRFREFBMTE3RDJCOUU3NkEw N0ZFQzVDRTAeFw0yNjAxMDkxNTQyMzdaFw0yNzAxMDgxNTQ3MzdaMDMxMTAvBgNV BAMTKEREMkU5REFGQzRFRkJDNTQ5RDY0NEJERjEyMjE4Q0I2REUzQzVGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpts5r9s7lWXVEzsH01IiHM0Nk 6zBduxa/L4PlBXMDxD5BCOSMUvVxXiz2UQSTsZIT34Fne6PzmTDf/81y+u6oHb+N aDRMkht1f1v9cylGhV/9LVUE3MXsivW+5eu2+Ng0oVsHiI9OrjhWY9nYwh96XRC+ 4nG2yjZt4kjXQnx1LvrTXX/91tJPp1lQRTDcXF3L1z63WJ3Tc3xM98JENlgH+2jV P197ZvdY46WbeOZlLB9bAKmef1kJ/W2v/lVzm3tANq/XIysDFe58Ugpz7UTgvCQ6 sJMEUOfJXwbVw7ONgawCNs+pDDSCQb7MXMCZjgNnFmULkyQqp97+kqG+2dnlAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU3S6dr8TvvFSdZEvfEiGMtt48X+kwHwYDVR0j BBgwFoAUOr+W0Y5+BaJO2qEX0rnnagf+xc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZZSHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3Vz Z3IvMS8zQUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVDNUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBQkY5NkQxOEU3RTA1QTI0 RURBQTExN0QyQjlFNzZBMDdGRUM1Q0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JGWUh5M3BCa1lSUXRyQjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzEv MzIzODMwMzQzYTM3NjEzNjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx MzMzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAR6YDANBgkqhkiG9w0BAQsFAAOCAQEAKHraHi7S +b9kDpF6AlPuea8CwE7eeaSxnVqYjXfoiLYgiUwN98nd5OSvKIloms/yw/wORgj3 +rq+2XckIGppXM2VIpNEyUy4wN0SKhataA6sbxqVWVoBsfMKEivyJ8QCFs+KCjNj MP3D5mVcOsCBWz/v40akYaWn7x1OyII8QnHTgL3Qwk+2E2uKsTEQjs+QdbOCueMt qBznCIqhm0D6FDDWKM1z4GTadaZ/y4UKwr8EMGgzxEEx/+Jbr37I7PGVyqd1nAhV U510XxUNAtAuYmVOY1pmqKHIGZjVGvGUDPPnMQRlPirWflSi+L8GkDxWpPQK3WcX ZIutE29XBkLr+w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:18:43 2026 by rpki-client