This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa File: 323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa (raw, json) Hash identifier: ojxetBMWRoOFzU3iX1Vz5o1kbTj96Iatk1KnhwIhlYw= Subject key identifier: 2D:98:EA:1B:32:DB:80:09:B8:96:3E:51:96:4D:22:D8:0B:41:5D:E3 Certificate issuer: /CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843 Certificate serial: 5458CFE23F3491DAAEFFD19C31D364540DA709B3 Authority key identifier: B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer Subject info access: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa Signing time: Tue 06 Jan 2026 13:59:01 +0000 ROA not before: Tue 06 Jan 2026 13:54:01 +0000 ROA not after: Tue 05 Jan 2027 13:59:01 +0000 asID: 268529 IP address blocks: 2804:529c:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:58:cf:e2:3f:34:91:da:ae:ff:d1:9c:31:d3:64:54:0d:a7:09:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843 Validity Not Before: Jan 6 13:54:01 2026 GMT Not After : Jan 5 13:59:01 2027 GMT Subject: CN=2D98EA1B32DB8009B8963E51964D22D80B415DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:c9:d3:5e:00:92:5d:2c:1a:67:1d:58:6d: 6d:c3:0e:86:32:c7:c6:1a:09:9d:b2:d5:2f:26:87: da:ad:af:81:04:e5:a1:91:ab:b1:6c:f8:dc:24:f1: ec:21:fc:9f:a9:4c:b1:3f:17:a2:6a:65:86:aa:44: 33:df:01:9a:18:d9:c5:bf:fe:9c:d2:19:28:86:a1: ce:33:26:8c:62:42:a2:59:d2:72:be:44:0b:03:c6: 93:a5:81:ff:89:88:07:7a:e0:b9:a1:98:ca:3e:08: 60:51:4e:52:b6:7c:eb:e2:50:a8:61:95:31:8f:9f: 0c:0e:72:4a:cc:fe:d4:7f:7f:9c:2b:82:39:d9:ee: 37:88:50:a7:e4:48:84:ff:0f:29:c0:00:54:21:9a: b3:57:d3:4d:23:50:ad:ed:37:49:d5:c7:c7:95:d9: 52:fe:5d:bd:a6:0c:d6:44:81:07:a9:f9:04:a7:59: 82:c6:64:85:2c:7a:30:f5:7c:ad:35:aa:d0:84:03: 13:72:b5:0a:39:a7:a5:8a:d5:c3:12:cc:de:19:0d: 10:28:6b:e8:40:53:60:38:8f:a1:d2:fa:44:6a:67: 0f:83:05:9c:b3:c2:e3:f5:94:e5:3d:7b:f3:35:1f: d5:35:ba:55:d0:e4:c3:01:e8:be:f1:75:92:5b:58: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:98:EA:1B:32:DB:80:09:B8:96:3E:51:96:4D:22:D8:0B:41:5D:E3 X509v3 Authority Key Identifier: keyid:B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a633030303a3a2f33342d3334203d3e20323638353239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:529c:c000::/34 Signature Algorithm: sha256WithRSAEncryption 00:38:c6:fa:b2:eb:e6:75:ef:4c:ee:54:00:72:35:b5:ab:97: af:d7:98:16:af:81:45:13:c5:09:d5:82:ac:48:00:1e:d3:54: e9:f4:77:7b:bb:b8:69:ec:24:55:b4:1b:6c:a2:ff:b4:f9:98: 