This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a326439303a3a2f33322d3438203d3e20323632393037.roa File: 323830343a326439303a3a2f33322d3438203d3e20323632393037.roa (raw, json) Hash identifier: XHDvGVs4cBxnMiKfGoQmKDUGldktlcRSZbS8RwvUZC0= Subject key identifier: 70:BE:8B:C7:05:01:E7:0D:95:4F:B5:E4:22:52:A7:19:50:2F:C2:F0 Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Certificate serial: 6FA640200FA86AA0E58D6EE301DB7742900F619A Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a326439303a3a2f33322d3438203d3e20323632393037.roa Signing time: Thu 08 Jan 2026 12:13:32 +0000 ROA not before: Thu 08 Jan 2026 12:08:32 +0000 ROA not after: Thu 07 Jan 2027 12:13:32 +0000 asID: 262907 IP address blocks: 2804:2d90::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 18:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a6:40:20:0f:a8:6a:a0:e5:8d:6e:e3:01:db:77:42:90:0f:61:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Validity Not Before: Jan 8 12:08:32 2026 GMT Not After : Jan 7 12:13:32 2027 GMT Subject: CN=70BE8BC70501E70D954FB5E42252A719502FC2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:9d:52:42:88:5b:1f:0f:3e:91:c2:40:70: 44:5e:9d:46:f4:b6:e7:da:70:5d:ee:9d:59:2b:bd: 57:e5:83:cb:dc:ca:1e:34:92:17:91:c4:b7:1b:dc: 21:1b:0f:13:f5:0a:d2:3e:c4:e9:b9:fa:4a:ad:88: b2:0d:49:b0:51:a2:55:99:c0:04:1c:d0:0b:22:6a: 0c:c6:9b:9f:31:75:9c:ba:08:ae:ba:a8:69:9a:7a: 3b:4e:92:a1:da:ce:7f:00:c5:b5:a3:f0:a0:88:11: a0:6d:dc:1e:42:ed:8d:a4:a9:cb:d8:19:45:ed:8d: da:3c:79:5f:20:08:62:b4:fc:c4:dc:b3:ef:cf:0b: 2a:a4:13:80:2c:9f:8f:7b:13:8d:8e:fc:f8:c8:58: 94:61:49:e2:16:95:b9:0e:c5:c0:65:9f:00:1e:b8: e0:2e:85:72:e3:de:dd:8a:ab:b7:20:23:9c:16:5d: 47:22:54:63:55:e7:d4:fb:83:27:8a:ca:54:98:ce: 26:fc:93:29:60:65:ac:cf:74:a4:41:4b:8b:08:ea: 08:5e:3d:b1:0a:db:89:de:0d:b5:dd:48:ad:26:86: e9:c2:02:f4:2b:48:11:5f:36:35:09:66:98:1d:e6: 48:b3:28:df:1a:d9:9a:b0:4c:17:81:eb:d1:02:f7: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BE:8B:C7:05:01:E7:0D:95:4F:B5:E4:22:52:A7:19:50:2F:C2:F0 X509v3 Authority Key Identifier: keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a326439303a3a2f33322d3438203d3e20323632393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2d90::/32 Signature Algorithm: sha256WithRSAEncryption 56:d5:a4:57:e8:e8:a5:3c:55:96:57:70:09:f8:d7:b6:3f:50: bd:6e:4a:ea:36:a9:9e:fd:fc:ff:27:2d:75:23:a5:f2:76:0d: 32:8b:86:e6:fa:26:fa:9b:ee:47:65:f1:8f:cd:3d:c6:f9:7a: 8d:9b:68:a4:f9:d8:7c:2d:7c:03:8d:f9:72:e9:3e:6b:a2:4d: f6:d4:39:16:a0:3c:40:ae:50:05:de:e0:d6:e5:ed:de:16:dd: 79:62:5c:7d:5d:8a:75:ed:2c:39:9f:63:65:fc:c9:77:87:8e: 42:87:c8:f4:2f:52:22:4b:67:99:83:f5:80:60:91:5d:8b:6d: 85:fc:03:88:c3:b9:e9:0a:c5:6b:b5:30:83:0a:74:56:ab:21: dc:86:ed:80:89:f8:fa:fc:2f:f7:09:29:19:0a:34:a3:7d:4a: d8:ae:4d:88:9f:36:7d:02:f1:4a:5d:9c:63:61:10:81:a3:aa: 8b:73:2d:ac:bd:c0:0a:28:00:67:7e:20:68:f1:06:cf:1f:be: fa:17:eb:c3:7f:2e:83:8d:fa:05:ef:64:c6:a5:6d:b5:1d:4f: 17:59:ae:48:39:25:d8:3c:4f:86:3e:7e:da:97:a2:0a:62:21: cb:7b:5a:eb:07:2d:6d:a9:8b:31:c5:a2:ab:4b:0d:e6:f9:25: 07:b1:ce:ad -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUb6ZAIA+oaqDljW7jAdt3QpAPYZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5 MDkzODQ1ODAeFw0yNjAxMDgxMjA4MzJaFw0yNzAxMDcxMjEzMzJaMDMxMTAvBgNV BAMTKDcwQkU4QkM3MDUwMUU3MEQ5NTRGQjVFNDIyNTJBNzE5NTAyRkMyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuV51SQohbHw8+kcJAcERenUb0 tufacF3unVkrvVflg8vcyh40kheRxLcb3CEbDxP1CtI+xOm5+kqtiLINSbBRolWZ wAQc0AsiagzGm58xdZy6CK66qGmaejtOkqHazn8AxbWj8KCIEaBt3B5C7Y2kqcvY GUXtjdo8eV8gCGK0/MTcs+/PCyqkE4Asn497E42O/PjIWJRhSeIWlbkOxcBlnwAe uOAuhXLj3t2Kq7cgI5wWXUciVGNV59T7gyeKylSYzib8kylgZazPdKRBS4sI6ghe PbEK24neDbXdSK0mhunCAvQrSBFfNjUJZpgd5kizKN8a2ZqwTBeB69EC9225AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUcL6LxwUB5w2VT7XkIlKnGVAvwvAwHwYDVR0j BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0 SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv MzIzODMwMzQzYTMyNjQzOTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQtkDANBgkqhkiG9w0BAQsFAAOCAQEAVtWkV+jo pTxVlldwCfjXtj9QvW5K6japnv38/yctdSOl8nYNMouG5vom+pvuR2Xxj809xvl6 jZtopPnYfC18A435cuk+a6JN9tQ5FqA8QK5QBd7g1uXt3hbdeWJcfV2Kde0sOZ9j ZfzJd4eOQofI9C9SIktnmYP1gGCRXYtthfwDiMO56QrFa7Uwgwp0Vqsh3IbtgIn4 +vwv9wkpGQo0o31K2K5NiJ82fQLxSl2cY2EQgaOqi3MtrL3ACigAZ34gaPEGzx++ +hfrw38ug436Be9kxqVttR1PF1muSDkl2DxPhj5+2peiCmIhy3ta6wctbamLMcWi q0sN5vklB7HOrQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:38 2026 by rpki-client