This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa File: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (raw, json) Hash identifier: 0ksqEnvXv/6hMwy0m4SHmbFexWGbnXgVvcDzt9QDYSM= Subject key identifier: BA:CD:13:41:4E:EE:1C:6C:4B:B9:51:84:D1:05:93:BD:2C:7A:2A:BA Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 3BEFE9BDA3E658ACD48F32387BD9794E86768363 Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa Signing time: Thu 22 Jan 2026 12:01:00 +0000 ROA not before: Thu 22 Jan 2026 11:56:00 +0000 ROA not after: Thu 21 Jan 2027 12:01:00 +0000 asID: 263891 IP address blocks: 2804:2748:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ef:e9:bd:a3:e6:58:ac:d4:8f:32:38:7b:d9:79:4e:86:76:83:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Jan 22 11:56:00 2026 GMT Not After : Jan 21 12:01:00 2027 GMT Subject: CN=BACD13414EEE1C6C4BB95184D10593BD2C7A2ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:27:16:2c:42:56:cc:07:b3:d3:e1:4c:ac: 8c:8a:dc:41:22:1a:5d:72:21:35:95:f3:30:e0:62: a4:4c:44:c1:3a:d4:9c:f7:31:73:fd:16:0a:b0:e2: 83:a7:56:39:8b:b1:fa:60:53:ea:0f:de:d7:2a:a2: da:ae:21:eb:63:e7:b1:ca:55:84:c0:77:57:b9:42: 79:dc:36:08:5f:05:b4:2a:3f:e7:e6:2f:3b:fc:0e: 94:bb:27:b9:e0:cd:da:c1:71:6f:82:44:da:d5:12: 9d:91:bd:d1:11:7c:62:51:87:a7:6a:0d:d0:ce:2d: b4:85:9d:15:11:4c:12:dd:fb:90:af:2c:de:eb:6e: b7:43:4c:7c:49:63:d9:70:ba:48:ab:78:ce:b4:2c: 73:3d:fb:e2:98:83:f7:68:6d:d0:5d:21:62:f2:5c: c6:39:02:9a:19:68:47:7a:fc:b3:91:05:3c:a7:93: e6:af:9d:11:98:72:c4:a6:6a:be:22:ae:0f:15:1f: 6c:23:31:0a:c8:a8:18:71:37:2a:70:5a:70:92:bb: 35:9a:ef:7e:5c:58:99:17:c2:b7:4c:55:a2:00:b6: 8b:6c:a9:55:ff:6a:46:45:1e:11:92:8f:59:db:2f: 45:37:5a:97:53:e9:a2:5b:83:fb:b8:63:e5:54:20: 85:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:13:41:4E:EE:1C:6C:4B:B9:51:84:D1:05:93:BD:2C:7A:2A:BA X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2748:8000::/34 Signature Algorithm: sha256WithRSAEncryption 8d:2b:f8:06:18:41:40:11:15:4a:55:eb:56:31:ec:17:dc:cf: 19:97:32:0f:db:d3:2b:03:b5:ca:92:59:3e:8c:ed:57:e2:4e: df:a3:25:7e:30:55:65:6d:e0:42:50:a0:73:70:31:78:65:35: 1f:b9:c4:85:6d:6b:8b:39:73:db:3e:ba:01:06:ef:93:05:c8: 39:3f:4b:93:3b:9c:2d:4e:1f:e3:e6:ba:fd:8e:78:4f:be:ad: 6f:6b:4b:4e:8d:ef:8f:c9:e2:82:70:7d:d9:85:02:7c:23:fe: 4c:30:d6:88:38:c2:5f:e3:c4:d0:08:ad:37:f5:5e:7a:da:13: 4d:94:09:ea:14:83:65:6e:f0:10:18:97:57:62:41:84:45:d3: fd:12:21:a8:0d:73:80:d5:f9:f8:14:df:89:d0:87:db:06:38: 11:af:94:ba:49:7e:5d:87:26:d9:63:05:c4:c2:38:cb:32:bf: 62:00:84:80:f9:e9:0f:8f:0b:38:e1:b4:d6:02:75:6a:79:ec: 28:81:dd:f3:0b:0d:36:45:ab:99:d7:10:41:cf:37:00:ca:13: 7a:f1:01:ca:cb:b6:ce:38:6a:f3:bb:e8:be:69:e3:5a:ec:05: 13:67:b2:e2:33:56:42:41:4d:6b:0b:7c:f3:89:5d:7b:b6:1f: 6e:bc:83:5f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUO+/pvaPmWKzUjzI4e9l5ToZ2g2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNjAxMjIxMTU2MDBaFw0yNzAxMjExMjAxMDBaMDMxMTAvBgNV BAMTKEJBQ0QxMzQxNEVFRTFDNkM0QkI5NTE4NEQxMDU5M0JEMkM3QTJBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5ScWLEJWzAez0+FMrIyK3EEi Gl1yITWV8zDgYqRMRME61Jz3MXP9Fgqw4oOnVjmLsfpgU+oP3tcqotquIetj57HK VYTAd1e5QnncNghfBbQqP+fmLzv8DpS7J7ngzdrBcW+CRNrVEp2RvdERfGJRh6dq DdDOLbSFnRURTBLd+5CvLN7rbrdDTHxJY9lwukireM60LHM9++KYg/dobdBdIWLy XMY5ApoZaEd6/LORBTynk+avnRGYcsSmar4irg8VH2wjMQrIqBhxNypwWnCSuzWa 735cWJkXwrdMVaIAtotsqVX/akZFHhGSj1nbL0U3WpdT6aJbg/u4Y+VUIIVbAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUus0TQU7uHGxLuVGE0QWTvSx6KrowHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv MzIzODMwMzQzYTMyMzczNDM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMzM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEJ0iAMA0GCSqGSIb3DQEBCwUA A4IBAQCNK/gGGEFAERVKVetWMewX3M8ZlzIP29MrA7XKklk+jO1X4k7foyV+MFVl beBCUKBzcDF4ZTUfucSFbWuLOXPbProBBu+TBcg5P0uTO5wtTh/j5rr9jnhPvq1v a0tOje+PyeKCcH3ZhQJ8I/5MMNaIOMJf48TQCK039V562hNNlAnqFINlbvAQGJdX YkGERdP9EiGoDXOA1fn4FN+J0IfbBjgRr5S6SX5dhybZYwXEwjjLMr9iAISA+ekP jws44bTWAnVqeewogd3zCw02RauZ1xBBzzcAyhN68QHKy7bOOGrzu+i+aeNa7AUT Z7LiM1ZCQU1rC3zziV17th9uvINf -----END CERTIFICATE-----Generated at Sun Jan 25 22:07:56 2026 by rpki-client