8d:fb:6d:b7:83:be:64:60:c7:17:1d:81:d7:64:84:7b:f7:df: 25:3e:23:c7:75:e7:a9:4b:31:30:c1:50:d7:2a:60:91:5e:bd: f0:52:78:b8:a4:b0:46:26:41:1b:37:95:68:83:19:10:33:47: c9:0e:10:d5:00:7c:e9:72:89:87:94:51:26:a7:07:b9:cc:67: bd:f8:6e:64:ab:06:92:aa:f2:41:c2:39:d6:ff:f0:31:8a:a4: 34:ac:bc:c8:66:a8:e1:e3:a2:12:97:44:32:29:fa:66:67:ff: 7e:53:64:48:7d:86:bd:1d:59:2d:b3:c0:96:8a:25:2c:ef:d8: 5d:26:08:a7:b8:c6:62:18:03:5c:fe:c5:bf:04:0c:51:71:9d: 2c:82:68:bc:82:76:d3:1a:06:37:8c:b9:bb:12:5a:ea:c7:69: 79:06:d3:f1:61:51:12:dc:13:b2:a6:99:cf:e4:94:53:29:15: 15:cf:f9:a8:a6:2c:76:e8:ba:37:bf:17:45:0a:a9:f8:63:69: 54:a3:10:d4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUVFjP4j80kdqu/9GcMdNkVA2nCbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxRDZBOUM1RkQ4MUY1MUM0RjVFNzNFNTk0RjBDRjBD OTk5Qjg0MzAeFw0yNjAxMDYxMzU0MDFaFw0yNzAxMDUxMzU5MDFaMDMxMTAvBgNV BAMTKDJEOThFQTFCMzJEQjgwMDlCODk2M0U1MTk2NEQyMkQ4MEI0MTVERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrcnTXgCSXSwaZx1YbW3DDoYy x8YaCZ2y1S8mh9qtr4EE5aGRq7Fs+Nwk8ewh/J+pTLE/F6JqZYaqRDPfAZoY2cW/ /pzSGSiGoc4zJoxiQqJZ0nK+RAsDxpOlgf+JiAd64LmhmMo+CGBRTlK2fOviUKhh lTGPnwwOckrM/tR/f5wrgjnZ7jeIUKfkSIT/DynAAFQhmrNX000jUK3tN0nVx8eV 2VL+Xb2mDNZEgQep+QSnWYLGZIUsejD1fK01qtCEAxNytQo5p6WK1cMSzN4ZDRAo a+hAU2A4j6HS+kRqZw+DBZyzwuP1lOU9e/M1H9U1ulXQ5MMB6L7xdZJbWOP7AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQULZjqGzLbgAm4lj5Rlk0i2AtBXeMwHwYDVR0j BBgwFoAUtB1qnF/YH1HE9ec+WU8M8MmZuEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzlIS0tRVG8xZ2NjVlZrV200a1lIN0JjZkdCUnliTGFnMUhCandzM29K YjEvMC9CNDFENkE5QzVGRDgxRjUxQzRGNUU3M0U1OTRGMENGMEM5OTlCODQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MUQ2QTlDNUZEODFGNTFD NEY1RTczRTU5NEYwQ0YwQzk5OUI4NDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M5SEtLUVRvMWdjY1ZWa1dtNGtZSDdCY2ZHQlJ5YkxhZzFIQmp3czNvSmIxLzAv MzIzODMwMzQzYTM1MzIzOTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM1MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUpzAMA0GCSqGSIb3DQEBCwUA A4IBAQAAOMb6suvmde9M7lQAcjW1q5ev15gWr4FFE8UJ1YKsSAAe01Tp9Hd7u7hp 7CRVtBtsov+0+ZiN+223g75kYMcXHYHXZIR7998lPiPHdeepSzEwwVDXKmCRXr3w Uni4pLBGJkEbN5VogxkQM0fJDhDVAHzpcomHlFEmpwe5zGe9+G5kqwaSqvJBwjnW //AxiqQ0rLzIZqjh46ISl0QyKfpmZ/9+U2RIfYa9HVkts8CWiiUs79hdJginuMZi GANc/sW/BAxRcZ0sgmi8gnbTGgY3jLm7Elrqx2l5BtPxYVES3BOyppnP5JRTKRUV z/mopix26Lo3vxdFCqn4Y2lUoxDU -----END CERTIFICATE-----Generated at Sun Jan 25 21:32:14 2026 by rpki-client