This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/323830343a3534383a3a2f33322d313238203d3e203533303035.roa File: 323830343a3534383a3a2f33322d313238203d3e203533303035.roa (raw, json) Hash identifier: sA1wZRgGyWhivrXqXvr7iGJQjtaqyqZYt35dzX83iog= Subject key identifier: 78:EA:DB:D0:4B:9F:0B:5F:1E:A6:18:51:0A:43:B1:7B:EA:CC:FB:71 Certificate issuer: /CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A Certificate serial: 6BD34A2940772BABDBE1429C932553E27049F1BD Authority key identifier: AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/323830343a3534383a3a2f33322d313238203d3e203533303035.roa Signing time: Sun 28 Dec 2025 10:03:33 +0000 ROA not before: Sun 28 Dec 2025 09:58:33 +0000 ROA not after: Sun 27 Dec 2026 10:03:33 +0000 asID: 53005 IP address blocks: 2804:548::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Jan 2026 05:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d3:4a:29:40:77:2b:ab:db:e1:42:9c:93:25:53:e2:70:49:f1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A Validity Not Before: Dec 28 09:58:33 2025 GMT Not After : Dec 27 10:03:33 2026 GMT Subject: CN=78EADBD04B9F0B5F1EA618510A43B17BEACCFB71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:0e:07:71:61:29:87:3f:d8:84:a7:e4:2e: d4:89:a3:8c:ce:24:cb:a6:ab:5b:c3:4a:47:b5:a1: 07:b6:b5:0e:68:d8:d2:62:c5:81:0c:8d:19:26:b6: a9:fd:a5:08:cb:41:03:df:b4:23:07:c2:83:92:a5: 86:a6:dd:c8:a1:a1:25:04:b8:9b:90:f9:0d:ff:6f: b4:6f:c6:52:a9:7a:17:3f:1c:7d:15:8d:c2:d1:7f: 9b:54:7a:19:e1:74:ef:ad:71:28:d4:93:11:7e:b8: a3:e5:3d:6b:29:92:41:98:ca:e1:b2:74:5a:b1:48: 08:c3:14:51:be:59:a6:ea:c8:0c:d8:24:0e:f2:fe: 37:cb:ea:1a:df:b1:9c:42:64:0c:5e:56:c3:46:10: 3f:55:7e:0f:82:2b:3a:8f:10:08:61:6e:06:30:28: 47:12:a0:81:0e:70:67:49:28:9e:cf:b8:b2:12:bf: d8:cd:93:48:e8:82:9c:48:d5:4f:4f:70:dd:98:ff: 33:94:d5:f4:96:c6:19:88:ce:1f:16:fa:5f:23:84: 9d:4f:03:90:a7:0a:a1:92:e8:15:de:f1:fe:95:9d: 7a:41:ca:ef:5c:7f:ab:56:01:81:65:41:8e:44:cb: a7:b3:b9:52:c2:4f:39:63:fc:c5:93:89:20:c5:a8: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EA:DB:D0:4B:9F:0B:5F:1E:A6:18:51:0A:43:B1:7B:EA:CC:FB:71 X509v3 Authority Key Identifier: keyid:AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/323830343a3534383a3a2f33322d313238203d3e203533303035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:548::/32 Signature Algorithm: sha256WithRSAEncryption b0:30:77:e8:c0:45:a9:94:4e:25:94:ed:85:96:5a:d4:aa:b5: ba:0f:ef:05:e5:00:43:87:f0:55:57:5b:01:e2:78:bd:3d:72: 