This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/323830343a316235383a3a2f33322d3438203d3e203631373233.roa File: 323830343a316235383a3a2f33322d3438203d3e203631373233.roa (raw, json) Hash identifier: 2qQw1RRx7ZrD1NIxh1wm9oV+g5wzrWz3/GPFFbns0MU= Subject key identifier: 48:97:08:28:FD:C5:89:A2:A6:87:CB:6D:F2:0C:BA:46:F2:7B:28:F6 Certificate issuer: /CN=F8F717C76795A8AA5AB172A4E1895F2B3431F895 Certificate serial: 04961317DBD5B4EDAA5EDBCC42F999D1820BD20B Authority key identifier: F8:F7:17:C7:67:95:A8:AA:5A:B1:72:A4:E1:89:5F:2B:34:31:F8:95 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer Subject info access: rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/323830343a316235383a3a2f33322d3438203d3e203631373233.roa Signing time: Thu 08 Jan 2026 00:39:05 +0000 ROA not before: Thu 08 Jan 2026 00:34:05 +0000 ROA not after: Thu 07 Jan 2027 00:39:05 +0000 asID: 61723 IP address blocks: 2804:1b58::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.crl rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:96:13:17:db:d5:b4:ed:aa:5e:db:cc:42:f9:99:d1:82:0b:d2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F717C76795A8AA5AB172A4E1895F2B3431F895 Validity Not Before: Jan 8 00:34:05 2026 GMT Not After : Jan 7 00:39:05 2027 GMT Subject: CN=48970828FDC589A2A687CB6DF20CBA46F27B28F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a1:0a:01:c4:2b:1f:4e:d5:2e:24:4c:fb:50: 4b:2e:94:29:4a:df:cb:82:48:c3:dd:ee:da:01:d5: c8:1e:a3:9b:e3:13:59:d8:e5:df:84:fd:14:df:05: c6:78:d9:08:57:0a:73:ec:29:e4:ac:6a:d0:51:7d: 12:8b:2e:c0:88:17:a8:73:a1:23:bc:78:db:3d:c8: 68:fb:f2:e4:20:23:12:f0:60:eb:e7:f2:aa:78:ca: 63:47:36:ed:8f:43:a8:dd:28:cd:ff:02:38:4a:7e: 92:b2:7b:4e:a2:ba:86:b3:5c:26:69:6b:01:f6:21: a4:c5:ac:73:8d:22:ce:dd:36:6f:50:50:9e:ef:c8: 71:ad:f4:6d:30:5f:d9:c3:03:3f:90:ec:1b:71:4b: e0:18:84:bd:15:2c:ba:ea:34:90:cf:36:f4:1f:50: 92:6e:0c:d1:8b:44:0f:e0:b7:9e:4c:4a:b9:e0:77: ad:21:dd:18:93:97:9e:29:36:cf:1b:7b:ae:95:50: a7:69:ef:e8:b0:1e:80:14:40:36:85:ee:07:cb:82: ee:38:f6:b3:94:00:15:33:12:0b:bd:e1:d4:f7:ea: d0:74:e5:6e:55:27:55:cd:f4:54:f9:63:43:f6:e9: 69:64:aa:49:af:c9:0e:83:8a:4d:31:f8:c8:c3:5b: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:97:08:28:FD:C5:89:A2:A6:87:CB:6D:F2:0C:BA:46:F2:7B:28:F6 X509v3 Authority Key Identifier: keyid:F8:F7:17:C7:67:95:A8:AA:5A:B1:72:A4:E1:89:5F:2B:34:31:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/323830343a316235383a3a2f33322d3438203d3e203631373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1b58::/32 Signature Algorithm: sha256WithRSAEncryption