This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a343366343a3a2f33322d3438203d3e20323632393037.roa File: 323830343a343366343a3a2f33322d3438203d3e20323632393037.roa (raw, json) Hash identifier: glqMFPuQBOka3yW/4R9Z2qxrtSWOKbJihYI3eIbf/2M= Subject key identifier: EE:76:00:8E:CA:DA:D0:66:2B:3B:56:F1:DA:02:F3:EC:4B:C9:F5:58 Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Certificate serial: 3607D25142A8AF018D28821BAB80478CB29A1C94 Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a343366343a3a2f33322d3438203d3e20323632393037.roa Signing time: Mon 19 Jan 2026 17:34:06 +0000 ROA not before: Mon 19 Jan 2026 17:29:06 +0000 ROA not after: Mon 18 Jan 2027 17:34:06 +0000 asID: 262907 IP address blocks: 2804:43f4::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 18:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:07:d2:51:42:a8:af:01:8d:28:82:1b:ab:80:47:8c:b2:9a:1c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Validity Not Before: Jan 19 17:29:06 2026 GMT Not After : Jan 18 17:34:06 2027 GMT Subject: CN=EE76008ECADAD0662B3B56F1DA02F3EC4BC9F558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:bf:25:1a:4c:ef:84:06:b6:41:f3:8b:99: 43:7a:34:07:74:0c:34:d1:3f:75:2d:f6:f0:b8:17: 01:f3:45:79:9f:74:58:ef:17:0f:ad:69:82:a0:96: 79:6b:17:60:15:19:cb:2a:c0:96:e1:19:4c:3b:14: 8f:21:9e:9f:59:cb:2c:ed:32:e0:bd:6d:a0:33:80: 18:96:29:8d:97:25:bd:24:c8:57:dc:d1:f8:44:53: d0:e8:b1:7e:28:98:2a:51:d3:35:99:5a:86:b7:89: 9c:6b:0d:55:f2:2d:5c:69:14:d1:2f:80:8b:ee:a1: e1:3f:2d:e6:ee:2d:05:04:fa:06:7b:17:c4:d9:ba: d1:9d:d5:69:71:7b:a3:03:7a:49:8e:62:87:c0:a4: 9c:8d:6b:fb:27:67:c5:58:b6:ca:c7:fc:61:27:f6: a7:c9:bd:97:23:fd:f5:9c:7f:0f:d6:ec:46:f6:8c: 98:3e:e7:73:f3:ef:80:37:4c:a1:75:f0:ee:98:63: dc:6d:81:57:72:2c:44:82:05:94:ff:03:68:76:c2: 76:04:7f:f1:d6:8f:c4:26:78:0e:61:4c:d1:99:85: b9:61:ad:53:ba:3a:54:65:df:34:35:f8:d5:64:41: c6:b9:89:0b:b4:c2:42:b6:ae:38:d2:bf:37:e9:14: cf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:76:00:8E:CA:DA:D0:66:2B:3B:56:F1:DA:02:F3:EC:4B:C9:F5:58 X509v3 Authority Key Identifier: keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a343366343a3a2f33322d3438203d3e20323632393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:43f4::/32 Signature Algorithm: sha256WithRSAEncryption 79:57:e0:4b:e8:31:18:c5:ce:8e:83:7d:4c:a2:1f:fc:c0:dc: ae:f7:a3:26:12:4d:94:5b:5f:bb:e6:00:2d:4b:ff:73:f1:47: 4a:8d:14:e1:b0:44:e7:2d:a3:d6:36:1b:fc:4c:de:66:e8:0e: 0a:b5:b1:7c:db:7d:a3:d1:af:10:ba:be:da:34:91:aa:11:e7: da:9e:ee:25:d2:a7:f8:0e:1b:3d:9e:03:f1:7c:20:21:9d:6f: 2a:e1:0c:7c:79:c6:37:74:45:ea:07:64:da:ae:6b:a5:41:f8: 57:54:73:ae:ec:10:db:5e:59:de:52:db:0d:42:e2:2d:f0:1f: fa:d3:73:85:16:de:26:05:81:6b:bc:6c:90:b4:68:ee:4e:df: 4b:a3:4c:d3:c6:31:d3:c0:11:0c:9f:55:62:d5:d7:64:fa:52: ca:b8:45:2d:46:67:de:e4:69:14:39:a2:f0:9a:04:7e:52:bc: c9:d4:41:49:78:21:fc:17:83:25:c2:f8:2b:01:e9:4f:d1:a8: d1:6f:5d:a9:ec:b8:a4:96:46:28:74:83:c2:b9:7f:62:3e:65: 70:3c:a4:89:25:4b:07:d5:d3:5e:7b:b2:e5:d1:26:e0:47:ef: 95:b5:7e:a0:06:2d:bd:36:5a:42:ac:d0:4f:c4:ea:83:c7:65: eb:df:1b:f2 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUNgfSUUKorwGNKIIbq4BHjLKaHJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5 MDkzODQ1ODAeFw0yNjAxMTkxNzI5MDZaFw0yNzAxMTgxNzM0MDZaMDMxMTAvBgNV BAMTKEVFNzYwMDhFQ0FEQUQwNjYyQjNCNTZGMURBMDJGM0VDNEJDOUY1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFb8lGkzvhAa2QfOLmUN6NAd0 DDTRP3Ut9vC4FwHzRXmfdFjvFw+taYKglnlrF2AVGcsqwJbhGUw7FI8hnp9Zyyzt MuC9baAzgBiWKY2XJb0kyFfc0fhEU9DosX4omCpR0zWZWoa3iZxrDVXyLVxpFNEv gIvuoeE/LebuLQUE+gZ7F8TZutGd1Wlxe6MDekmOYofApJyNa/snZ8VYtsrH/GEn 9qfJvZcj/fWcfw/W7Eb2jJg+53Pz74A3TKF18O6YY9xtgVdyLESCBZT/A2h2wnYE f/HWj8QmeA5hTNGZhblhrVO6OlRl3zQ1+NVkQca5iQu0wkK2rjjSvzfpFM/JAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU7nYAjsra0GYrO1bx2gLz7EvJ9VgwHwYDVR0j BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0 SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv MzIzODMwMzQzYTM0MzM2NjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARD9DANBgkqhkiG9w0BAQsFAAOCAQEAeVfgS+gx GMXOjoN9TKIf/MDcrvejJhJNlFtfu+YALUv/c/FHSo0U4bBE5y2j1jYb/EzeZugO CrWxfNt9o9GvELq+2jSRqhHn2p7uJdKn+A4bPZ4D8XwgIZ1vKuEMfHnGN3RF6gdk 2q5rpUH4V1RzruwQ215Z3lLbDULiLfAf+tNzhRbeJgWBa7xskLRo7k7fS6NM08Yx 08ARDJ9VYtXXZPpSyrhFLUZn3uRpFDmi8JoEflK8ydRBSXgh/BeDJcL4KwHpT9Go 0W9dqey4pJZGKHSDwrl/Yj5lcDykiSVLB9XTXnuy5dEm4EfvlbV+oAYtvTZaQqzQ T8Tqg8dl698b8g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:40 2026 by rpki-client