This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33332d3333203d3e20323633383931.roa File: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (raw, json) Hash identifier: GOy//cGQcPGC86jIJCRkp9ayCU8DrZU/x1SkWMI6TGU= Subject key identifier: 32:22:12:A0:91:BA:E9:F8:1D:84:73:85:6A:B1:FD:FC:7B:60:9C:E1 Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 23F6EFDEB36469C510517B1A85F83347871432FC Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33332d3333203d3e20323633383931.roa Signing time: Thu 22 Jan 2026 12:01:01 +0000 ROA not before: Thu 22 Jan 2026 11:56:01 +0000 ROA not after: Thu 21 Jan 2027 12:01:01 +0000 asID: 263891 IP address blocks: 2804:2748::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f6:ef:de:b3:64:69:c5:10:51:7b:1a:85:f8:33:47:87:14:32:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Jan 22 11:56:01 2026 GMT Not After : Jan 21 12:01:01 2027 GMT Subject: CN=322212A091BAE9F81D8473856AB1FDFC7B609CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:04:a9:b2:f0:e1:5e:03:f0:77:ee:b8:f3: 8a:f1:84:b5:32:60:1d:ef:81:bf:46:e5:07:1d:c9: 78:06:2d:d5:22:62:6c:3d:35:ca:ab:02:93:5e:2e: cb:43:c3:ac:02:af:af:d9:20:0a:a5:2a:b2:b5:62: 16:e8:65:c4:e6:81:6b:35:c1:f9:72:cc:ff:f4:f2: 49:6a:ea:be:8b:a0:8c:27:a0:70:ad:91:40:5a:94: b9:d4:0d:88:28:07:60:b0:42:01:1a:cc:0e:3b:79: 83:95:8b:aa:08:ca:d0:d0:74:e7:91:6d:c0:23:3f: 22:1e:be:91:ea:99:55:75:d5:c9:eb:f1:41:e5:b1: a3:16:ed:66:2b:61:62:a6:fc:89:b4:bb:67:08:9d: de:35:e4:93:1a:5a:1e:4b:23:c2:3f:4c:8e:6c:75: 3c:df:34:16:32:a8:2b:f3:7d:a4:47:f9:14:6a:3f: 14:e6:8d:05:6a:66:b8:06:dc:4b:71:47:33:d6:d0: 69:df:69:e9:6c:59:7e:8e:a3:4b:46:2b:d8:d0:30: 8f:40:ae:da:0a:81:bc:d4:5d:a4:8b:ae:83:78:c5: 46:40:a3:22:88:34:b3:4e:cc:8a:b0:aa:34:26:74: 9d:68:59:06:01:54:be:95:96:df:f5:84:f9:5a:3c: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:22:12:A0:91:BA:E9:F8:1D:84:73:85:6A:B1:FD:FC:7B:60:9C:E1 X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33332d3333203d3e20323633383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2748::/33 Signature Algorithm: sha256WithRSAEncryption 07:99:ad:00:5e:3b:26:43:1a:97:32:89:f3:c8:6b:b7:8b:eb: eb:23:1b:43:3c:d9:30:93:b1:53:62:3f:5a:a1:ec:dd:54:75: 54:cd:94:0c:8d:74:65:84:7e:76:5a:f4:67:8c:6b:2f:ca:42: 6f:3f:37:17:32:77:57:fc:52:4b:8f:1d:7d:b9:dc:01:91:3a: 86:af:91:ee:45:d0:b0:bc:60:41:30:9b:9f:4e:99:d0:3a:eb: 56:99:0f:90:34:da:66:fc:44:b4:4c:d8:b1:3a:c1:f7:9c:f8: 23:a8:80:07:aa:81:2e:ca:b1:64:30:51:23:25:28:6e:b3:f5: 58:1d:9e:3e:7a:e0:87:b9:de:3c:82:29:c2:a7:62:69:ce:25: 89:e5:df:e2:95:a0:83:17:7d:54:9d:d8:60:e6:6f:82:94:5c: 10:88:d4:72:f4:99:7c:b5:ee:bd:11:e8:a4:fd:66:e0:e4:0e: ca:0c:1c:53:e2:8a:4b:3a:25:19:46:50:b2:d6:d4:53:c4:95: ca:f7:37:1c:55:f9:e1:90:03:24:31:52:c4:cc:e9:50:15:3e: d9:14:c3:67:ba:9e:66:16:67:3f:b3:f1:77:20:19:a3:11:b8: 47:a8:88:f4:2a:56:e1:03:66:09:55:b3:bc:bf:83:c6:b9:cf: c9:33:bf:2b -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUI/bv3rNkacUQUXsahfgzR4cUMvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNjAxMjIxMTU2MDFaFw0yNzAxMjExMjAxMDFaMDMxMTAvBgNV BAMTKDMyMjIxMkEwOTFCQUU5RjgxRDg0NzM4NTZBQjFGREZDN0I2MDlDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWKwSpsvDhXgPwd+6484rxhLUy YB3vgb9G5QcdyXgGLdUiYmw9NcqrApNeLstDw6wCr6/ZIAqlKrK1YhboZcTmgWs1 wflyzP/08klq6r6LoIwnoHCtkUBalLnUDYgoB2CwQgEazA47eYOVi6oIytDQdOeR bcAjPyIevpHqmVV11cnr8UHlsaMW7WYrYWKm/Im0u2cInd415JMaWh5LI8I/TI5s dTzfNBYyqCvzfaRH+RRqPxTmjQVqZrgG3EtxRzPW0GnfaelsWX6Oo0tGK9jQMI9A rtoKgbzUXaSLroN4xUZAoyKINLNOzIqwqjQmdJ1oWQYBVL6Vlt/1hPlaPH9xAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUMiISoJG66fgdhHOFarH9/HtgnOEwHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv MzIzODMwMzQzYTMyMzczNDM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz MzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYHKAQnSAAwDQYJKoZIhvcNAQELBQADggEBAAeZrQBe OyZDGpcyifPIa7eL6+sjG0M82TCTsVNiP1qh7N1UdVTNlAyNdGWEfnZa9GeMay/K Qm8/Nxcyd1f8UkuPHX253AGROoavke5F0LC8YEEwm59OmdA661aZD5A02mb8RLRM 2LE6wfec+COogAeqgS7KsWQwUSMlKG6z9Vgdnj564Ie53jyCKcKnYmnOJYnl3+KV oIMXfVSd2GDmb4KUXBCI1HL0mXy17r0R6KT9ZuDkDsoMHFPiiks6JRlGULLW1FPE lcr3NxxV+eGQAyQxUsTM6VAVPtkUw2e6nmYWZz+z8XcgGaMRuEeoiPQqVuEDZglV s7y/g8a5z8kzvys= -----END CERTIFICATE-----Generated at Sun Jan 25 18:38:48 2026 by rpki-client