This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a323130303a3a2f34302d3430203d3e20323633363431.roa File: 323830343a313039343a323130303a3a2f34302d3430203d3e20323633363431.roa (raw, json) Hash identifier: MyzzxAlbQYN8HYCxZaEV3Jp0/nYsyA/xqxEu15xAICY= Subject key identifier: 61:C8:97:E6:FD:C4:33:24:59:79:6A:23:59:A5:E3:D0:C2:CE:23:DB Certificate issuer: /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Certificate serial: 2DC7EDB06C27AFE158A83BAC0C8FBA3B06792674 Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a323130303a3a2f34302d3430203d3e20323633363431.roa Signing time: Wed 21 Jan 2026 16:47:41 +0000 ROA not before: Wed 21 Jan 2026 16:42:41 +0000 ROA not after: Wed 20 Jan 2027 16:47:41 +0000 asID: 263641 IP address blocks: 2804:1094:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 10:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c7:ed:b0:6c:27:af:e1:58:a8:3b:ac:0c:8f:ba:3b:06:79:26:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Validity Not Before: Jan 21 16:42:41 2026 GMT Not After : Jan 20 16:47:41 2027 GMT Subject: CN=61C897E6FDC4332459796A2359A5E3D0C2CE23DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:69:b9:9b:e0:70:66:f8:13:43:64:3b:1e: e9:ea:99:b5:96:ab:46:0b:6d:88:82:0b:5e:2b:1e: b4:3d:cf:8f:4f:95:86:40:a6:8b:1c:a1:f2:c0:07: 3c:82:c3:71:95:a4:f0:28:d1:e0:3d:af:b4:f4:d8: a3:3b:54:6d:1a:00:f9:b8:34:38:73:60:db:ea:a2: 0a:c2:31:b9:52:f5:1b:28:2a:d2:92:f9:cc:8f:79: c4:f5:12:ad:7e:6c:6d:79:39:de:30:5a:39:b8:26: 5f:98:ac:54:f8:07:02:c1:22:05:be:b0:49:5e:ed: 91:22:9a:e3:dd:89:84:ca:61:7d:55:45:bf:08:c1: 6d:2d:65:c8:6b:5a:74:99:1f:23:39:33:7a:7a:38: f0:82:39:65:4a:27:ac:0b:f0:d2:5c:d6:36:c0:c9: 56:13:49:e6:70:f5:19:3a:49:7f:41:fd:78:24:19: 0d:86:0f:59:d1:3a:90:16:98:11:07:ff:6d:7d:12: bc:5a:e8:b7:3b:81:c3:c3:ad:97:c8:37:fe:41:d6: 73:0d:9e:43:b8:92:ef:c1:f7:d3:9a:36:cd:b5:d7: e5:18:bd:de:46:cc:f9:7c:cb:cd:45:2d:cc:bd:e2: 2b:d2:e8:b4:b0:33:e9:48:8e:59:40:7c:a0:45:72: d3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C8:97:E6:FD:C4:33:24:59:79:6A:23:59:A5:E3:D0:C2:CE:23:DB X509v3 Authority Key Identifier: keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a323130303a3a2f34302d3430203d3e20323633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1094:2100::/40 Signature Algorithm: sha256WithRSAEncryption bd:02:96:ac:a5:aa:5f:27:f2:9f:3e:c8:25:dd:b1:e9:4b:b6: 