This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/323830343a333763383a3a2f33322d3438203d3e203533323136.roa File: 323830343a333763383a3a2f33322d3438203d3e203533323136.roa (raw, json) Hash identifier: 8Tj+vDVc+Zgh1ofQ0FfXsMQCpkig1Mt5AFL/kEpoKLk= Subject key identifier: AD:4D:2C:01:5C:9A:1B:90:FE:49:2C:F4:5A:F9:B4:0A:D4:DB:63:20 Certificate issuer: /CN=64947E8AAE2B568EB77CEEC8D7AB6897B019CBEA Certificate serial: 7C4F425D89112450C7F9E61A524A278C2F8BF54E Authority key identifier: 64:94:7E:8A:AE:2B:56:8E:B7:7C:EE:C8:D7:AB:68:97:B0:19:CB:EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64947E8AAE2B568EB77CEEC8D7AB6897B019CBEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/323830343a333763383a3a2f33322d3438203d3e203533323136.roa Signing time: Wed 21 Jan 2026 21:02:19 +0000 ROA not before: Wed 21 Jan 2026 20:57:19 +0000 ROA not after: Wed 20 Jan 2027 21:02:19 +0000 asID: 53216 IP address blocks: 2804:37c8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/64947E8AAE2B568EB77CEEC8D7AB6897B019CBEA.crl rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/64947E8AAE2B568EB77CEEC8D7AB6897B019CBEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64947E8AAE2B568EB77CEEC8D7AB6897B019CBEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 07:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4f:42:5d:89:11:24:50:c7:f9:e6:1a:52:4a:27:8c:2f:8b:f5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64947E8AAE2B568EB77CEEC8D7AB6897B019CBEA Validity Not Before: Jan 21 20:57:19 2026 GMT Not After : Jan 20 21:02:19 2027 GMT Subject: CN=AD4D2C015C9A1B90FE492CF45AF9B40AD4DB6320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:b6:99:6d:d5:b1:b4:1e:ad:df:0a:ed:76: 11:79:e6:fd:3c:ac:d5:de:e8:23:14:69:c8:47:e0: 41:46:82:d9:73:de:9d:57:52:9b:92:f1:df:41:bd: 58:f6:76:21:dc:73:23:be:ba:bd:80:64:c3:4d:48: 47:48:c9:87:62:2a:0a:6d:96:0a:14:d2:09:fa:74: be:96:a8:c0:ba:c2:0a:29:20:81:0e:b9:3b:f5:db: e5:5c:73:39:f2:65:5e:4a:4a:e8:73:72:d5:09:18: 9c:23:75:04:f1:fd:f8:29:ba:8f:f0:03:28:87:87: 59:bb:7d:cf:ab:24:3c:94:84:0f:f3:22:06:97:35: b2:c9:ff:45:b3:df:ce:da:89:84:c9:a5:be:96:c7: d1:72:72:02:f3:ba:af:4c:a1:58:1c:9a:2e:b9:fd: 0e:d8:97:8a:47:7f:ad:46:7c:88:b6:be:50:d1:e7: 59:66:7d:88:ca:dd:0e:8a:78:a8:74:e0:ae:02:98: b0:91:70:00:2a:3d:60:47:88:25:7f:b6:9b:eb:b6: 48:77:19:57:6a:1c:47:97:e3:e5:94:b8:62:54:dc: 87:b1:de:03:5f:3c:6c:be:c9:59:cc:c6:6b:37:4c: d5:e9:54:b1:74:27:e0:1b:b1:3f:df:91:4f:b3:da: ca:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4D:2C:01:5C:9A:1B:90:FE:49:2C:F4:5A:F9:B4:0A:D4:DB:63:20 X509v3 Authority Key Identifier: keyid:64:94:7E:8A:AE:2B:56:8E:B7:7C:EE:C8:D7:AB:68:97:B0:19:CB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/64947E8AAE2B568EB77CEEC8D7AB6897B019CBEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64947E8AAE2B568EB77CEEC8D7AB6897B019CBEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/323830343a333763383a3a2f33322d3438203d3e203533323136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:37c8::/32 