This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/323830343a6262383a3a2f33322d3438203d3e203532383135.roa File: 323830343a6262383a3a2f33322d3438203d3e203532383135.roa (raw, json) Hash identifier: h+rVnzoDvU3pg+XIi/QjUrH9aEYvtIZcHQMlTop9iTQ= Subject key identifier: 5D:A7:61:86:EE:A7:89:5D:73:AF:03:94:23:95:35:CD:F1:8F:9D:DF Certificate issuer: /CN=15624C0BA304795FD3C18CF592338A4940310BB4 Certificate serial: 0B49F11DC6EB104F25B80C97B18F4D77715FFEB8 Authority key identifier: 15:62:4C:0B:A3:04:79:5F:D3:C1:8C:F5:92:33:8A:49:40:31:0B:B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15624C0BA304795FD3C18CF592338A4940310BB4.cer Subject info access: rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/323830343a6262383a3a2f33322d3438203d3e203532383135.roa Signing time: Sat 10 Jan 2026 20:44:20 +0000 ROA not before: Sat 10 Jan 2026 20:39:20 +0000 ROA not after: Sat 09 Jan 2027 20:44:20 +0000 asID: 52815 IP address blocks: 2804:bb8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/15624C0BA304795FD3C18CF592338A4940310BB4.crl rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/15624C0BA304795FD3C18CF592338A4940310BB4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15624C0BA304795FD3C18CF592338A4940310BB4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 05:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:49:f1:1d:c6:eb:10:4f:25:b8:0c:97:b1:8f:4d:77:71:5f:fe:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15624C0BA304795FD3C18CF592338A4940310BB4 Validity Not Before: Jan 10 20:39:20 2026 GMT Not After : Jan 9 20:44:20 2027 GMT Subject: CN=5DA76186EEA7895D73AF0394239535CDF18F9DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9d:6a:63:90:88:5a:3e:45:61:d2:49:26:b7: ff:fa:6b:d0:bd:22:97:6b:f3:a7:3d:1d:f6:4c:10: b5:75:40:04:15:22:8f:95:0d:a2:ab:e2:82:9b:1c: 03:4b:c9:6c:6d:1a:74:73:e8:47:d4:2a:28:50:6b: e7:a2:46:bf:5c:25:fb:ef:74:95:e9:57:22:eb:78: a9:59:e8:0e:d8:ef:c2:ee:d0:91:7d:c6:3c:b3:04: 25:06:42:89:8e:bd:71:de:29:90:c7:60:f6:67:cd: 4f:45:11:c1:a7:bf:21:c1:26:ee:5f:76:de:b2:ff: 0b:f8:1b:1c:3b:e2:8a:4d:30:e2:a3:70:5b:91:a7: 4a:30:2a:f9:7b:0e:cf:48:ae:b2:6c:f4:6c:41:60: c4:d5:e4:56:e3:6c:e3:f6:b2:f2:8e:ef:48:10:8d: 07:fd:6b:4e:b5:85:e6:9f:69:dd:61:db:cd:85:08: 1b:aa:b0:54:68:6e:72:52:77:74:97:19:12:a7:43: 07:14:1f:7c:21:cb:5a:c6:55:f1:84:db:3d:c3:95: 3a:02:9c:e7:c6:85:43:e5:bc:56:7f:40:53:0e:7d: 4e:1b:4b:bc:f4:1d:55:0a:9e:7b:8f:5f:39:14:71: 56:5e:8b:d7:11:a6:92:d5:ba:62:11:89:9c:1e:dd: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A7:61:86:EE:A7:89:5D:73:AF:03:94:23:95:35:CD:F1:8F:9D:DF X509v3 Authority Key Identifier: keyid:15:62:4C:0B:A3:04:79:5F:D3:C1:8C:F5:92:33:8A:49:40:31:0B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/15624C0BA304795FD3C18CF592338A4940310BB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15624C0BA304795FD3C18CF592338A4940310BB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrthmiAe3LZdcpqpW1goneaJ9Z5pLTaM39PCvy98hKNk/0/323830343a6262383a3a2f33322d3438203d3e203532383135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:bb8::/32 