This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/323830343a346630303a3a2f33322d3438203d3e20323638323937.roa File: 323830343a346630303a3a2f33322d3438203d3e20323638323937.roa (raw, json) Hash identifier: oBRE7sgLRKJd3rwrbitY674j/Ht3i7tfE0uC1tcg1qk= Subject key identifier: 28:1A:86:90:13:CF:11:52:61:FE:D9:92:0F:8A:AE:58:65:F1:0F:BE Certificate issuer: /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22 Certificate serial: 698E63027F673EFCAC31114F71993F2655BE54B6 Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer Subject info access: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/323830343a346630303a3a2f33322d3438203d3e20323638323937.roa Signing time: Mon 12 Jan 2026 12:46:00 +0000 ROA not before: Mon 12 Jan 2026 12:41:00 +0000 ROA not after: Mon 11 Jan 2027 12:46:00 +0000 asID: 268297 IP address blocks: 2804:4f00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 12:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8e:63:02:7f:67:3e:fc:ac:31:11:4f:71:99:3f:26:55:be:54:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22 Validity Not Before: Jan 12 12:41:00 2026 GMT Not After : Jan 11 12:46:00 2027 GMT Subject: CN=281A869013CF115261FED9920F8AAE5865F10FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:22:dd:6e:89:f2:1f:02:f1:08:a9:1a:4f: 66:89:65:b4:71:93:16:ec:5b:27:c1:7a:63:83:be: c4:42:4c:13:45:ce:81:30:4f:8d:58:25:ff:84:1a: f0:6a:7b:4f:7d:6c:f0:b2:3e:5e:98:40:c3:95:92: 11:bf:2e:0d:26:ba:1c:43:45:af:e7:e1:bf:1e:dc: 84:a5:34:89:b2:35:d2:db:d9:9b:d6:33:ed:f0:a7: 4f:a8:b2:89:e5:b8:ea:60:67:8c:64:e3:ea:d8:57: 75:d8:85:d1:03:09:a0:51:0c:c6:f5:83:b8:fb:86: d7:f1:8a:2e:d0:b6:be:f2:72:3a:2e:28:2c:1c:4c: d3:9e:d6:a4:3f:a0:af:f0:7c:e7:c1:a0:dd:b8:fe: fb:b2:e3:65:a4:ae:d6:fc:df:7f:61:47:c7:fe:02: 0c:65:5b:04:d2:61:d6:f0:35:19:3d:88:bf:1b:30: 94:3a:78:3d:3a:2c:24:33:8a:cf:a2:4e:05:a2:61: 69:ad:b9:bc:91:09:28:d0:15:5f:4c:96:71:68:5d: 57:c3:45:fb:bb:42:53:50:9e:19:97:7e:e1:5c:80: e4:b9:82:6b:ce:18:93:64:09:24:18:84:8c:0b:a1: a7:94:c8:f8:43:4e:87:aa:57:83:45:d5:40:27:59: 91:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:86:90:13:CF:11:52:61:FE:D9:92:0F:8A:AE:58:65:F1:0F:BE X509v3 Authority Key Identifier: keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/323830343a346630303a3a2f33322d3438203d3e20323638323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4f00::/32 Signature Algorithm: sha256WithRSAEncryption 50:79:b3:e5:df:40:e3:11:7d:55:17:7f:4f:59:e2:1b:bc:53: 23:55:30:60:64:4f:b5:f0:c7:97:ef:c1:17:ca:5f:c8:50:06: 