This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a383030303a3a2f33362d3336203d3e20323633343536.roa File: 323830343a313231383a383030303a3a2f33362d3336203d3e20323633343536.roa (raw, json) Hash identifier: Zw5jhsv+MsM0aamihmRzPtAakRh5p0uN6CXKf1aV1E4= Subject key identifier: B4:5C:20:D0:9A:55:9B:8A:D5:72:16:F4:E1:55:AC:84:4C:C6:C6:E5 Certificate issuer: /CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C Certificate serial: 0489F234A98D8EB62224D7A8397879F21F78F695 Authority key identifier: 1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer Subject info access: rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a383030303a3a2f33362d3336203d3e20323633343536.roa Signing time: Wed 31 Dec 2025 13:13:17 +0000 ROA not before: Wed 31 Dec 2025 13:08:17 +0000 ROA not after: Wed 30 Dec 2026 13:13:17 +0000 asID: 263456 IP address blocks: 2804:1218:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 15:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:89:f2:34:a9:8d:8e:b6:22:24:d7:a8:39:78:79:f2:1f:78:f6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C Validity Not Before: Dec 31 13:08:17 2025 GMT Not After : Dec 30 13:13:17 2026 GMT Subject: CN=B45C20D09A559B8AD57216F4E155AC844CC6C6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:86:4d:b0:a5:8a:45:9d:da:64:bf:83:b0: 0e:ba:94:bd:c6:81:25:c2:34:fc:1f:e8:b9:95:54: e0:96:31:a8:5c:6a:54:30:90:32:8b:74:0a:27:f5: f8:ef:a3:59:5d:3c:9f:ba:4c:48:4d:11:8b:32:33: 81:1b:2d:a5:bb:58:23:73:43:a9:cc:8d:e5:8d:ae: c0:83:8e:f5:f8:db:04:91:2c:6f:32:e7:70:e1:9b: 27:60:b2:e1:0d:65:82:28:a7:87:a8:37:86:77:5c: 65:d4:7e:2a:2f:46:0d:2a:af:0c:03:ab:59:6f:e3: 67:ee:8c:ad:68:ee:0e:af:fb:85:a0:d9:dc:77:a5: 59:aa:21:c0:78:94:e3:bc:a9:52:a3:3a:f6:aa:0a: 37:17:62:cf:03:41:f3:46:ce:de:e6:2b:34:33:6a: bc:c7:36:e1:68:70:ac:c5:1c:bf:da:c4:16:63:17: 1b:6e:37:14:37:58:20:05:bf:9b:be:b4:0c:a5:17: 75:4e:6d:ef:d2:9f:52:9d:7d:61:e8:9e:2c:b2:91: 30:ac:1e:d9:27:fa:3c:6d:be:c8:a6:bb:4f:62:7d: c6:be:59:59:61:09:a0:e5:4d:09:32:48:2c:44:9a: 4a:7b:fe:57:57:90:48:64:9e:a4:2d:96:87:09:53: 0f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5C:20:D0:9A:55:9B:8A:D5:72:16:F4:E1:55:AC:84:4C:C6:C6:E5 X509v3 Authority Key Identifier: keyid:1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a383030303a3a2f33362d3336203d3e20323633343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1218:8000::/36 Signature Algorithm: sha256WithRSAEncryption 59:c3:63:4a:5c:f1:3b:5a:89:ca:c1:c1:80:6d:63:f5:9d:76: 51:1f:24:b9:3a:a6:da:3f:32:ec:48:10:55:a4:0f:37:ae:67: 