Signature Algorithm: sha256WithRSAEncryption 60:f3:c3:0f:7f:be:ec:98:1c:97:f7:35:37:e5:67:8f:40:c0: 6f:32:f9:7b:34:00:6e:83:1d:1a:74:75:3b:a6:d6:50:50:60: b6:18:31:ee:ad:34:61:3f:3a:2a:e0:f3:63:fb:b8:99:71:2d: fb:e5:f0:99:95:37:cd:c0:6f:1e:f6:b9:19:62:32:ba:72:a3: a6:46:20:71:77:23:87:89:f6:ff:eb:62:71:16:05:bd:cc:ac: ee:18:c7:35:96:5e:1d:1e:90:4c:79:15:d3:33:e0:2e:ea:35: ed:bb:47:c6:6e:fd:5f:4c:4d:22:51:6d:11:07:be:65:00:97: 78:c1:9f:5c:62:ee:c9:0a:2d:0f:13:ac:1e:a0:b2:33:82:2d: 4e:51:4d:6d:71:8f:72:2c:c8:b4:6f:43:f0:97:6a:54:61:f9: 8e:be:f2:0f:f6:32:b8:32:d2:94:ba:09:05:96:e2:74:18:51: d8:c5:8c:fb:5e:ab:07:9b:96:80:d3:60:ee:c5:83:c0:74:27: fe:9c:4b:99:76:80:7f:4a:40:bb:e7:b9:37:b5:40:31:28:f4: c4:f3:fe:3f:3d:5b:ea:c6:1d:30:52:db:d9:5a:39:3f:da:bd: de:ae:5f:f0:75:c0:59:7a:1f:1a:20:cb:96:6d:1d:94:af:7e: d5:07:a7:32 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUC0nxHcbrEE8luAyXsY9Nd3Ff/rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2MjRDMEJBMzA0Nzk1RkQzQzE4Q0Y1OTIzMzhBNDk0 MDMxMEJCNDAeFw0yNjAxMTAyMDM5MjBaFw0yNzAxMDkyMDQ0MjBaMDMxMTAvBgNV BAMTKDVEQTc2MTg2RUVBNzg5NUQ3M0FGMDM5NDIzOTUzNUNERjE4RjlEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVnWpjkIhaPkVh0kkmt//6a9C9 Ipdr86c9HfZMELV1QAQVIo+VDaKr4oKbHANLyWxtGnRz6EfUKihQa+eiRr9cJfvv dJXpVyLreKlZ6A7Y78Lu0JF9xjyzBCUGQomOvXHeKZDHYPZnzU9FEcGnvyHBJu5f dt6y/wv4Gxw74opNMOKjcFuRp0owKvl7Ds9IrrJs9GxBYMTV5FbjbOP2svKO70gQ jQf9a061heafad1h282FCBuqsFRobnJSd3SXGRKnQwcUH3why1rGVfGE2z3DlToC nOfGhUPlvFZ/QFMOfU4bS7z0HVUKnnuPXzkUcVZei9cRppLVumIRiZwe3QVnAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUXadhhu6niV1zrwOUI5U1zfGPnd8wHwYDVR0j BBgwFoAUFWJMC6MEeV/TwYz1kjOKSUAxC7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnJ0aG1pQWUzTFpkY3BxcFcxZ29uZWFKOVo1cExUYU0zOVBDdnk5OGhL TmsvMC8xNTYyNEMwQkEzMDQ3OTVGRDNDMThDRjU5MjMzOEE0OTQwMzEwQkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1NjI0QzBCQTMwNDc5NUZE M0MxOENGNTkyMzM4QTQ5NDAzMTBCQjQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JydGhtaUFlM0xaZGNwcXBXMWdvbmVhSjlaNXBMVGFNMzlQQ3Z5OThoS05rLzAv MzIzODMwMzQzYTYyNjIzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzODMx MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBAu4MA0GCSqGSIb3DQEBCwUAA4IBAQBg88MPf77smByX 9zU35WePQMBvMvl7NABugx0adHU7ptZQUGC2GDHurTRhPzoq4PNj+7iZcS375fCZ lTfNwG8e9rkZYjK6cqOmRiBxdyOHifb/62JxFgW9zKzuGMc1ll4dHpBMeRXTM+Au 6jXtu0fGbv1fTE0iUW0RB75lAJd4wZ9cYu7JCi0PE6weoLIzgi1OUU1tcY9yLMi0 b0Pwl2pUYfmOvvIP9jK4MtKUugkFluJ0GFHYxYz7XqsHm5aA02DuxYPAdCf+nEuZ doB/SkC757k3tUAxKPTE8/4/PVvqxh0wUtvZWjk/2r3erl/wdcBZeh8aIMuWbR2U r37VB6cy -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:57 2026 by rpki-client