4d:b9:82:f3:e5:95:25:85:ad:8a:bc:b6:cd:3e:e3:9c:47:f6: 6e:4c:d1:9f:4a:83:25:1c:fe:72:f6:bf:59:0f:85:21:52:34: 7a:e3:3f:93:44:af:46:b7:f7:fd:17:dd:7f:ee:d1:5e:a4:73: 6e:e0:e7:99:0b:3a:ad:fd:e0:2a:dc:e8:09:34:b7:c1:fd:0d: f5:07:68:5f:6e:14:b8:01:7e:b1:2c:52:1e:67:9d:f3:ad:c1: bc:f9:cd:f4:55:8c:4d:e5:b2:cb:46:54:3a:2e:ae:bd:af:7b: 43:0c:e1:3c:8e:55:99:de:9a:dc:53:ae:fd:b1:11:e7:22:83: d2:38:41:2e:27:19:76:04:17:a0:5e:5f:7a:39:83:d3:62:d1: d9:f7:fd:5a:37:8a:f7:56:d4:ae:43:d9:40:c1:b3:14:a4:8e: ae:7b:07:86:05:9e:d1:3d:1f:8c:7d:33:89:f6:18:02:3a:71: bd:03:75:08:31:ae:26:cb:05:0e:96:5e:b7:bc:8c:84:51:6e: e4:11:cc:34:09:81:04:03:51:d9:d5:41:61:d9:86:57:a4:f6: 7a:35:2c:6b -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUaY5jAn9nPvysMRFPcZk/JlW+VLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDRDFGNzFDMkE4RTMzRDg4N0MwOTlFQkIwNDZBN0VC MTBDNkMyMjAeFw0yNjAxMTIxMjQxMDBaFw0yNzAxMTExMjQ2MDBaMDMxMTAvBgNV BAMTKDI4MUE4NjkwMTNDRjExNTI2MUZFRDk5MjBGOEFBRTU4NjVGMTBGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHiLdbonyHwLxCKkaT2aJZbRx kxbsWyfBemODvsRCTBNFzoEwT41YJf+EGvBqe099bPCyPl6YQMOVkhG/Lg0muhxD Ra/n4b8e3ISlNImyNdLb2ZvWM+3wp0+osonluOpgZ4xk4+rYV3XYhdEDCaBRDMb1 g7j7htfxii7Qtr7ycjouKCwcTNOe1qQ/oK/wfOfBoN24/vuy42Wkrtb8339hR8f+ AgxlWwTSYdbwNRk9iL8bMJQ6eD06LCQzis+iTgWiYWmtubyRCSjQFV9MlnFoXVfD Rfu7QlNQnhmXfuFcgOS5gmvOGJNkCSQYhIwLoaeUyPhDToeqV4NF1UAnWZFrAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUKBqGkBPPEVJh/tmSD4quWGXxD74wHwYDVR0j BBgwFoAUOM0fccKo4z2IfAmeuwRqfrEMbCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDN0dENUMW9YWDRrWUNvdGFzenh1a3VydUwxTjNZTk1DNFhzcjhvRHY2 dFYvMS8zOENEMUY3MUMyQThFMzNEODg3QzA5OUVCQjA0NkE3RUIxMEM2QzIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0QxRjcxQzJBOEUzM0Q4 ODdDMDk5RUJCMDQ2QTdFQjEwQzZDMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0QzdHRDVDFvWFg0a1lDb3Rhc3p4dWt1cnVMMU4zWU5NQzRYc3I4b0R2NnRWLzEv MzIzODMwMzQzYTM0NjYzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4 MzIzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARPADANBgkqhkiG9w0BAQsFAAOCAQEAUHmz5d9A 4xF9VRd/T1niG7xTI1UwYGRPtfDHl+/BF8pfyFAGTbmC8+WVJYWtiry2zT7jnEf2 bkzRn0qDJRz+cva/WQ+FIVI0euM/k0SvRrf3/Rfdf+7RXqRzbuDnmQs6rf3gKtzo CTS3wf0N9QdoX24UuAF+sSxSHmed863BvPnN9FWMTeWyy0ZUOi6uva97QwzhPI5V md6a3FOu/bER5yKD0jhBLicZdgQXoF5fejmD02LR2ff9WjeK91bUrkPZQMGzFKSO rnsHhgWe0T0fjH0zifYYAjpxvQN1CDGuJssFDpZet7yMhFFu5BHMNAmBBANR2dVB YdmGV6T2ejUsaw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:14:57 2026 by rpki-client