This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/323830343a333032343a3a2f33322d313238203d3e20323634393332.roa File: 323830343a333032343a3a2f33322d313238203d3e20323634393332.roa (raw, json) Hash identifier: 4IjgZVMW/Ngyzjd0vKnaxySIVs1glHOEX8Q+r9oHkk0= Subject key identifier: 1C:14:6C:54:E5:73:38:C1:8D:D9:9C:20:20:11:96:5B:62:74:3F:09 Certificate issuer: /CN=B72B0284F2122722802DB9B23EEDE6D2F1B7EB88 Certificate serial: 5A1D427A7F67200D6814D932D11B28CCC08B2A6A Authority key identifier: B7:2B:02:84:F2:12:27:22:80:2D:B9:B2:3E:ED:E6:D2:F1:B7:EB:88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.cer Subject info access: rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/323830343a333032343a3a2f33322d313238203d3e20323634393332.roa Signing time: Tue 20 Jan 2026 20:06:49 +0000 ROA not before: Tue 20 Jan 2026 20:01:49 +0000 ROA not after: Tue 19 Jan 2027 20:06:49 +0000 asID: 264932 IP address blocks: 2804:3024::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.crl rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1d:42:7a:7f:67:20:0d:68:14:d9:32:d1:1b:28:cc:c0:8b:2a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72B0284F2122722802DB9B23EEDE6D2F1B7EB88 Validity Not Before: Jan 20 20:01:49 2026 GMT Not After : Jan 19 20:06:49 2027 GMT Subject: CN=1C146C54E57338C18DD99C202011965B62743F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:f4:11:a8:f6:51:95:ec:28:dc:14:41:1f: b4:54:9c:0e:32:9b:1b:87:7e:01:1e:80:5c:5d:16: 4e:cf:db:91:62:68:38:6f:2c:5c:36:1b:90:21:a9: db:ee:76:76:5c:d0:1f:6a:9e:a6:c0:de:a3:54:cf: a6:6a:7f:58:bd:b3:07:d1:ec:67:1f:ef:e9:0b:01: 56:cc:9b:6a:92:a2:ca:b8:f6:ee:b9:4e:59:71:2b: b2:ca:a5:92:70:f4:20:0b:9d:33:9b:d8:92:5d:15: 76:67:e8:a9:65:b0:50:55:46:7a:af:d8:e1:4a:cf: 20:c5:15:68:83:34:7f:98:da:24:03:94:e6:47:de: 9d:95:ea:51:21:f5:dd:50:24:bd:b2:a3:f2:72:3c: d6:f1:d1:50:cd:87:96:16:15:b3:f1:0a:2a:a1:fe: ec:a7:2c:1a:97:01:e7:79:6c:5c:7d:08:1e:dc:c4: fb:33:7c:1d:62:60:c6:08:92:d1:8a:db:ee:9c:8b: d5:7f:1c:4c:ba:f1:97:66:b4:63:fb:a7:64:64:a7: 05:34:fe:5b:5d:b9:8f:ed:a3:26:69:ce:92:05:90: 88:42:de:2e:1f:5e:55:76:82:8b:3a:18:27:22:f0: 61:e8:df:ef:b9:8b:06:06:80:21:38:fd:65:67:30: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:6C:54:E5:73:38:C1:8D:D9:9C:20:20:11:96:5B:62:74:3F:09 X509v3 Authority Key Identifier: keyid:B7:2B:02:84:F2:12:27:22:80:2D:B9:B2:3E:ED:E6:D2:F1:B7:EB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B72B0284F2122722802DB9B23EEDE6D2F1B7EB88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/323830343a333032343a3a2f33322d313238203d3e20323634393332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3024::/32 Signature