b7:32:ca:53:e8:96:e0:58:84:69:28:ad:50:d7:eb:29:b7:bf: 65:79:79:9e:ee:d2:f3:c5:2d:15:9f:b1:f9:de:2d:14:3a:a9: e1:13:0e:37:27:f2:05:11:83:80:f3:c0:8c:f6:28:3d:37:2f: a3:34:90:7f:a1:63:c2:bf:9b:32:0d:41:2f:85:b7:c1:02:e2: 45:ee:e1:8f:8c:30:0f:a0:74:d4:a7:66:18:7d:0c:a1:58:53: 44:63:ef:37:96:e4:5b:69:c5:14:b1:20:4a:17:88:6e:e8:f9: 84:00:62:64:01:71:90:04:89:08:95:82:10:94:d1:51:8b:4d: cf:42:37:9b:40:b4:39:81:db:77:6f:e2:d4:f6:1c:46:45:20: c2:68:ce:86:c9:35:b9:85:b7:24:fd:98:ba:7b:0c:cf:83:24: ed:9c:f7:59:8d:21:50:29:de:af:08:21:8d:3d:5c:59:77:c0: 60:c3:6a:9f:f2:37:c2:a2:92:f5:97:30:71:6a:01:48:af:21: 95:96:a8:e5:52:b9:03:80:2c:0c:e9:11:a5:92:53:23:42:7a: 57:0d:0f:f2:c4:9f:65:a7:6a:ac:e4:f1:18:2e:c5:8a:e0:d3: 2d:f0:4e:80:d9:af:6c:85:03:af:04:b8:d9:a6:eb:8c:2f:fc: 9d:0c:df:c5 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUBJYTF9vVtO2qXtvMQvmZ0YIL0gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNzE3Qzc2Nzk1QThBQTVBQjE3MkE0RTE4OTVGMkIz NDMxRjg5NTAeFw0yNjAxMDgwMDM0MDVaFw0yNzAxMDcwMDM5MDVaMDMxMTAvBgNV BAMTKDQ4OTcwODI4RkRDNTg5QTJBNjg3Q0I2REYyMENCQTQ2RjI3QjI4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCboQoBxCsfTtUuJEz7UEsulClK 38uCSMPd7toB1cgeo5vjE1nY5d+E/RTfBcZ42QhXCnPsKeSsatBRfRKLLsCIF6hz oSO8eNs9yGj78uQgIxLwYOvn8qp4ymNHNu2PQ6jdKM3/AjhKfpKye06iuoazXCZp awH2IaTFrHONIs7dNm9QUJ7vyHGt9G0wX9nDAz+Q7BtxS+AYhL0VLLrqNJDPNvQf UJJuDNGLRA/gt55MSrngd60h3RiTl54pNs8be66VUKdp7+iwHoAUQDaF7gfLgu44 9rOUABUzEgu94dT36tB05W5VJ1XN9FT5Y0P26WlkqkmvyQ6Dik0x+MjDWzFVAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUSJcIKP3FiaKmh8tt8gy6RvJ7KPYwHwYDVR0j BBgwFoAU+PcXx2eVqKpasXKk4YlfKzQx+JUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREdndzNQMktDTG5hTVJ4aXBDUXRycWpIZkN4VnhKMUNNRUpkRU1rdkFO TmgvMC9GOEY3MTdDNzY3OTVBOEFBNUFCMTcyQTRFMTg5NUYyQjM0MzFGODk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4RjcxN0M3Njc5NUE4QUE1 QUIxNzJBNEUxODk1RjJCMzQzMUY4OTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RHZ3czUDJLQ0xuYU1SeGlwQ1F0cnFqSGZDeFZ4SjFDTUVKZEVNa3ZBTk5oLzAv MzIzODMwMzQzYTMxNjIzNTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM3 MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEG1gwDQYJKoZIhvcNAQELBQADggEBALcyylPoluBY hGkorVDX6ym3v2V5eZ7u0vPFLRWfsfneLRQ6qeETDjcn8gURg4DzwIz2KD03L6M0 kH+hY8K/mzINQS+Ft8EC4kXu4Y+MMA+gdNSnZhh9DKFYU0Rj7zeW5FtpxRSxIEoX iG7o+YQAYmQBcZAEiQiVghCU0VGLTc9CN5tAtDmB23dv4tT2HEZFIMJozobJNbmF tyT9mLp7DM+DJO2c91mNIVAp3q8IIY09XFl3wGDDap/yN8KikvWXMHFqAUivIZWW qOVSuQOALAzpEaWSUyNCelcND/LEn2Wnaqzk8RguxYrg0y3wToDZr2yFA68EuNmm 64wv/J0M38U= -----END CERTIFICATE-----Generated at Mon Jan 26 04:21:24 2026 by rpki-client