This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa File: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (raw, json) Hash identifier: gbza8z3/TVSV8pS7vM16AvzO4T1HVP0I/SXwsmJE54o= Subject key identifier: 1F:30:C1:3F:35:3A:B9:99:3C:E7:71:DC:A8:E0:04:16:C4:BB:8F:EB Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 2FF03E8E26944AB9FE67F67EF08CBC87435BCAE6 Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa Signing time: Thu 22 Jan 2026 12:01:04 +0000 ROA not before: Thu 22 Jan 2026 11:56:04 +0000 ROA not after: Thu 21 Jan 2027 12:01:04 +0000 asID: 263891 IP address blocks: 2804:2748:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f0:3e:8e:26:94:4a:b9:fe:67:f6:7e:f0:8c:bc:87:43:5b:ca:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Jan 22 11:56:04 2026 GMT Not After : Jan 21 12:01:04 2027 GMT Subject: CN=1F30C13F353AB9993CE771DCA8E00416C4BB8FEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c5:a9:70:d1:43:b8:10:8d:52:a9:a0:00:d4: 33:e8:7e:1b:9a:93:cc:fe:d8:5a:19:7b:c3:ed:48: 4d:13:52:c6:66:aa:94:b6:75:43:10:e6:3b:12:1f: 83:e5:bb:5e:70:e0:b0:db:85:a0:e5:46:8e:67:d6: d1:8f:01:ef:52:6d:4c:86:ab:30:4c:7f:8d:75:13: 5b:95:d0:98:1e:8f:01:45:ee:59:32:e8:29:d9:df: 66:d3:5c:66:dd:bc:47:58:b2:13:42:72:86:5d:73: 6f:16:53:01:b3:55:64:13:1f:dc:b0:e3:12:df:e1: f1:92:6e:fe:83:8f:7e:b2:cb:3f:1a:1c:24:be:75: bc:11:e5:60:e7:5d:de:08:14:f7:26:6c:1a:60:fe: 40:2d:75:c7:3f:04:ea:14:85:de:e9:39:2e:66:21: 93:d9:26:9a:ea:66:b5:fd:12:69:33:ec:32:2b:9b: 2d:ea:d4:54:1b:a8:da:1a:51:6e:97:46:54:60:f7: a7:2b:c8:99:a0:cf:98:f6:32:db:ee:23:d8:b4:37: f9:d9:a5:2c:e3:c5:59:22:ec:4a:89:2c:f6:44:d3: 82:70:6f:e7:76:c0:a5:17:cb:3f:96:be:ff:c6:81: ec:6b:c6:1d:3a:db:c9:53:3a:9c:9e:b1:f3:52:68: 19:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:30:C1:3F:35:3A:B9:99:3C:E7:71:DC:A8:E0:04:16:C4:BB:8F:EB X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2748:4000::/34 Signature Algorithm: sha256WithRSAEncryption 61:9b:6c:76:3f:b5:9d:52:31:b9:be:40:59:46:0c:75:7a:c6: 94:14:07:fa:9f:d0:40:26:34:95:1f:75:18:33:fa:cb:9b:05: 80:c6:3a:2a:62:4a:a6:6a:78:12:ef:f3:0e:3f:dc:28:c7:ba: 0e:a4:29:9e:40:bd:03:19:25:67:0c:93:96:64:a8:68:39:af: d4:75:f1:7d:9e:68:5d:87:79:b5:d4:07:c7:33:7f:36:9d:92: 40:98:b0:77:62:1a:a6:2b:71:74:e5:49:d5:ab:33:70:2d:00: b3:3f:5d:8d:d0:82:c6:ae:32:19:2a:43:2b:d4:cb:09:9f:94: 96:df:4c:28:57:52:5c:60:3f:b0:c4:a8:46:ec:03:80:9b:c7: 3f:7c:61:0e:ff:4f:00:c2:c4:a0:4b:73:21:a9:ba:cc:5a:29: ee:df:6e:ec:00:5b:21:ac:74:bb:d1:47:31:fb:d3:a8:b2:12: e4:d6:16:85:f2:56:41:66:22:57:15:76:c9:2b:a0:6e:a5:8a: c7:57:d1:41:12:e3:ab:ae:a8:da:85:41:fc:51:cf:87:b0:83: 95:39:95:80:9c:9c:01:75:06:43:00:8f:43:19:4d:9c:89:86: 83:ab:51:87:44:03:de:c1:3f:09:6c:6a:ac:05:01:1b:ab:bf: 01:7b:50:f4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUL/A+jiaUSrn+Z/Z+8Iy8h0NbyuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNjAxMjIxMTU2MDRaFw0yNzAxMjExMjAxMDRaMDMxMTAvBgNV BAMTKDFGMzBDMTNGMzUzQUI5OTkzQ0U3NzFEQ0E4RTAwNDE2QzRCQjhGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhxalw0UO4EI1SqaAA1DPofhua k8z+2FoZe8PtSE0TUsZmqpS2dUMQ5jsSH4Plu15w4LDbhaDlRo5n1tGPAe9SbUyG qzBMf411E1uV0JgejwFF7lky6CnZ32bTXGbdvEdYshNCcoZdc28WUwGzVWQTH9yw 4xLf4fGSbv6Dj36yyz8aHCS+dbwR5WDnXd4IFPcmbBpg/kAtdcc/BOoUhd7pOS5m IZPZJprqZrX9Emkz7DIrmy3q1FQbqNoaUW6XRlRg96cryJmgz5j2MtvuI9i0N/nZ pSzjxVki7EqJLPZE04Jwb+d2wKUXyz+Wvv/Ggexrxh0628lTOpyesfNSaBkFAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUHzDBPzU6uZk853HcqOAEFsS7j+swHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv MzIzODMwMzQzYTMyMzczNDM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMzM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEJ0hAMA0GCSqGSIb3DQEBCwUA A4IBAQBhm2x2P7WdUjG5vkBZRgx1esaUFAf6n9BAJjSVH3UYM/rLmwWAxjoqYkqm angS7/MOP9wox7oOpCmeQL0DGSVnDJOWZKhoOa/UdfF9nmhdh3m11AfHM382nZJA mLB3YhqmK3F05UnVqzNwLQCzP12N0ILGrjIZKkMr1MsJn5SW30woV1JcYD+wxKhG 7AOAm8c/fGEO/08AwsSgS3MhqbrMWinu327sAFshrHS70Ucx+9OoshLk1haF8lZB ZiJXFXbJK6BupYrHV9FBEuOrrqjahUH8Uc+HsIOVOZWAnJwBdQZDAI9DGU2ciYaD q1GHRAPewT8JbGqsBQEbq78Be1D0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:08:01 2026 by rpki-client