This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a323030303a3a2f34302d3430203d3e20323633363431.roa File: 323830343a313039343a323030303a3a2f34302d3430203d3e20323633363431.roa (raw, json) Hash identifier: 0xW+0rFrsuxpQ4N8RQJlEwnv0LlFAFi8i+7u8S8CM4Y= Subject key identifier: 30:80:AC:0A:1D:B5:96:D4:6B:E8:BB:E0:08:65:AD:61:12:82:0E:CA Certificate issuer: /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Certificate serial: 351B598007E6319152A9501FFFBCCD5CBA35BC59 Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a323030303a3a2f34302d3430203d3e20323633363431.roa Signing time: Wed 21 Jan 2026 16:47:41 +0000 ROA not before: Wed 21 Jan 2026 16:42:41 +0000 ROA not after: Wed 20 Jan 2027 16:47:41 +0000 asID: 263641 IP address blocks: 2804:1094:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 10:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1b:59:80:07:e6:31:91:52:a9:50:1f:ff:bc:cd:5c:ba:35:bc:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Validity Not Before: Jan 21 16:42:41 2026 GMT Not After : Jan 20 16:47:41 2027 GMT Subject: CN=3080AC0A1DB596D46BE8BBE00865AD6112820ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:a9:ce:29:6b:de:9c:b7:bd:f3:99:c4:52: 1c:c9:2b:ef:83:37:65:f6:88:77:20:10:f4:19:31: d3:2e:c4:4d:71:99:62:60:df:7d:01:e1:64:13:8b: 26:09:27:63:b9:74:bb:ff:ef:c1:63:0e:a8:ca:8a: 7f:b5:d8:15:e9:56:11:0e:d3:9b:44:37:00:d8:08: e5:b9:60:be:cd:c1:c4:23:3e:e0:fa:e1:cf:d1:81: cf:a3:2a:e1:17:e6:9d:eb:ba:70:13:f9:86:06:0f: 19:26:f2:33:e3:b5:af:a1:f2:31:61:70:ed:6a:ca: 42:0a:d6:13:06:d1:be:4b:ae:f7:8f:89:df:c9:4a: 1f:01:c9:e9:55:18:4b:73:c2:d6:5b:03:71:d0:f7: fa:52:58:78:65:1e:3a:26:57:56:f0:f9:82:d2:a4: 02:b3:70:55:47:9b:84:25:f7:9e:03:2f:19:31:4c: 24:80:18:73:18:1c:84:80:8b:7f:eb:04:ef:0f:3e: ad:af:53:3f:82:5d:f1:4d:eb:f4:68:d7:0a:ed:02: 90:05:68:9c:2d:53:84:5c:a2:3c:ee:ae:fd:5b:65: 88:2f:07:46:3f:29:c6:7f:42:12:ac:0b:a9:af:ab: 4d:b0:c0:59:b7:12:37:ed:55:12:3f:14:63:65:ad: 1b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:80:AC:0A:1D:B5:96:D4:6B:E8:BB:E0:08:65:AD:61:12:82:0E:CA X509v3 Authority Key Identifier: keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a323030303a3a2f34302d3430203d3e20323633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1094:2000::/40 Signature Algorithm: sha256WithRSAEncryption 26:c9:f3:d2:da:85:d3:8c:a8:90:03:e9:35:4f:e9:4a:1d:84: 31:43:87:ff:f3:63:ca:77:ee:10:d4:26:51:93:1b:2e:97:1c: 2f:d4:76:fe:90:bb:4c:d2:5f:5d:dc:91:75:99:35:a7:49:59: 35:99:ed:ca:0e:a2:01:7b:b5:39:e8:50:cf:42:79:a9:bf:70: ae:10:d2:09:dd:f7:d7:f2:f7:bd:2b:78:46:46:07:e6:5e:f3: a6:0a:94:0a:c7:3c:6a:84:d4:0c:4d:21:4a:25:97:2d:28:59: 30:62:0b:1b:da:dc:e8:2b:ed:35:13:c7:17:c6:f6:7f:b1:25: b5:5b:cd:b9:02:54:1d:36:aa:f7:2b:8d:2c:96:b8:90:98:77: 75:5d:34:87:2c:cb:e0:01:8a:11:c6:b6:9b:19:4e:59:6d:fa: 9a:7c:06:c6:e4:4e:23:07:be:0f:ea:27:64:72:62:76:6d:b8: 8a:63:1c:66:1c:5a:45:6b:16:96:8e:a3:23:ab:c3:02:b9:24: b3:94:45:82:63:a6:37:c9:19:a0:36:e4:7f:9d:aa:a7:d2:04: cc:3f:06:c9:85:04:0a:ca:5e:37:a8:db:c1:2e:a2:66:5f:4e: 6f:74:ae:07:dd:16:36:f9:e0:53:1b:f3:36:5a:ba:7e:b4:40: 55:18:03:22 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUNRtZgAfmMZFSqVAf/7zNXLo1vFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhEMkQzRDdDMkY3QTczRjhENUQyMkJDNTMwRDAyRjhB MzY0NDYxRjAeFw0yNjAxMjExNjQyNDFaFw0yNzAxMjAxNjQ3NDFaMDMxMTAvBgNV BAMTKDMwODBBQzBBMURCNTk2RDQ2QkU4QkJFMDA4NjVBRDYxMTI4MjBFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9qnOKWvenLe985nEUhzJK++D N2X2iHcgEPQZMdMuxE1xmWJg330B4WQTiyYJJ2O5dLv/78FjDqjKin+12BXpVhEO 05tENwDYCOW5YL7NwcQjPuD64c/Rgc+jKuEX5p3runAT+YYGDxkm8jPjta+h8jFh cO1qykIK1hMG0b5LrvePid/JSh8ByelVGEtzwtZbA3HQ9/pSWHhlHjomV1bw+YLS pAKzcFVHm4Ql954DLxkxTCSAGHMYHISAi3/rBO8PPq2vUz+CXfFN6/Ro1wrtApAF aJwtU4Rcojzurv1bZYgvB0Y/KcZ/QhKsC6mvq02wwFm3EjftVRI/FGNlrRvZAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUMICsCh21ltRr6LvgCGWtYRKCDsowHwYDVR0j BBgwFoAUaNLT18L3pz+NXSK8Uw0C+KNkRh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm a2EvMC82OEQyRDNEN0MyRjdBNzNGOEQ1RDIyQkM1MzBEMDJGOEEzNjQ0NjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RDJEM0Q3QzJGN0E3M0Y4 RDVEMjJCQzUzMEQwMkY4QTM2NDQ2MUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv MzIzODMwMzQzYTMxMzAzOTM0M2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEJQgMA0GCSqGSIb3DQEBCwUA A4IBAQAmyfPS2oXTjKiQA+k1T+lKHYQxQ4f/82PKd+4Q1CZRkxsulxwv1Hb+kLtM 0l9d3JF1mTWnSVk1me3KDqIBe7U56FDPQnmpv3CuENIJ3ffX8ve9K3hGRgfmXvOm CpQKxzxqhNQMTSFKJZctKFkwYgsb2tzoK+01E8cXxvZ/sSW1W825AlQdNqr3K40s lriQmHd1XTSHLMvgAYoRxrabGU5ZbfqafAbG5E4jB74P6idkcmJ2bbiKYxxmHFpF axaWjqMjq8MCuSSzlEWCY6Y3yRmgNuR/naqn0gTMPwbJhQQKyl43qNvBLqJmX05v dK4H3RY2+eBTG/M2Wrp+tEBVGAMi -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:51 2026 by rpki-client