Algorithm: sha256WithRSAEncryption 08:d0:bf:91:6a:e2:77:86:b6:2f:e5:fc:5f:6d:e9:ae:ff:2a: 20:6a:29:df:52:f9:f5:c7:58:ba:66:74:70:79:a8:fa:b8:39: b6:28:fc:37:08:9a:4b:a6:ee:a6:27:83:46:fc:39:d6:8b:6c: dc:09:84:e2:89:cb:d1:a8:fe:dd:1f:f0:ff:cf:da:76:04:dc: 28:07:35:1f:21:21:fb:71:f2:1c:9f:b6:68:a9:bc:6f:e8:80: 1b:40:29:71:64:4d:32:2f:cd:b1:96:ce:2c:bb:6d:3e:65:a2: 66:40:af:a8:24:e9:36:07:a2:2b:74:19:16:75:4c:cf:33:0c: 06:f8:9e:5f:0c:cb:0d:8f:ec:da:76:35:b9:e2:bc:c3:98:ed: 35:91:a2:2c:5b:cd:da:62:54:cb:5a:ae:9f:fd:e5:96:1d:85: b6:51:8f:84:2f:c8:c8:06:88:c8:dc:24:a4:cc:16:71:7f:f1: b0:e1:26:cb:68:54:3d:55:b8:0f:e1:75:72:ea:60:7c:5b:e4: 2f:32:30:9d:cf:7c:7a:2c:a9:59:5f:44:3e:02:38:3c:52:14: a5:0e:5b:ee:0a:fd:4a:6a:64:65:cb:1d:4d:63:80:00:b1:22: 8e:f4:12:64:e8:ba:f9:e7:8a:5d:cf:db:c1:8a:80:5d:a5:a4: ee:bb:cc:99 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUWh1Cen9nIA1oFNky0RsozMCLKmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyQjAyODRGMjEyMjcyMjgwMkRCOUIyM0VFREU2RDJG MUI3RUI4ODAeFw0yNjAxMjAyMDAxNDlaFw0yNzAxMTkyMDA2NDlaMDMxMTAvBgNV BAMTKDFDMTQ2QzU0RTU3MzM4QzE4REQ5OUMyMDIwMTE5NjVCNjI3NDNGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlZfQRqPZRlewo3BRBH7RUnA4y mxuHfgEegFxdFk7P25FiaDhvLFw2G5AhqdvudnZc0B9qnqbA3qNUz6Zqf1i9swfR 7Gcf7+kLAVbMm2qSosq49u65TllxK7LKpZJw9CALnTOb2JJdFXZn6KllsFBVRnqv 2OFKzyDFFWiDNH+Y2iQDlOZH3p2V6lEh9d1QJL2yo/JyPNbx0VDNh5YWFbPxCiqh /uynLBqXAed5bFx9CB7cxPszfB1iYMYIktGK2+6ci9V/HEy68ZdmtGP7p2RkpwU0 /ltduY/toyZpzpIFkIhC3i4fXlV2gos6GCci8GHo3++5iwYGgCE4/WVnMPXLAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUHBRsVOVzOMGN2ZwgIBGWW2J0PwkwHwYDVR0j BBgwFoAUtysChPISJyKALbmyPu3m0vG364gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSER6WEp0eFh2WFJralZhNmZpVUVEVGZkYWN0QjlLTm5obkJLR1UyZ1Fp VzIvMC9CNzJCMDI4NEYyMTIyNzIyODAyREI5QjIzRUVERTZEMkYxQjdFQjg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3MkIwMjg0RjIxMjI3MjI4 MDJEQjlCMjNFRURFNkQyRjFCN0VCODguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hEelhKdHhYdlhSa2pWYTZmaVVFRFRmZGFjdEI5S05uaG5CS0dVMmdRaVcyLzAv MzIzODMwMzQzYTMzMzAzMjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzQzOTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBDAkMA0GCSqGSIb3DQEBCwUAA4IBAQAI0L+R auJ3hrYv5fxfbemu/yogainfUvn1x1i6ZnRweaj6uDm2KPw3CJpLpu6mJ4NG/DnW i2zcCYTiicvRqP7dH/D/z9p2BNwoBzUfISH7cfIcn7Zoqbxv6IAbQClxZE0yL82x ls4su20+ZaJmQK+oJOk2B6IrdBkWdUzPMwwG+J5fDMsNj+zadjW54rzDmO01kaIs W83aYlTLWq6f/eWWHYW2UY+EL8jIBojI3CSkzBZxf/Gw4SbLaFQ9VbgP4XVy6mB8 W+QvMjCdz3x6LKlZX0Q+Ajg8UhSlDlvuCv1KamRlyx1NY4AAsSKO9BJk6Lr554pd z9vBioBdpaTuu8yZ -----END CERTIFICATE-----Generated at Mon Jan 26 07:27:28 2026 by rpki-client