This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/323830343a3937303a3a2f33322d3438203d3e20323633303836.roa File: 323830343a3937303a3a2f33322d3438203d3e20323633303836.roa (raw, json) Hash identifier: Kx05sHTE+LNnP6XO1B5s2Cs3g5EvPwxkW08IslxDSFA= Subject key identifier: 9B:D5:B5:D3:F3:27:17:4D:AA:31:C6:69:47:92:10:5E:D7:F2:CD:1F Certificate issuer: /CN=40D5C3F55AE08CF30E4668447D1C5168A90E7C72 Certificate serial: 1BAA65DCEC799677008F9BAD391A6561D1AF5405 Authority key identifier: 40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/323830343a3937303a3a2f33322d3438203d3e20323633303836.roa Signing time: Mon 05 Jan 2026 18:30:06 +0000 ROA not before: Mon 05 Jan 2026 18:25:06 +0000 ROA not after: Mon 04 Jan 2027 18:30:06 +0000 asID: 263086 IP address blocks: 2804:970::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:aa:65:dc:ec:79:96:77:00:8f:9b:ad:39:1a:65:61:d1:af:54:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D5C3F55AE08CF30E4668447D1C5168A90E7C72 Validity Not Before: Jan 5 18:25:06 2026 GMT Not After : Jan 4 18:30:06 2027 GMT Subject: CN=9BD5B5D3F327174DAA31C6694792105ED7F2CD1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:2f:19:09:e9:31:ea:8b:db:26:ac:c0:3b: 2a:e7:98:6f:62:84:41:d1:e4:ce:cc:3e:5c:a8:14: be:56:7f:8f:33:da:98:1e:80:9c:a2:4c:89:c6:dd: 2f:ef:4b:b6:3e:fe:1f:dc:7c:b3:ea:1e:a6:61:94: cf:28:c4:41:73:d6:98:b7:9b:81:3b:10:17:38:22: bf:ea:ce:e2:e8:d4:f7:30:b3:53:80:b3:a6:96:42: 5d:ad:4a:6c:c0:07:1d:73:4c:be:2e:cb:40:b9:61: 00:c5:23:1e:81:99:58:57:cd:53:24:13:08:75:ec: 07:38:ff:58:c8:49:55:37:0c:d7:f4:4b:5d:99:af: a1:c2:70:64:45:71:0b:dd:62:60:b0:73:ca:c1:3e: c5:22:fe:f8:a1:d3:85:54:f8:d6:0e:e8:ad:8e:2b: 7a:49:90:0b:3b:9c:05:ae:6b:48:1f:02:38:86:c2: 95:cc:96:9d:c5:13:83:fc:96:0f:06:89:cd:f3:23: 86:66:70:f2:98:c3:9d:89:8c:a9:21:ec:75:47:9c: 9a:df:8c:19:6c:3c:36:ea:63:ab:99:15:20:6b:04: e2:ad:0a:63:e3:13:00:41:af:9a:a3:ca:9c:e8:8c: f5:e1:3a:17:a8:17:cf:df:65:3c:30:da:d8:b0:13: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D5:B5:D3:F3:27:17:4D:AA:31:C6:69:47:92:10:5E:D7:F2:CD:1F X509v3 Authority Key Identifier: keyid:40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/323830343a3937303a3a2f33322d3438203d3e20323633303836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:970::/32 Signature Algorithm: sha256WithRSAEncryption 9e:c1:00:0e:83:e1:a8:90:33:23:d5:eb:b5:04:db:44:31:3c: c0:06:f4:c2:31:f8:59:4f:1e:ca:67:2f:94:3c:94:b1:93:86: 