Signature Algorithm: sha256WithRSAEncryption 88:34:6e:1c:ef:80:d2:34:a2:48:0a:a6:da:fd:2b:85:4c:cd: b0:3b:99:d0:23:14:96:6b:e1:04:6a:5a:d5:88:0d:ce:4f:74: a7:fa:37:21:ab:8a:7c:cd:d6:99:d3:d9:b3:33:ef:dd:16:6a: b7:60:20:c6:43:46:b5:a5:c4:c6:24:79:ec:b1:9e:f0:f9:25: 32:d3:a4:3e:ae:95:ad:30:20:76:32:45:3f:a7:66:35:36:52: ea:2b:fc:a9:02:49:1a:00:30:0b:01:38:8c:d5:69:9f:4d:35: 7b:25:b8:a1:ed:d1:77:b2:ad:25:9a:05:de:47:89:6f:00:27: d6:25:cb:07:99:5c:43:2b:15:15:b2:3b:35:9b:1a:63:27:11: 65:b1:43:fb:cc:d0:2e:66:07:8c:a0:a0:37:38:dd:ff:31:0f: 72:1b:40:ab:9e:a5:96:47:2e:0f:3c:d1:93:ae:88:9f:1f:02: 09:84:73:79:f6:77:be:2d:fe:b1:2b:e6:37:e5:fe:65:93:ad: b4:f4:df:74:38:0a:c9:4d:f0:79:5a:5a:34:4f:2f:81:b3:8a: 51:eb:49:04:56:0e:d7:c5:28:71:0f:8a:08:c2:85:47:f1:31: 07:e5:69:47:7c:25:17:ed:ce:2c:00:61:cc:e3:f1:72:31:a2: 0e:a3:5c:91 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUfE9CXYkRJFDH+eYaUkonjC+L9U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5NDdFOEFBRTJCNTY4RUI3N0NFRUM4RDdBQjY4OTdC MDE5Q0JFQTAeFw0yNjAxMjEyMDU3MTlaFw0yNzAxMjAyMTAyMTlaMDMxMTAvBgNV BAMTKEFENEQyQzAxNUM5QTFCOTBGRTQ5MkNGNDVBRjlCNDBBRDREQjYzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuS7aZbdWxtB6t3wrtdhF55v08 rNXe6CMUachH4EFGgtlz3p1XUpuS8d9BvVj2diHccyO+ur2AZMNNSEdIyYdiKgpt lgoU0gn6dL6WqMC6wgopIIEOuTv12+VccznyZV5KSuhzctUJGJwjdQTx/fgpuo/w AyiHh1m7fc+rJDyUhA/zIgaXNbLJ/0Wz387aiYTJpb6Wx9FycgLzuq9MoVgcmi65 /Q7Yl4pHf61GfIi2vlDR51lmfYjK3Q6KeKh04K4CmLCRcAAqPWBHiCV/tpvrtkh3 GVdqHEeX4+WUuGJU3Iex3gNfPGy+yVnMxms3TNXpVLF0J+AbsT/fkU+z2srxAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUrU0sAVyaG5D+SSz0Wvm0CtTbYyAwHwYDVR0j BBgwFoAUZJR+iq4rVo63fO7I16tol7AZy+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmNuVERGSlA4eTZNNkF5alZweUR6UzRQZ1E4b0phcnhFU2V4QVVVMXpv VE4vMC82NDk0N0U4QUFFMkI1NjhFQjc3Q0VFQzhEN0FCNjg5N0IwMTlDQkVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0OTQ3RThBQUUyQjU2OEVC NzdDRUVDOEQ3QUI2ODk3QjAxOUNCRUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JjblRERkpQOHk2TTZBeWpWcHlEelM0UGdROG9KYXJ4RVNleEFVVTF6b1ROLzAv MzIzODMwMzQzYTMzMzc2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMy MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEN8gwDQYJKoZIhvcNAQELBQADggEBAIg0bhzvgNI0 okgKptr9K4VMzbA7mdAjFJZr4QRqWtWIDc5PdKf6NyGrinzN1pnT2bMz790Wardg IMZDRrWlxMYkeeyxnvD5JTLTpD6ula0wIHYyRT+nZjU2Uuor/KkCSRoAMAsBOIzV aZ9NNXsluKHt0XeyrSWaBd5HiW8AJ9YlyweZXEMrFRWyOzWbGmMnEWWxQ/vM0C5m B4ygoDc43f8xD3IbQKuepZZHLg880ZOuiJ8fAgmEc3n2d74t/rEr5jfl/mWTrbT0 33Q4CslN8HlaWjRPL4GzilHrSQRWDtfFKHEPigjChUfxMQflaUd8JRftziwAYczj 8XIxog6jXJE= -----END CERTIFICATE-----Generated at Mon Jan 26 06:44:42 2026 by rpki-client