10:c9:92:a5:c6:54:13:3c:76:87:f9:ce:c6:ac:19:f7:18:70: eb:0c:40:c0:4e:83:e7:83:1f:55:e7:c1:d6:0d:d1:c9:3a:23: 9e:69:26:c2:b9:d9:28:f0:96:02:77:31:f7:8d:f7:cc:e1:3c: fc:9c:4f:93:09:a8:e8:0b:c1:19:e1:a4:34:dc:ef:d4:58:b7: d8:d1:0a:b1:f2:52:43:f6:d8:e8:59:08:c8:d0:ba:91:91:5c: da:be:55:a2:c3:0c:f1:cf:ac:31:5b:ce:7c:5c:c5:77:30:29: d8:d0:b2:a0:ae:6f:95:74:30:70:d6:f6:92:bb:20:4b:5d:d2: 5b:fb:b1:7f:65:a8:df:4f:b3:4e:9d:da:0e:27:b7:bb:8d:39: a1:53:46:f5:77:35:9c:7a:72:1d:3e:27:b5:b8:9f:46:79:4e: 9a:12:48:95:0b:11:27:99:ee:aa:be:52:08:3f:4d:fd:67:4c: a3:de:1c:38:fb:e8:4a:27:8f:f0:9d:dd:ca:f3:d5:db:39:1d: 36:00:98:9e:a4:57:41:51:ac:ff:a3:f6:dd:6d:e3:f7:39:74: 02:41:b3:8b:14:c5:3a:d1:71:57:43:c9:a3:d7:c0:d8:c3:8d: 2c:ec:0d:5b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIULcftsGwnr+FYqDusDI+6OwZ5JnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhEMkQzRDdDMkY3QTczRjhENUQyMkJDNTMwRDAyRjhB MzY0NDYxRjAeFw0yNjAxMjExNjQyNDFaFw0yNzAxMjAxNjQ3NDFaMDMxMTAvBgNV BAMTKDYxQzg5N0U2RkRDNDMzMjQ1OTc5NkEyMzU5QTVFM0QwQzJDRTIzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZWm5m+BwZvgTQ2Q7HunqmbWW q0YLbYiCC14rHrQ9z49PlYZAposcofLABzyCw3GVpPAo0eA9r7T02KM7VG0aAPm4 NDhzYNvqogrCMblS9RsoKtKS+cyPecT1Eq1+bG15Od4wWjm4Jl+YrFT4BwLBIgW+ sEle7ZEimuPdiYTKYX1VRb8IwW0tZchrWnSZHyM5M3p6OPCCOWVKJ6wL8NJc1jbA yVYTSeZw9Rk6SX9B/XgkGQ2GD1nROpAWmBEH/219Erxa6Lc7gcPDrZfIN/5B1nMN nkO4ku/B99OaNs211+UYvd5GzPl8y81FLcy94ivS6LSwM+lIjllAfKBFctPHAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUYciX5v3EMyRZeWojWaXj0MLOI9swHwYDVR0j BBgwFoAUaNLT18L3pz+NXSK8Uw0C+KNkRh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm a2EvMC82OEQyRDNEN0MyRjdBNzNGOEQ1RDIyQkM1MzBEMDJGOEEzNjQ0NjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RDJEM0Q3QzJGN0E3M0Y4 RDVEMjJCQzUzMEQwMkY4QTM2NDQ2MUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv MzIzODMwMzQzYTMxMzAzOTM0M2EzMjMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEJQhMA0GCSqGSIb3DQEBCwUA A4IBAQC9ApaspapfJ/KfPsgl3bHpS7YQyZKlxlQTPHaH+c7GrBn3GHDrDEDAToPn gx9V58HWDdHJOiOeaSbCudko8JYCdzH3jffM4Tz8nE+TCajoC8EZ4aQ03O/UWLfY 0Qqx8lJD9tjoWQjI0LqRkVzavlWiwwzxz6wxW858XMV3MCnY0LKgrm+VdDBw1vaS uyBLXdJb+7F/ZajfT7NOndoOJ7e7jTmhU0b1dzWcenIdPie1uJ9GeU6aEkiVCxEn me6qvlIIP039Z0yj3hw4++hKJ4/wnd3K89XbOR02AJiepFdBUaz/o/bdbeP3OXQC QbOLFMU60XFXQ8mj18DYw40s7A1b -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:48 2026 by rpki-client