This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/323830343a333239383a3a2f33322d313238203d3e20323635303837.roa File: 323830343a333239383a3a2f33322d313238203d3e20323635303837.roa (raw, json) Hash identifier: xOwOGSU7wTDhn3QFg+xaq3Te4NGx/6MLJ1r9YwedQNw= Subject key identifier: 3A:6C:01:26:F2:06:9E:38:F1:0F:FA:17:E8:77:5E:0B:DB:5A:33:9E Certificate issuer: /CN=AF231F74DDE2311E23940DD27C9A363910CAB577 Certificate serial: 5CAE6B5F0084B8E05B55A7D3EBCB64EFA0EC5ECD Authority key identifier: AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/323830343a333239383a3a2f33322d313238203d3e20323635303837.roa Signing time: Mon 05 Jan 2026 13:37:06 +0000 ROA not before: Mon 05 Jan 2026 13:32:06 +0000 ROA not after: Mon 04 Jan 2027 13:37:06 +0000 asID: 265087 IP address blocks: 2804:3298::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.crl rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 09:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ae:6b:5f:00:84:b8:e0:5b:55:a7:d3:eb:cb:64:ef:a0:ec:5e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF231F74DDE2311E23940DD27C9A363910CAB577 Validity Not Before: Jan 5 13:32:06 2026 GMT Not After : Jan 4 13:37:06 2027 GMT Subject: CN=3A6C0126F2069E38F10FFA17E8775E0BDB5A339E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:3d:c3:d4:35:3c:5c:41:bc:36:2b:a0:53: bc:b4:9a:e8:ca:93:ed:0c:4e:f3:79:d8:f7:dd:39: cc:ee:cf:c5:eb:5f:12:65:c1:86:9f:f8:5d:22:da: 16:9d:3f:56:3f:ea:9e:4e:11:7d:72:29:34:5d:0c: 56:85:df:72:b7:4f:fe:32:24:fd:61:a5:31:a1:98: a3:e2:06:45:24:22:54:8f:57:82:67:94:5e:06:be: 9b:54:66:38:80:0e:a4:03:05:a7:71:b8:99:ee:a4: d6:7e:7e:e8:9f:6e:97:42:53:f0:b9:a3:67:76:48: 07:e2:4c:1a:c8:b2:c7:29:a4:f4:b5:bc:63:2a:c3: ec:34:60:eb:29:51:08:3d:2e:24:4c:11:d3:d8:6b: fb:df:0c:ae:f0:bc:f9:f5:89:c9:5d:f2:7c:49:44: ba:76:bc:49:15:55:43:98:27:d0:80:35:9e:28:ab: a2:91:dc:05:34:9d:d3:7f:17:7a:69:aa:db:52:8f: 75:44:f3:88:f3:d0:90:00:3f:bb:9a:ae:3f:bd:f5: a3:dd:05:31:1f:35:2e:2f:02:ba:1b:e3:6c:57:fe: 1a:9c:ae:a7:4e:16:11:d3:f3:bb:ac:4b:5f:67:f2: 53:24:15:bf:3f:92:67:05:aa:75:ec:d3:af:4d:03: 7c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6C:01:26:F2:06:9E:38:F1:0F:FA:17:E8:77:5E:0B:DB:5A:33:9E X509v3 Authority Key Identifier: keyid:AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/323830343a333239383a3a2f33322d313238203d3e20323635303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3298::/32 Signature Algorithm: sha256WithRSAEncryption 0b:a9:02:7a:05:10:b5:71:3b:9d:63:98:c4:c2:ca:ed:2c:9b: 