38:94:bb:ea:23:87:9c:a2:42:47:2d:95:a1:c1:71:17:4c:45: 5b:91:f1:2c:30:18:2b:27:b7:f0:0d:29:0b:d7:4a:f2:43:ea: 1a:f3:40:f6:be:f1:02:eb:30:d8:d5:91:75:e3:7e:11:b2:a2: 8b:8f:40:93:f3:6c:c6:82:88:04:6d:cf:2f:a2:43:90:3e:46: 52:4e:0d:a3:49:1c:f3:0b:58:c5:dc:0c:22:be:45:66:d9:6d: 9d:87:0b:69:9e:c7:66:4b:7a:0d:11:26:e2:9b:74:65:4b:29: 7b:41:93:7b:bb:ad:df:7d:9b:7a:98:1f:ef:f7:56:f5:99:33: a0:c1:e3:18:62:7d:83:bf:29:7a:6d:bf:a3:ae:90:22:79:be: 60:a9:da:1c:08:f5:ed:68:e2:b7:94:7f:35:73:86:ab:5d:2d: 46:c4:73:86:d9:7c:53:fc:37:60:e9:74:7a:ae:1c:0a:69:11: ea:78:c1:94:07:da:e3:58:58:1d:2a:39:1a:82:a7:67:1c:b9: 45:e6:50:90:99:30:7b:15:5d:b2:1a:87:7a:86:71:e4:2b:48: 81:3c:18:28 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUa9NKKUB3K6vb4UKckyVT4nBJ8b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QzlCQzZFREJGRkRFOThGRTM4NDExQjZBQjZDN0I5 RjUyQzUzQTAeFw0yNTEyMjgwOTU4MzNaFw0yNjEyMjcxMDAzMzNaMDMxMTAvBgNV BAMTKDc4RUFEQkQwNEI5RjBCNUYxRUE2MTg1MTBBNDNCMTdCRUFDQ0ZCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bw4HcWEphz/YhKfkLtSJo4zO JMumq1vDSke1oQe2tQ5o2NJixYEMjRkmtqn9pQjLQQPftCMHwoOSpYam3cihoSUE uJuQ+Q3/b7RvxlKpehc/HH0VjcLRf5tUehnhdO+tcSjUkxF+uKPlPWspkkGYyuGy dFqxSAjDFFG+WabqyAzYJA7y/jfL6hrfsZxCZAxeVsNGED9Vfg+CKzqPEAhhbgYw KEcSoIEOcGdJKJ7PuLISv9jNk0jogpxI1U9PcN2Y/zOU1fSWxhmIzh8W+l8jhJ1P A5CnCqGS6BXe8f6VnXpByu9cf6tWAYFlQY5Ey6ezuVLCTzlj/MWTiSDFqDd7AgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUeOrb0EufC18ephhRCkOxe+rM+3EwHwYDVR0j BBgwFoAUr4ybxu2//emP44QRtqtse59SxTowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG9VSlJWeXZlTjk5VjF0QUVqaWFnWG4xaGsxV1ZGU0tuM1pXNjFvU3hZ N0MvMC9BRjhDOUJDNkVEQkZGREU5OEZFMzg0MTFCNkFCNkM3QjlGNTJDNTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGOEM5QkM2RURCRkZERTk4 RkUzODQxMUI2QUI2QzdCOUY1MkM1M0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hvVUpSVnl2ZU45OVYxdEFFamlhZ1huMWhrMVdWRlNLbjNaVzYxb1N4WTdDLzAv MzIzODMwMzQzYTM1MzQzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMzMw MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEBUgwDQYJKoZIhvcNAQELBQADggEBALAwd+jARamU TiWU7YWWWtSqtboP7wXlAEOH8FVXWwHieL09cjiUu+ojh5yiQkctlaHBcRdMRVuR 8SwwGCsnt/ANKQvXSvJD6hrzQPa+8QLrMNjVkXXjfhGyoouPQJPzbMaCiARtzy+i Q5A+RlJODaNJHPMLWMXcDCK+RWbZbZ2HC2mex2ZLeg0RJuKbdGVLKXtBk3u7rd99 m3qYH+/3VvWZM6DB4xhifYO/KXptv6OukCJ5vmCp2hwI9e1o4reUfzVzhqtdLUbE c4bZfFP8N2DpdHquHAppEep4wZQH2uNYWB0qORqCp2ccuUXmUJCZMHsVXbIah3qG ceQrSIE8GCg= -----END CERTIFICATE-----Generated at Mon Jan 26 04:27:07 2026 by rpki-client