This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/323830343a363437383a3a2f33322d313238203d3e203533313233.roa File: 323830343a363437383a3a2f33322d313238203d3e203533313233.roa (raw, json) Hash identifier: wxsC4liSZfXXkMr1GniofDpAp/XN6D4Zl2a9LaOZ50s= Subject key identifier: 3A:8A:B4:B2:9B:EE:0A:87:A0:F0:E0:FE:F7:76:34:32:6B:7A:20:7E Certificate issuer: /CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193 Certificate serial: 2E3052A5FA06485DD315D35E27B5F79023F28C66 Authority key identifier: EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer Subject info access: rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/323830343a363437383a3a2f33322d313238203d3e203533313233.roa Signing time: Mon 29 Dec 2025 17:51:07 +0000 ROA not before: Mon 29 Dec 2025 17:46:07 +0000 ROA not after: Mon 28 Dec 2026 17:51:07 +0000 asID: 53123 IP address blocks: 2804:6478::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 20:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:30:52:a5:fa:06:48:5d:d3:15:d3:5e:27:b5:f7:90:23:f2:8c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193 Validity Not Before: Dec 29 17:46:07 2025 GMT Not After : Dec 28 17:51:07 2026 GMT Subject: CN=3A8AB4B29BEE0A87A0F0E0FEF77634326B7A207E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:1b:1e:f6:74:a4:27:6c:7d:1a:0a:0d:a3: b1:ff:c9:fe:0b:a5:e0:f5:3c:60:8a:bd:44:d0:4a: c0:f3:8a:2f:b1:80:89:b7:44:2a:9c:61:e5:be:e0: 11:c1:c0:8e:19:32:25:ee:58:96:f2:9e:1a:3d:31: 81:5f:e8:47:41:de:16:43:6d:19:76:4a:cf:62:a2: 3a:d0:e0:50:1a:61:04:24:b2:6c:b3:c0:86:cd:cb: 06:39:a3:a8:67:ab:14:b3:ef:31:a8:7e:59:a0:7f: 0d:82:f3:c4:c5:18:d7:0b:ef:93:e3:d6:f8:7b:1d: 4f:7b:91:61:38:bf:a2:a6:9e:f3:05:8e:e7:d0:18: de:74:9b:5e:6b:6b:42:22:c9:d9:20:3f:c5:c6:22: e6:ec:46:2a:b8:39:1b:c4:1f:f5:4a:25:46:34:06: a5:a0:0e:87:8f:63:43:43:99:0c:d5:32:15:fe:e1: f0:9b:2c:91:da:d1:f3:5b:43:26:c1:a4:92:52:c2: 91:77:01:7b:42:49:bf:34:05:e4:04:d2:40:55:aa: c1:90:a5:da:71:e4:1f:34:7a:84:6b:2b:0e:22:bd: ed:63:8f:01:e5:ae:a1:1a:5c:e0:4a:fd:ca:92:d7: a7:95:4b:9c:43:50:ec:3e:98:26:c0:fc:04:62:03: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8A:B4:B2:9B:EE:0A:87:A0:F0:E0:FE:F7:76:34:32:6B:7A:20:7E X509v3 Authority Key Identifier: keyid:EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/323830343a363437383a3a2f33322d313238203d3e203533313233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6478::/32 Signature Algorithm: sha256WithRSAEncryption 36:00:72:76:18:8b:c6:71:47:27:8a:c3:9b:f6:1c:84:e7:dd: d1:f5:a2:5a:15:2c:da:de:96:99:9b:26:6a:04:02:39:f7:ef: d3:8d:41:fc:a2:7d:78:f8:37:b7:46:c7:96:1a:dc:4d:b7:d2: 56:d4:6d:78:5a:05:78:29:b5:db:7b:10:b1:5c:8d:da:b1:60: 1f:ed:f1:7b:0a:ef:1f:97:06:9c:9f:1f:5d:ed:9a:d0:96:d9: 50:27:3e:d8:c4:0d:a7:06:9f:ca:a0:7d:4d:37:bf:12:eb:b0: e8:ee:bc:10:85:bf:e0:57:59:77:28:96:4a:eb:40:8c:8b:01: d0:ae:e0:0c:60:15:e9:4b:3e:e6:2f:4a:12:3f:6d:bc:0c:b6: 12:88:75:20:d6:2a:80:c4:da:ad:9d:54:81:73:13:a6:61:56: b8:3a:d1:b4:0e:89:55:5e:d7:bb:4c:bd:b5:c3:6e:cf:0f:30: 52:a5:5a:a8:b9:0e:13:38:01:a4:03:69:e1:ee:14:c3:e7:27: 09:40:dd:9d:d7:77:c9:6a:59:f1:b6:5d:11:14:06:64:3e:02: e4:93:5a:8c:9b:86:42:2a:ef:30:6f:f7:9f:b5:87:fb:0b:b7: bb:0d:02:60:90:1b:7e:e1:38:d0:d2:ee:91:08:1c:64:15:57: db:df:19:ca -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIULjBSpfoGSF3TFdNeJ7X3kCPyjGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJDNThBRThCQUZFREEwQkI3MUZDNEU2NDUxOUY3NTZF MUZFNzE5MzAeFw0yNTEyMjkxNzQ2MDdaFw0yNjEyMjgxNzUxMDdaMDMxMTAvBgNV BAMTKDNBOEFCNEIyOUJFRTBBODdBMEYwRTBGRUY3NzYzNDMyNkI3QTIwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ohse9nSkJ2x9GgoNo7H/yf4L peD1PGCKvUTQSsDzii+xgIm3RCqcYeW+4BHBwI4ZMiXuWJbynho9MYFf6EdB3hZD bRl2Ss9iojrQ4FAaYQQksmyzwIbNywY5o6hnqxSz7zGoflmgfw2C88TFGNcL75Pj 1vh7HU97kWE4v6KmnvMFjufQGN50m15ra0IiydkgP8XGIubsRiq4ORvEH/VKJUY0 BqWgDoePY0NDmQzVMhX+4fCbLJHa0fNbQybBpJJSwpF3AXtCSb80BeQE0kBVqsGQ pdpx5B80eoRrKw4ive1jjwHlrqEaXOBK/cqS16eVS5xDUOw+mCbA/ARiA+YrAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUOoq0spvuCoeg8OD+93Y0Mmt6IH4wHwYDVR0j BBgwFoAU68WK6Lr+2gu3H8TmRRn3VuH+cZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1VhQjJYcjduWFBSckhZRUZ1NXd3QlZuWDJ0d0M4a2RYVDg2aHVVZmRV Z3gvMC9FQkM1OEFFOEJBRkVEQTBCQjcxRkM0RTY0NTE5Rjc1NkUxRkU3MTkzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCQzU4QUU4QkFGRURBMEJC NzFGQzRFNjQ1MTlGNzU2RTFGRTcxOTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dVYUIyWHI3blhQUnJIWUVGdTV3d0JWblgydHdDOGtkWFQ4Nmh1VWZkVWd4LzAv MzIzODMwMzQzYTM2MzQzNzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMz MzEzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARkeDANBgkqhkiG9w0BAQsFAAOCAQEANgBydhiL xnFHJ4rDm/YchOfd0fWiWhUs2t6WmZsmagQCOffv041B/KJ9ePg3t0bHlhrcTbfS VtRteFoFeCm123sQsVyN2rFgH+3xewrvH5cGnJ8fXe2a0JbZUCc+2MQNpwafyqB9 TTe/Euuw6O68EIW/4FdZdyiWSutAjIsB0K7gDGAV6Us+5i9KEj9tvAy2Eoh1INYq gMTarZ1UgXMTpmFWuDrRtA6JVV7Xu0y9tcNuzw8wUqVaqLkOEzgBpANp4e4Uw+cn CUDdndd3yWpZ8bZdERQGZD4C5JNajJuGQirvMG/3n7WH+wu3uw0CYJAbfuE40NLu kQgcZBVX298Zyg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:21 2026 by rpki-client