18:0e:58:4e:53:60:a8:54:35:ab:99:ae:ed:6f:62:35:ca:64: 18:3b:dd:26:23:7a:b5:28:4a:fc:46:f5:cc:96:2c:b9:39:2e: 86:a3:98:19:2d:dd:30:02:95:54:bd:14:e9:34:b7:8b:d5:fe: 07:f6:54:a2:81:b2:24:07:59:c6:01:a2:38:04:2c:d9:0d:c0: 84:3c:26:b8:fc:c2:72:7f:70:a5:98:09:31:cc:81:8c:4a:e3: 81:10:fe:7a:2e:65:6a:29:e1:1b:a5:d7:95:db:f7:13:4c:8a: 8c:44:ff:d7:50:ed:6b:e6:8f:68:21:4e:ab:f3:c9:dd:c7:d7: ab:e5:cc:0e:a9:ad:b3:8f:13:18:37:e2:5d:d2:0f:8c:d5:d8: 61:76:8b:d0:1d:de:c6:9b:f6:ad:59:41:68:6e:56:4b:eb:4b: 7a:d1:2e:96:9c:f3:3b:96:3b:e6:50:df:7e:77:65:95:54:5a: 0a:4c:97:fc:82:d0:59:c1:8e:f7:fb:7b:cc:f7:a4:3b:55:79: ab:d3:43:02:35:f3:48:9b:aa:f4:8a:d1:73:b0:04:9b:de:54: 78:11:22:98 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUG6pl3Ox5lncAj5utORplYdGvVAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBENUMzRjU1QUUwOENGMzBFNDY2ODQ0N0QxQzUxNjhB OTBFN0M3MjAeFw0yNjAxMDUxODI1MDZaFw0yNzAxMDQxODMwMDZaMDMxMTAvBgNV BAMTKDlCRDVCNUQzRjMyNzE3NERBQTMxQzY2OTQ3OTIxMDVFRDdGMkNEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+i8ZCekx6ovbJqzAOyrnmG9i hEHR5M7MPlyoFL5Wf48z2pgegJyiTInG3S/vS7Y+/h/cfLPqHqZhlM8oxEFz1pi3 m4E7EBc4Ir/qzuLo1Pcws1OAs6aWQl2tSmzABx1zTL4uy0C5YQDFIx6BmVhXzVMk Ewh17Ac4/1jISVU3DNf0S12Zr6HCcGRFcQvdYmCwc8rBPsUi/vih04VU+NYO6K2O K3pJkAs7nAWua0gfAjiGwpXMlp3FE4P8lg8Gic3zI4ZmcPKYw52JjKkh7HVHnJrf jBlsPDbqY6uZFSBrBOKtCmPjEwBBr5qjypzojPXhOheoF8/fZTww2tiwEwipAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUm9W10/MnF02qMcZpR5IQXtfyzR8wHwYDVR0j BBgwFoAUQNXD9VrgjPMORmhEfRxRaKkOfHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5 bmQvMC80MEQ1QzNGNTVBRTA4Q0YzMEU0NjY4NDQ3RDFDNTE2OEE5MEU3QzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwRDVDM0Y1NUFFMDhDRjMw RTQ2Njg0NDdEMUM1MTY4QTkwRTdDNzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RVNko0N0NRY2RicnJHd0o2WFdNMkVHUmNtU1U1dDUzQnY2RVhMeXRoeW5kLzAv MzIzODMwMzQzYTM5MzczMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMw MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgECXAwDQYJKoZIhvcNAQELBQADggEBAJ7BAA6D4aiQ MyPV67UE20QxPMAG9MIx+FlPHspnL5Q8lLGThhgOWE5TYKhUNauZru1vYjXKZBg7 3SYjerUoSvxG9cyWLLk5LoajmBkt3TAClVS9FOk0t4vV/gf2VKKBsiQHWcYBojgE LNkNwIQ8Jrj8wnJ/cKWYCTHMgYxK44EQ/nouZWop4Rul15Xb9xNMioxE/9dQ7Wvm j2ghTqvzyd3H16vlzA6prbOPExg34l3SD4zV2GF2i9Ad3sab9q1ZQWhuVkvrS3rR Lpac8zuWO+ZQ3353ZZVUWgpMl/yC0FnBjvf7e8z3pDtVeavTQwI180ibqvSK0XOw BJveVHgRIpg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:34 2026 by rpki-client