This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GXaKfVS4Adr9aR1XfwxWd1hqX474XMGhmVeUv1z6Rgeg/0/323830343a323462633a3a2f33322d313238203d3e203532363935.roa File: 323830343a323462633a3a2f33322d313238203d3e203532363935.roa (raw, json) Hash identifier: a1POYHaAEOS2CnU1IUDEsP7EUqmJ8cR328oYBn1VASM= Subject key identifier: A5:B8:40:2A:5F:18:2F:06:8C:22:E1:BD:DC:EE:DD:94:EC:30:1E:74 Certificate issuer: /CN=16AC80BF1AC3A02FC2DA8E1AB5CF4F5B92120CE5 Certificate serial: 1B9AA14640D0A2C76FBBCB6FEF6F671E6E067126 Authority key identifier: 16:AC:80:BF:1A:C3:A0:2F:C2:DA:8E:1A:B5:CF:4F:5B:92:12:0C:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16AC80BF1AC3A02FC2DA8E1AB5CF4F5B92120CE5.cer Subject info access: rsync://rpki-repo.registro.br/repo/GXaKfVS4Adr9aR1XfwxWd1hqX474XMGhmVeUv1z6Rgeg/0/323830343a323462633a3a2f33322d313238203d3e203532363935.roa Signing time: Mon 19 Jan 2026 17:43:52 +0000 ROA not before: Mon 19 Jan 2026 17:38:52 +0000 ROA not after: Mon 18 Jan 2027 17:43:52 +0000 asID: 52695 IP address blocks: 2804:24bc::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GXaKfVS4Adr9aR1XfwxWd1hqX474XMGhmVeUv1z6Rgeg/0/16AC80BF1AC3A02FC2DA8E1AB5CF4F5B92120CE5.crl rsync://rpki-repo.registro.br/repo/GXaKfVS4Adr9aR1XfwxWd1hqX474XMGhmVeUv1z6Rgeg/0/16AC80BF1AC3A02FC2DA8E1AB5CF4F5B92120CE5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16AC80BF1AC3A02FC2DA8E1AB5CF4F5B92120CE5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9a:a1:46:40:d0:a2:c7:6f:bb:cb:6f:ef:6f:67:1e:6e:06:71:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16AC80BF1AC3A02FC2DA8E1AB5CF4F5B92120CE5 Validity Not Before: Jan 19 17:38:52 2026 GMT Not After : Jan 18 17:43:52 2027 GMT Subject: CN=A5B8402A5F182F068C22E1BDDCEEDD94EC301E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:64:a8:7b:12:1b:ac:69:e8:4d:33:5d:bb:2b: 1a:76:33:bd:63:2b:66:ff:42:e9:80:13:b7:c5:16: f3:d7:79:4e:52:82:6f:29:96:e8:80:e1:7b:bf:8c: f4:4a:ed:a8:0c:af:12:f8:7b:ba:f8:ec:e8:81:59: 7a:bb:ca:4a:69:73:8b:99:05:63:63:20:84:1c:b5: 07:30:1b:61:03:31:d5:c6:fe:85:d0:dc:4d:e1:8d: 6c:b7:9e:4c:8e:a1:05:5e:62:8d:25:39:3a:65:6e: f0:e6:87:a5:2d:fe:b1:a1:4d:7d:bd:3d:8a:27:42: 7b:d0:f4:b7:68:d7:cc:70:20:8a:6c:e1:2e:d6:23: 9a:38:e6:a1:b3:a4:e7:f9:42:55:68:2b:0a:ba:3e: 01:42:dd:48:06:c8:58:9c:f6:05:6d:d1:f2:71:cf: 8b:14:01:21:ae:a9:a7:33:24:85:60:9a:18:16:8e: a5:52:44:2c:e0:1a:62:49:fb:ad:e8:5e:ea:c6:ca: 2e:10:b6:04:5e:ef:44:a6:d6:a8:b5:41:6c:fe:d4: ad:2f:83:22:a9:be:e3:0f:40:c6:a8:3e:6f:cd:20: 3d:3b:0f:ef:a4:fa:1d:97:75:55:2a:c5:0c:99:63: bc:39:fe:d3:5d:cb:16:ca:f8:d4:a1:f2:ea:5c:b0: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B8:40:2A:5F:18:2F:06:8C:22:E1:BD:DC:EE:DD:94:EC:30:1E:74 X509v3 Authority Key Identifier: keyid:16:AC:80:BF:1A:C3:A0:2F:C2:DA:8E:1A:B5:CF:4F:5B:92:12:0C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GXaKfVS4Adr9aR1XfwxWd1hqX474XMGhmVeUv1z6Rgeg/0/16AC80BF1AC3A02FC2DA8E1AB5CF4F5B92120CE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16AC80BF1AC3A02FC2DA8E1AB5CF4F5B92120CE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXaKfVS4Adr9aR1XfwxWd1hqX474XMGhmVeUv1z6Rgeg/0/323830343a323462633a3a2f33322d313238203d3e203532363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:24bc::/32 Signature Algorithm: sha256WithRSAEncryption 47:77:e6:9b:34:2d:bb:be:b6:e0:9e:0a:a5:be:37:de:d7:9e: 53:64:4d:f3:d4:37:3b:06:e8:cb:e4:10:75:d5:61:a1:19:a0: 3a:69:b8:9c:09:a7:0f:41:c4:30:cf:3f:3b:d8:12:ee:49:23: 64:9a:63:b7:d4:79:d1:ae:ad:de:25:f1:f3:e1:34:b0:e2:51: dd:b9:11:48:c0:be:9a:78:f5:d8:73:2a:29:b7:b3:1d:34:8e: 95:86:38:e9:35:a7:ab:02:48:07:dc:a7:97:9d:9d:33:61:6c: 1a:bc:8e:df:a3:08:a5:01:2a:b3:91:56:7c:89:a7:49:7c:e4: 2d:2c:ba:a1:0f:ff:90:90:8c:39:12:af:37:c4:1b:25:a7:7d: 3d:36:2c:6d:97:8d:7c:ff:68:df:68:3c:f3:45:e7:c1:6c:71: 59:c3:08:e9:85:f3:1c:41:7c:bf:32:0a:62:af:a9:07:61:a5: 1f:c5:49:7a:d6:bf:eb:54:c4:59:b6:09:f2:c8:cf:a5:a1:7e: d0:17:f7:27:b8:6d:b5:b4:0d:aa:a5:4c:50:30:1f:cc:24:19: 68:33:40:c4:f8:23:97:43:50:85:e0:b0:2f:59:a1:d6:3e:11: d9:a5:f8:fa:47:dc:88:43:40:a2:ab:00:d5:c0:14:5a:6d:67: 79:7c:1d:99 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUG5qhRkDQosdvu8tv729nHm4GcSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZBQzgwQkYxQUMzQTAyRkMyREE4RTFBQjVDRjRGNUI5 MjEyMENFNTAeFw0yNjAxMTkxNzM4NTJaFw0yNzAxMTgxNzQzNTJaMDMxMTAvBgNV BAMTKEE1Qjg0MDJBNUYxODJGMDY4QzIyRTFCRERDRUVERDk0RUMzMDFFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRZKh7EhusaehNM127Kxp2M71j K2b/QumAE7fFFvPXeU5Sgm8pluiA4Xu/jPRK7agMrxL4e7r47OiBWXq7ykppc4uZ BWNjIIQctQcwG2EDMdXG/oXQ3E3hjWy3nkyOoQVeYo0lOTplbvDmh6Ut/rGhTX29 PYonQnvQ9Ldo18xwIIps4S7WI5o45qGzpOf5QlVoKwq6PgFC3UgGyFic9gVt0fJx z4sUASGuqaczJIVgmhgWjqVSRCzgGmJJ+63oXurGyi4QtgRe70Sm1qi1QWz+1K0v gyKpvuMPQMaoPm/NID07D++k+h2XdVUqxQyZY7w5/tNdyxbK+NSh8upcsB5tAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUpbhAKl8YLwaMIuG93O7dlOwwHnQwHwYDVR0j BBgwFoAUFqyAvxrDoC/C2o4atc9PW5ISDOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1hhS2ZWUzRBZHI5YVIxWGZ3eFdkMWhxWDQ3NFhNR2htVmVVdjF6NlJn ZWcvMC8xNkFDODBCRjFBQzNBMDJGQzJEQThFMUFCNUNGNEY1QjkyMTIwQ0U1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QUM4MEJGMUFDM0EwMkZD MkRBOEUxQUI1Q0Y0RjVCOTIxMjBDRTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dYYUtmVlM0QWRyOWFSMVhmd3hXZDFocVg0NzRYTUdobVZlVXYxejZSZ2VnLzAv MzIzODMwMzQzYTMyMzQ2MjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy MzYzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQkvDANBgkqhkiG9w0BAQsFAAOCAQEAR3fmmzQt u7624J4Kpb433teeU2RN89Q3Owboy+QQddVhoRmgOmm4nAmnD0HEMM8/O9gS7kkj ZJpjt9R50a6t3iXx8+E0sOJR3bkRSMC+mnj12HMqKbezHTSOlYY46TWnqwJIB9yn l52dM2FsGryO36MIpQEqs5FWfImnSXzkLSy6oQ//kJCMORKvN8QbJad9PTYsbZeN fP9o32g880XnwWxxWcMI6YXzHEF8vzIKYq+pB2GlH8VJeta/61TEWbYJ8sjPpaF+ 0Bf3J7httbQNqqVMUDAfzCQZaDNAxPgjl0NQheCwL1mh1j4R2aX4+kfciENAoqsA 1cAUWm1neXwdmQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:25:50 2026 by rpki-client