This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa File: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (raw, json) Hash identifier: XMRDRzhpQhhp0OTma7xkqipCwIDvk7r3TOXiN7hkR4o= Subject key identifier: 8B:C5:B1:26:00:95:BA:E4:AB:74:4F:18:77:11:8B:C3:02:ED:B9:6D Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 17D786CD355C0F9DF7D513BE04E4ABB214EA524F Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa Signing time: Thu 22 Jan 2026 12:01:01 +0000 ROA not before: Thu 22 Jan 2026 11:56:01 +0000 ROA not after: Thu 21 Jan 2027 12:01:01 +0000 asID: 263891 IP address blocks: 2804:2748:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d7:86:cd:35:5c:0f:9d:f7:d5:13:be:04:e4:ab:b2:14:ea:52:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Jan 22 11:56:01 2026 GMT Not After : Jan 21 12:01:01 2027 GMT Subject: CN=8BC5B1260095BAE4AB744F1877118BC302EDB96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:d4:42:18:90:ba:24:e5:cc:49:07:cd:19: 9f:75:a1:90:d1:36:91:4f:3f:0c:5f:6c:24:09:56: cc:ce:98:88:86:07:93:ac:de:6e:6f:40:16:60:2c: 76:4d:a5:73:50:fa:83:d9:44:2d:32:e2:b3:0c:28: 10:2d:42:ae:c9:ef:fe:f2:30:52:07:44:0e:2c:b5: b1:01:78:86:0b:d1:d8:be:4c:b6:43:ce:4c:bf:9c: 33:49:91:ca:1e:a5:77:ce:14:92:67:2f:3e:55:79: 38:bd:36:04:ef:29:f7:d3:20:ca:b7:41:25:ef:d2: 23:c2:4f:3d:c1:42:27:76:5d:01:30:03:05:8c:35: 14:a7:eb:0d:e5:2a:b7:7a:3c:91:13:df:64:17:ec: 34:50:bf:18:a9:46:c5:59:32:ba:32:3a:a8:05:11: 74:8b:db:8b:d5:42:e1:94:03:4d:cc:0c:d2:78:e5: 89:2a:1c:83:6e:29:b4:3e:95:72:c8:ba:ae:66:91: bb:79:68:80:62:ed:e7:a9:14:4f:d2:47:b8:92:f6: a3:fb:a6:01:7d:00:67:53:cd:16:b0:74:54:81:33: be:d5:f5:3d:c5:db:d1:eb:a9:7e:e6:7d:30:48:7c: b8:08:65:5a:56:39:a1:f1:4f:e1:b3:9a:36:d3:93: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C5:B1:26:00:95:BA:E4:AB:74:4F:18:77:11:8B:C3:02:ED:B9:6D X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2748:c000::/34 Signature Algorithm: sha256WithRSAEncryption 9c:59:62:a4:6a:b1:da:b4:fa:1f:c5:eb:ad:06:88:b1:1a:c9: 36:bf:f8:4b:da:06:32:8e:0e:25:10:a4:fb:50:21:b3:d2:b4: 67:21:6d:bc:64:d8:68:9f:0b:2c:31:15:71:45:e8:14:c3:6a: a5:e7:24:dd:d2:f4:0b:c4:e9:e7:4b:54:c2:51:19:4a:ec:07: 7f:fc:57:37:e4:03:bb:57:b2:5b:cc:ed:e6:8c:0b:13:85:19: 96:23:10:73:40:1e:7a:cb:9d:50:8c:ac:fc:bb:af:9d:81:83: 11:c5:f3:2a:da:a7:f7:28:c0:98:e3:59:a8:18:9e:d5:e6:59: 8f:d3:db:c6:6d:fa:dd:06:e9:2b:04:b3:48:d3:2d:ad:b0:77: a2:7b:d2:ed:b3:1f:0d:dc:6a:b5:c0:63:32:36:ac:13:78:64: b7:24:30:22:e2:f7:46:9e:0f:ca:4c:8e:b0:1d:75:64:a0:23: 1a:5d:23:18:59:8b:be:52:89:0a:a4:d6:fd:da:b1:9e:e2:fb: 5c:06:4d:dd:a5:a6:f5:5c:8d:31:e0:e5:eb:5f:cd:bb:89:56: c6:bd:80:02:68:09:af:a8:9c:77:3e:cd:a6:60:c8:f5:be:15: 04:72:a3:aa:aa:2e:4f:97:8c:d5:65:eb:ff:e0:51:2d:34:97: 15:47:f5:b4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUF9eGzTVcD5331RO+BOSrshTqUk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNjAxMjIxMTU2MDFaFw0yNzAxMjExMjAxMDFaMDMxMTAvBgNV BAMTKDhCQzVCMTI2MDA5NUJBRTRBQjc0NEYxODc3MTE4QkMzMDJFREI5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3NRCGJC6JOXMSQfNGZ91oZDR NpFPPwxfbCQJVszOmIiGB5Os3m5vQBZgLHZNpXNQ+oPZRC0y4rMMKBAtQq7J7/7y MFIHRA4stbEBeIYL0di+TLZDzky/nDNJkcoepXfOFJJnLz5VeTi9NgTvKffTIMq3 QSXv0iPCTz3BQid2XQEwAwWMNRSn6w3lKrd6PJET32QX7DRQvxipRsVZMroyOqgF EXSL24vVQuGUA03MDNJ45YkqHINuKbQ+lXLIuq5mkbt5aIBi7eepFE/SR7iS9qP7 pgF9AGdTzRawdFSBM77V9T3F29HrqX7mfTBIfLgIZVpWOaHxT+GzmjbTk2vtAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUi8WxJgCVuuSrdE8YdxGLwwLtuW0wHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv MzIzODMwMzQzYTMyMzczNDM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzMzM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEJ0jAMA0GCSqGSIb3DQEBCwUA A4IBAQCcWWKkarHatPofxeutBoixGsk2v/hL2gYyjg4lEKT7UCGz0rRnIW28ZNho nwssMRVxRegUw2ql5yTd0vQLxOnnS1TCURlK7Ad//Fc35AO7V7JbzO3mjAsThRmW IxBzQB56y51QjKz8u6+dgYMRxfMq2qf3KMCY41moGJ7V5lmP09vGbfrdBukrBLNI 0y2tsHeie9Ltsx8N3Gq1wGMyNqwTeGS3JDAi4vdGng/KTI6wHXVkoCMaXSMYWYu+ UokKpNb92rGe4vtcBk3dpab1XI0x4OXrX827iVbGvYACaAmvqJx3Ps2mYMj1vhUE cqOqqi5Pl4zVZev/4FEtNJcVR/W0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:08:04 2026 by rpki-client