This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/323830343a313964633a3a2f33322d3332203d3e203631383233.roa File: 323830343a313964633a3a2f33322d3332203d3e203631383233.roa (raw, json) Hash identifier: cyI9TnrAXG4EH1ifG0QJQ9pHFHDG0QDBoC7kzrFfLWo= Subject key identifier: 56:3A:89:91:7C:94:20:C5:AA:9F:F4:84:8C:1A:BA:56:A6:B5:37:67 Certificate issuer: /CN=090356FA0F721D9A2449A75F672A23DBF91DA79D Certificate serial: 2F9EFC3402C45C31C4B815C957872820F0A11247 Authority key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer Subject info access: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/323830343a313964633a3a2f33322d3332203d3e203631383233.roa Signing time: Fri 09 Jan 2026 19:17:27 +0000 ROA not before: Fri 09 Jan 2026 19:12:27 +0000 ROA not after: Fri 08 Jan 2027 19:17:27 +0000 asID: 61823 IP address blocks: 2804:19dc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 09:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9e:fc:34:02:c4:5c:31:c4:b8:15:c9:57:87:28:20:f0:a1:12:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D Validity Not Before: Jan 9 19:12:27 2026 GMT Not After : Jan 8 19:17:27 2027 GMT Subject: CN=563A89917C9420C5AA9FF4848C1ABA56A6B53767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:d0:13:ea:22:2c:8f:b6:ad:ff:64:3a:2f: ce:6a:ec:22:b2:b8:71:d3:8a:73:4f:07:76:1a:e4: 6c:19:ee:2e:55:09:d2:c1:20:48:2e:83:0e:5f:ef: dc:fd:4b:63:f0:ee:24:3f:f9:12:9e:6b:24:6f:a0: bc:ea:46:2c:19:0b:4f:76:04:d2:65:79:00:61:f0: 9c:d9:45:d4:87:03:b1:da:60:d2:80:1d:ed:3d:61: 68:06:d0:11:a7:d4:bb:f9:85:7f:9c:b0:9d:e6:33: c2:0c:35:ea:b5:8c:f6:63:c5:c9:18:b0:6e:97:d5: 9e:0e:5f:af:57:67:ef:34:24:dd:09:94:50:65:b3: e0:25:68:5e:b5:55:4b:b6:95:6e:80:07:f5:66:a1: 91:14:f9:9f:7c:4c:c6:31:a6:e1:88:5a:3b:f8:9e: 42:03:cd:b3:a4:2d:eb:6c:69:55:42:b8:6c:b5:78: 35:31:97:f9:fb:00:07:a7:4d:57:0d:cc:ff:bd:d7: d8:ff:09:86:c2:eb:63:e8:8c:a8:44:2f:9a:ff:1e: a5:ff:fc:88:0f:73:35:b2:86:6a:a4:c7:e1:e2:af: bb:46:29:4b:e3:7b:3b:85:b8:bf:15:2f:17:3f:83: bd:49:5d:61:37:ac:61:b0:3a:22:2e:07:43:21:c4: f0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3A:89:91:7C:94:20:C5:AA:9F:F4:84:8C:1A:BA:56:A6:B5:37:67 X509v3 Authority Key Identifier: keyid:09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/323830343a313964633a3a2f33322d3332203d3e203631383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:19dc::/32 Signature Algorithm: sha256WithRSAEncryption 0d:a7:23:04:2a:2e:e4:16:95:4d:85:58:20:21:9a:ed:52:7f: d8:44:38:4d:b3:e3:03:48:ad:9c:03:e7:26:2a:40:11:1b:41: 