1a:1f:33:c2:e6:ba:f0:99:f8:91:1a:ba:2a:8a:d6:5c:da:6a: 2a:82:1d:33:79:24:b4:92:ab:fa:90:fa:b2:0d:7d:1a:1d:1a: 27:a8:8b:d9:99:76:a5:a2:17:c4:f7:3f:fe:7c:0e:ed:95:05: df:da:00:10:3a:bc:88:38:cc:b1:80:dc:e8:ab:0b:5d:f4:72: e2:17:3b:7b:ad:ca:52:24:b9:6c:59:81:bf:f9:75:00:18:03: 92:9d:5c:1e:4b:65:cf:ab:20:2e:dd:53:0f:f7:56:71:c8:e2: f0:f9:c4:57:75:af:b4:10:64:73:77:6d:f9:20:7d:1d:63:88: 4a:64:00:e9:0d:95:38:7b:fd:53:f3:c3:c9:7d:3e:dc:75:76: 0e:54:47:be:f4:99:00:cf:25:72:e1:95:16:33:f4:f8:cd:81: 87:e6:41:d6:06:5b:68:77:d9:68:da:60:96:38:7d:df:31:4a: 01:0f:de:47:cc:1b:a9:59:36:31:28:34:5a:7c:ca:8a:9b:19: 45:0f:1e:57:ed:23:4b:3d:4e:6c:ce:f0:a5:cd:6f:43:22:18: 5e:e7:f6:f9:0e:c4:01:0d:ef:d1:f0:5a:46:ac:dd:7f:da:2a: 78:2e:aa:24 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUXK5rXwCEuOBbVafT68tk76DsXs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMzFGNzREREUyMzExRTIzOTQwREQyN0M5QTM2Mzkx MENBQjU3NzAeFw0yNjAxMDUxMzMyMDZaFw0yNzAxMDQxMzM3MDZaMDMxMTAvBgNV BAMTKDNBNkMwMTI2RjIwNjlFMzhGMTBGRkExN0U4Nzc1RTBCREI1QTMzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhiT3D1DU8XEG8NiugU7y0mujK k+0MTvN52PfdOczuz8XrXxJlwYaf+F0i2hadP1Y/6p5OEX1yKTRdDFaF33K3T/4y JP1hpTGhmKPiBkUkIlSPV4JnlF4GvptUZjiADqQDBadxuJnupNZ+fuifbpdCU/C5 o2d2SAfiTBrIsscppPS1vGMqw+w0YOspUQg9LiRMEdPYa/vfDK7wvPn1icld8nxJ RLp2vEkVVUOYJ9CANZ4oq6KR3AU0ndN/F3ppqttSj3VE84jz0JAAP7uarj+99aPd BTEfNS4vArob42xX/hqcrqdOFhHT87usS19n8lMkFb8/kmcFqnXs069NA3yjAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUOmwBJvIGnjjxD/oX6HdeC9taM54wHwYDVR0j BBgwFoAUryMfdN3iMR4jlA3SfJo2ORDKtXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JHaWFtYWNGV0V5VzlaUFM3U1NxeEhGQVlIdHZWaXhGMVhlUE1vZDFx dGkvMC9BRjIzMUY3NERERTIzMTFFMjM5NDBERDI3QzlBMzYzOTEwQ0FCNTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGMjMxRjc0RERFMjMxMUUy Mzk0MEREMjdDOUEzNjM5MTBDQUI1NzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNyR2lhbWFjRldFeVc5WlBTN1NTcXhIRkFZSHR2Vml4RjFYZVBNb2QxcXRpLzAv MzIzODMwMzQzYTMzMzIzOTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzUzMDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBDKYMA0GCSqGSIb3DQEBCwUAA4IBAQALqQJ6 BRC1cTudY5jEwsrtLJsaHzPC5rrwmfiRGroqitZc2moqgh0zeSS0kqv6kPqyDX0a HRonqIvZmXalohfE9z/+fA7tlQXf2gAQOryIOMyxgNzoqwtd9HLiFzt7rcpSJLls WYG/+XUAGAOSnVweS2XPqyAu3VMP91ZxyOLw+cRXda+0EGRzd235IH0dY4hKZADp DZU4e/1T88PJfT7cdXYOVEe+9JkAzyVy4ZUWM/T4zYGH5kHWBltod9lo2mCWOH3f MUoBD95HzBupWTYxKDRafMqKmxlFDx5X7SNLPU5szvClzW9DIhhe5/b5DsQBDe/R 8FpGrN1/2ip4Lqok -----END CERTIFICATE-----Generated at Fri Jan 9 23:25:23 2026 by rpki-client