This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a3a2f33322d3438203d3e20323636303430.roa File: 323830343a333961303a3a2f33322d3438203d3e20323636303430.roa (raw, json) Hash identifier: eY9R+G7uX8BW1vMh/xTBl7fhLnbFHO/aBMJkJV9Ma2Q= Subject key identifier: 9F:31:C5:3D:F9:FE:93:D5:9F:AA:BC:2C:E9:FF:58:1A:97:13:A3:59 Certificate issuer: /CN=4EAEA4860A9C24CC747D00D453DD1C54366841FB Certificate serial: 527637A58DAFD66FA0CB63CDB806C98B75CC8BB1 Authority key identifier: 4E:AE:A4:86:0A:9C:24:CC:74:7D:00:D4:53:DD:1C:54:36:68:41:FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a3a2f33322d3438203d3e20323636303430.roa Signing time: Tue 06 Jan 2026 15:17:59 +0000 ROA not before: Tue 06 Jan 2026 15:12:59 +0000 ROA not after: Tue 05 Jan 2027 15:17:59 +0000 asID: 266040 IP address blocks: 2804:39a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.crl rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 01:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:76:37:a5:8d:af:d6:6f:a0:cb:63:cd:b8:06:c9:8b:75:cc:8b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EAEA4860A9C24CC747D00D453DD1C54366841FB Validity Not Before: Jan 6 15:12:59 2026 GMT Not After : Jan 5 15:17:59 2027 GMT Subject: CN=9F31C53DF9FE93D59FAABC2CE9FF581A9713A359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:8b:0b:7c:6f:2f:08:ad:6a:ec:c5:85:0b: c5:18:0c:1f:16:5e:1d:41:a6:8b:78:e5:ac:e5:18: 5e:29:22:47:4b:c6:5b:05:39:3b:4b:2f:ee:38:50: 1e:79:c2:20:c2:9c:18:a9:9d:81:19:0c:17:13:6d: f6:a8:41:9d:80:be:80:ce:1a:40:fd:b1:f3:24:13: 26:ca:02:c5:55:fc:ca:0b:4c:35:84:19:33:84:af: 95:2d:c1:c5:63:be:e7:65:37:1f:b8:74:6e:db:47: 70:c0:6e:54:a7:6f:07:c1:3a:6c:15:43:cc:56:18: 4e:d2:56:77:57:95:23:eb:bd:50:47:9e:5b:0f:e9: 3a:4f:bd:5d:7e:8d:8b:e1:01:67:ed:77:89:9d:e0: 17:72:21:cf:f7:15:0a:98:d3:bf:ba:89:64:84:f0: ab:1d:40:76:fa:1b:a0:d0:02:2f:b6:ad:cc:0e:f2: 40:04:73:02:c3:b5:3e:f2:df:75:52:4d:0c:df:59: bc:01:46:2d:7d:df:2a:5f:ef:5b:e9:a0:d6:80:97: 90:10:4c:40:09:d7:e1:c3:0c:2f:ee:82:66:c7:35: 0e:42:5b:c2:ea:11:b5:9f:00:3b:9d:35:f5:2e:63: 10:a7:0b:c1:42:c0:0e:fd:43:a1:50:3f:3c:5d:16: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:31:C5:3D:F9:FE:93:D5:9F:AA:BC:2C:E9:FF:58:1A:97:13:A3:59 X509v3 Authority Key Identifier: keyid:4E:AE:A4:86:0A:9C:24:CC:74:7D:00:D4:53:DD:1C:54:36:68:41:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a3a2f33322d3438203d3e20323636303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:39a0::/32 Signature Algorithm: sha256WithRSAEncryption af:5f:20:6f:6e:bf:fa:a3:16:77:bc:e5:bf:de:d9:27:c3:bd: bf:b0:ad:89:c5:64:e6:06:e0:ff:d3:d5:8b:bf:40:f8:36:6f: ca:08:01:1b:71:d5:0f:4d:36:77:18:46:03:38:25:18:41:01: 31:f5:57:db:34:e9:94:a2:3b:d7:7e:26:3a:22:e8:4d:08:fd: 38:0b:ea:51:6e:6c:ae:b0:fb:47:11:e2:6c:03:a7:2f:bb:6f: d8:95:66:7b:17:98:89:8b:40:66:04:e5:20:f2:3a:c5:b1:58: ba:c1:63:87:1a:45:96:b7:30:58:be:eb:6f:33:cf:79:0a:9e: 11:5d:e0:77:23:d7:03:5c:36:b9:12:9f:c3:af:7b:a3:9e:97: a1:bb:bb:29:30:f8:e8:ec:74:e4:95:42:17:d2:a1:f5:1f:cd: f1:8f:61:ae:a9:23:38:b9:91:8b:b6:15:5c:49:7a:33:fa:cf: 33:ef:47:a6:e0:d6:ba:b5:80:95:90:37:f9:9b:ff:69:30:e5: 78:70:dd:b9:48:03:35:18:7f:e2:6d:5e:c8:8c:fe:ba:ba:fe: fd:62:79:f0:a2:9a:a8:81:fd:ae:40:da:f8:52:0c:6a:4d:b3: 1b:ee:ab:ef:c7:bc:b6:5d:6d:fa:52:17:ab:36:bb:dc:c7:f1: 29:cf:d0:58 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUUnY3pY2v1m+gy2PNuAbJi3XMi7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVBRUE0ODYwQTlDMjRDQzc0N0QwMEQ0NTNERDFDNTQz NjY4NDFGQjAeFw0yNjAxMDYxNTEyNTlaFw0yNzAxMDUxNTE3NTlaMDMxMTAvBgNV BAMTKDlGMzFDNTNERjlGRTkzRDU5RkFBQkMyQ0U5RkY1ODFBOTcxM0EzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWYsLfG8vCK1q7MWFC8UYDB8W Xh1Bpot45azlGF4pIkdLxlsFOTtLL+44UB55wiDCnBipnYEZDBcTbfaoQZ2AvoDO GkD9sfMkEybKAsVV/MoLTDWEGTOEr5UtwcVjvudlNx+4dG7bR3DAblSnbwfBOmwV Q8xWGE7SVndXlSPrvVBHnlsP6TpPvV1+jYvhAWftd4md4BdyIc/3FQqY07+6iWSE 8KsdQHb6G6DQAi+2rcwO8kAEcwLDtT7y33VSTQzfWbwBRi193ypf71vpoNaAl5AQ TEAJ1+HDDC/ugmbHNQ5CW8LqEbWfADudNfUuYxCnC8FCwA79Q6FQPzxdFkg5AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUnzHFPfn+k9Wfqrws6f9YGpcTo1kwHwYDVR0j BBgwFoAUTq6khgqcJMx0fQDUU90cVDZoQfswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDR4RjNjU3h1NmM3bW9jdkNaeUpjakM5ZVpHYnkzTXpSd0gxNzJvdVJ3 UlEvMC80RUFFQTQ4NjBBOUMyNENDNzQ3RDAwRDQ1M0REMUM1NDM2Njg0MUZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFQUVBNDg2MEE5QzI0Q0M3 NDdEMDBENDUzREQxQzU0MzY2ODQxRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0g0eEYzY1N4dTZjN21vY3ZDWnlKY2pDOWVaR2J5M016UndIMTcyb3VSd1JRLzAv MzIzODMwMzQzYTMzMzk2MTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2 MzAzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQ5oDANBgkqhkiG9w0BAQsFAAOCAQEAr18gb26/ +qMWd7zlv97ZJ8O9v7CticVk5gbg/9PVi79A+DZvyggBG3HVD002dxhGAzglGEEB MfVX2zTplKI7134mOiLoTQj9OAvqUW5srrD7RxHibAOnL7tv2JVmexeYiYtAZgTl IPI6xbFYusFjhxpFlrcwWL7rbzPPeQqeEV3gdyPXA1w2uRKfw697o56Xobu7KTD4 6Ox05JVCF9Kh9R/N8Y9hrqkjOLmRi7YVXEl6M/rPM+9HpuDWurWAlZA3+Zv/aTDl eHDduUgDNRh/4m1eyIz+urr+/WJ58KKaqIH9rkDa+FIMak2zG+6r78e8tl1t+lIX qza73MfxKc/QWA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:12 2026 by rpki-client