2a:38:78:fd:ab:8b:3b:28:3c:6b:f0:f2:07:ef:f6:83:66:8b: 13:24:7c:74:33:36:07:3e:50:24:d9:60:8c:8b:ec:15:49:54: 6b:c0:d3:58:44:aa:de:9c:9e:02:aa:41:e7:f8:bd:ab:21:4a: b9:2c:1a:7c:d8:87:c8:06:65:74:bc:72:a2:f0:c0:8f:c0:8c: bd:e7:ea:97:70:3c:f6:f8:69:6d:0a:1b:a1:9b:7b:d4:ea:e5: 5d:3e:b9:99:8c:d4:a2:0b:12:b9:f1:40:75:52:3c:6a:51:a0: af:ff:be:c0:7c:36:56:d7:58:79:a8:e3:f6:8f:b4:77:69:12: c7:e6:55:38:bf:1e:62:f6:32:50:93:b2:94:d5:15:ec:99:82: 49:ad:a2:34:0a:1a:b4:ee:4f:8a:da:5e:09:1e:03:4c:03:bc: e1:4c:ff:07:6d:31:c2:a0:7f:57:6c:68:aa:cb:79:f1:85:41: b6:7a:71:59:3f:6b:30:b7:1d:c6:9f:60:93:d4:88:b1:0d:87: 4a:bf:2e:80:7f:88:b7:ab:b5:f4:26:9b:93:2f:2a:02:d5:0b: 9c:e2:76:84 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUL578NALEXDHEuBXJV4coIPChEkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkwMzU2RkEwRjcyMUQ5QTI0NDlBNzVGNjcyQTIzREJG OTFEQTc5RDAeFw0yNjAxMDkxOTEyMjdaFw0yNzAxMDgxOTE3MjdaMDMxMTAvBgNV BAMTKDU2M0E4OTkxN0M5NDIwQzVBQTlGRjQ4NDhDMUFCQTU2QTZCNTM3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPdAT6iIsj7at/2Q6L85q7CKy uHHTinNPB3Ya5GwZ7i5VCdLBIEgugw5f79z9S2Pw7iQ/+RKeayRvoLzqRiwZC092 BNJleQBh8JzZRdSHA7HaYNKAHe09YWgG0BGn1Lv5hX+csJ3mM8IMNeq1jPZjxckY sG6X1Z4OX69XZ+80JN0JlFBls+AlaF61VUu2lW6AB/VmoZEU+Z98TMYxpuGIWjv4 nkIDzbOkLetsaVVCuGy1eDUxl/n7AAenTVcNzP+919j/CYbC62PojKhEL5r/HqX/ /IgPczWyhmqkx+Hir7tGKUvjezuFuL8VLxc/g71JXWE3rGGwOiIuB0MhxPAVAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUVjqJkXyUIMWqn/SEjBq6Vqa1N2cwHwYDVR0j BBgwFoAUCQNW+g9yHZokSadfZyoj2/kdp50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEM0M1BWaWV6bjN2V1JkUDE2a0Z6UkwydGN6cUhKMVNQUkg4UVBXTmNY alovMC8wOTAzNTZGQTBGNzIxRDlBMjQ0OUE3NUY2NzJBMjNEQkY5MURBNzlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5MDM1NkZBMEY3MjFEOUEy NDQ5QTc1RjY3MkEyM0RCRjkxREE3OUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hDNDNQVmllem4zdldSZFAxNmtGelJMMnRjenFISjFTUFJIOFFQV05jWGpaLzAv MzIzODMwMzQzYTMxMzk2NDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM4 MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEGdwwDQYJKoZIhvcNAQELBQADggEBAA2nIwQqLuQW lU2FWCAhmu1Sf9hEOE2z4wNIrZwD5yYqQBEbQSo4eP2rizsoPGvw8gfv9oNmixMk fHQzNgc+UCTZYIyL7BVJVGvA01hEqt6cngKqQef4vashSrksGnzYh8gGZXS8cqLw wI/AjL3n6pdwPPb4aW0KG6Gbe9Tq5V0+uZmM1KILErnxQHVSPGpRoK//vsB8NlbX WHmo4/aPtHdpEsfmVTi/HmL2MlCTspTVFeyZgkmtojQKGrTuT4raXgkeA0wDvOFM /wdtMcKgf1dsaKrLefGFQbZ6cVk/azC3HcafYJPUiLENh0q/LoB/iLertfQmm5Mv KgLVC5zidoQ= -----END CERTIFICATE-----Generated at Sun Jan 25 23:52:37 2026 by rpki-client