67:65:c6:af:b6:34:bf:bf:be:ac:72:63:da:59:c6:da:41:8b: d1:ac:eb:76:b0:aa:bb:1b:2b:18:86:60:30:4c:62:49:1e:3d: a6:e0:ef:9b:34:2f:d0:04:51:1e:c1:ad:e4:e1:f2:e1:1a:a5: 5f:70:15:00:71:4e:c6:3e:26:1b:db:c6:e8:9e:79:cb:ee:85: 92:0c:5c:a3:a2:b6:26:61:e2:b0:d1:a3:de:ef:22:b9:70:98: 5c:66:72:17:32:88:4c:e9:1b:a9:dd:6e:36:ab:37:71:f2:16: bc:ec:1b:de:73:95:f0:12:9b:c4:3f:3e:91:d4:1a:75:b0:13: 4b:14:34:37:a3:3e:17:e6:0e:da:fa:a6:ae:9c:97:25:e2:55: 48:40:b4:99:64:4c:e1:1c:f3:62:20:6c:0e:3a:1e:0d:fb:8e: 10:ef:02:fa:41:c5:ad:ae:62:a2:ca:70:db:e8:42:64:c8:cd: e7:bb:9e:46:ec:97:5b:05:fc:ac:44:52:88:5e:46:2f:0f:21: fa:64:16:30:83:a0:a9:9e:24:a8:a1:66:78:b1:47:5d:1e:f1: 00:f8:39:36 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUBInyNKmNjrYiJNeoOXh58h949pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NUFBMjA3MzIyQzNFMzE0NkM0REY0RDQzMTU5M0Qx NUJERUQ2QzAeFw0yNTEyMzExMzA4MTdaFw0yNjEyMzAxMzEzMTdaMDMxMTAvBgNV BAMTKEI0NUMyMEQwOUE1NTlCOEFENTcyMTZGNEUxNTVBQzg0NENDNkM2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyt4ZNsKWKRZ3aZL+DsA66lL3G gSXCNPwf6LmVVOCWMahcalQwkDKLdAon9fjvo1ldPJ+6TEhNEYsyM4EbLaW7WCNz Q6nMjeWNrsCDjvX42wSRLG8y53DhmydgsuENZYIop4eoN4Z3XGXUfiovRg0qrwwD q1lv42fujK1o7g6v+4Wg2dx3pVmqIcB4lOO8qVKjOvaqCjcXYs8DQfNGzt7mKzQz arzHNuFocKzFHL/axBZjFxtuNxQ3WCAFv5u+tAylF3VObe/Sn1KdfWHoniyykTCs Htkn+jxtvsimu09ifca+WVlhCaDlTQkySCxEmkp7/ldXkEhknqQtlocJUw/BAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUtFwg0JpVm4rVchb04VWshEzGxuUwHwYDVR0j BBgwFoAUHWWqIHMiw+MUbE301DFZPRW97WwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUt5NERVdUxpMnVoVGtLc1lSSGVXZXBqbWRQTjFXVmpHcFZhZEFva2dy bTMvMC8xRDY1QUEyMDczMjJDM0UzMTQ2QzRERjRENDMxNTkzRDE1QkRFRDZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFENjVBQTIwNzMyMkMzRTMx NDZDNERGNEQ0MzE1OTNEMTVCREVENkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VLeTREVXVMaTJ1aFRrS3NZUkhlV2Vwam1kUE4xV1ZqR3BWYWRBb2tncm0zLzAv MzIzODMwMzQzYTMxMzIzMTM4M2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzM0MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEhiAMA0GCSqGSIb3DQEBCwUA A4IBAQBZw2NKXPE7WonKwcGAbWP1nXZRHyS5OqbaPzLsSBBVpA83rmdnZcavtjS/ v76scmPaWcbaQYvRrOt2sKq7GysYhmAwTGJJHj2m4O+bNC/QBFEewa3k4fLhGqVf cBUAcU7GPiYb28bonnnL7oWSDFyjorYmYeKw0aPe7yK5cJhcZnIXMohM6Rup3W42 qzdx8ha87Bvec5XwEpvEPz6R1Bp1sBNLFDQ3oz4X5g7a+qaunJcl4lVIQLSZZEzh HPNiIGwOOh4N+44Q7wL6QcWtrmKiynDb6EJkyM3nu55G7JdbBfysRFKIXkYvDyH6 ZBYwg6CpniSooWZ4sUddHvEA+Dk2 -----END CERTIFICATE-----Generated at Mon Jan 26 04:21:26 2026 by rpki-client