This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/323830313a38653a3a2f33322d3438203d3e20313938393439.roa File: 323830313a38653a3a2f33322d3438203d3e20313938393439.roa (raw, json) Hash identifier: CxBZcVcs0zRokgf5NsuyeWExlz9SeC4w5+lGEh2FhQ0= Subject key identifier: 1E:82:3D:5A:74:9D:5B:D3:F6:1B:14:14:3D:19:69:8B:04:83:73:A5 Certificate issuer: /CN=6321913B8F265DB266263684C1BC420640061E1A Certificate serial: 3144EF1F28D2236DC838C62072C74A04F3195507 Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/323830313a38653a3a2f33322d3438203d3e20313938393439.roa Signing time: Fri 26 Dec 2025 11:06:54 +0000 ROA not before: Fri 26 Dec 2025 11:01:54 +0000 ROA not after: Fri 25 Dec 2026 11:06:54 +0000 asID: 198949 IP address blocks: 2801:8e::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 Jan 2026 10:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:44:ef:1f:28:d2:23:6d:c8:38:c6:20:72:c7:4a:04:f3:19:55:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A Validity Not Before: Dec 26 11:01:54 2025 GMT Not After : Dec 25 11:06:54 2026 GMT Subject: CN=1E823D5A749D5BD3F61B14143D19698B048373A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3f:95:85:d6:73:fb:90:55:b9:b0:62:46:51: fd:ae:ac:00:e0:68:28:4c:d2:b8:5b:50:1f:cc:cc: fe:9c:29:a1:4b:7f:79:cf:71:28:dd:6b:de:16:5b: 33:6c:97:09:7b:37:36:ec:aa:1c:17:32:ca:26:3c: fe:c9:05:87:23:c2:0d:24:52:59:44:f6:9a:7b:4f: 18:a5:42:10:ac:d2:ac:79:86:78:f8:ca:53:83:a2: 21:8d:19:93:f9:6a:6c:aa:e5:b9:e4:87:26:23:28: 9a:0d:3f:1a:05:2c:b8:07:e3:e7:5a:9d:df:15:8d: 2e:ce:3f:48:db:ef:10:3b:22:f0:7f:b0:25:c0:a6: df:28:55:d1:5f:41:d0:87:9d:6c:e5:33:30:b5:87: 4a:40:b5:71:8b:a2:b0:34:04:0c:29:c0:07:65:ad: ee:b4:f5:78:83:f2:9c:2c:55:03:4f:f7:da:57:f9: 0d:a7:46:d3:c1:4e:2a:2e:57:3d:46:57:07:b3:b8: 5a:3b:7d:91:87:0b:25:40:1e:99:f1:5c:e7:3c:98: f0:ac:de:2c:a1:1b:bc:67:a6:68:4c:7b:f1:29:e8: 19:5b:ee:4f:e0:16:f7:43:81:4a:8a:dc:c2:cf:1e: b5:1a:e3:87:23:31:f2:37:28:82:34:57:01:0a:00: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:82:3D:5A:74:9D:5B:D3:F6:1B:14:14:3D:19:69:8B:04:83:73:A5 X509v3 Authority Key Identifier: keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/323830313a38653a3a2f33322d3438203d3e20313938393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:8e::/32 Signature Algorithm: sha256WithRSAEncryption 78:d9:d0:9e:ae:98:f7:1d:69:e3:0f:ba:af:f8:35:c5:14:0b: 50:18:a4:46:8d:f2:59:0e:ec:4f:ca:97:88:86:ad:5b:2a:6f: 95:30:44:56:c1:7f:06:49:43:f2:27:66:c3:19:ee:8c:5e:fd: ea:92:ca:12:05:d3:c6:6d:da:4c:b4:5f:d8:5a:d6:27:f3:e1: 16:1e:07:50:24:f9:b7:20:53:cd:0f:a8:83:45:0a:6f:6d:98: 4e:44:67:93:81:5f:66:00:53:3d:b0:2c:76:f8:10:08:98:6d: 63:17:5d:fe:2d:57:5e:21:22:fb:e0:10:4f:bd:99:62:56:3d: f0:ce:b7:72:67:7c:82:23:f9:49:01:a4:f0:a4:73:97:f1:ea: 3b:7a:45:55:4e:05:00:3e:3e:7d:98:72:be:29:5c:2b:37:28: 30:43:b8:67:f7:a8:9a:38:f5:3f:dc:d8:74:61:f3:8e:db:c5: e7:67:6c:1f:81:d6:0e:57:5f:db:5a:c2:ed:e3:96:6c:7a:da: 2d:8f:6c:d5:bc:c5:8b:72:81:60:01:68:36:87:eb:e2:87:ae: b5:1e:8a:3e:fb:97:fd:a3:4c:a2:e6:88:38:e3:e6:5e:6d:eb: b3:9b:57:5f:1c:67:f4:04:dd:1e:13:f7:20:4c:5f:bd:20:fd: 8c:03:55:73 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUMUTvHyjSI23IOMYgcsdKBPMZVQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyMTkxM0I4RjI2NURCMjY2MjYzNjg0QzFCQzQyMDY0 MDA2MUUxQTAeFw0yNTEyMjYxMTAxNTRaFw0yNjEyMjUxMTA2NTRaMDMxMTAvBgNV BAMTKDFFODIzRDVBNzQ5RDVCRDNGNjFCMTQxNDNEMTk2OThCMDQ4MzczQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZP5WF1nP7kFW5sGJGUf2urADg aChM0rhbUB/MzP6cKaFLf3nPcSjda94WWzNslwl7NzbsqhwXMsomPP7JBYcjwg0k UllE9pp7TxilQhCs0qx5hnj4ylODoiGNGZP5amyq5bnkhyYjKJoNPxoFLLgH4+da nd8VjS7OP0jb7xA7IvB/sCXApt8oVdFfQdCHnWzlMzC1h0pAtXGLorA0BAwpwAdl re609XiD8pwsVQNP99pX+Q2nRtPBTiouVz1GVwezuFo7fZGHCyVAHpnxXOc8mPCs 3iyhG7xnpmhMe/Ep6Blb7k/gFvdDgUqK3MLPHrUa44cjMfI3KII0VwEKAP8TAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUHoI9WnSdW9P2GxQUPRlpiwSDc6UwHwYDVR0j BBgwFoAUYyGRO48mXbJmJjaEwbxCBkAGHhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEtzN0xmWXB3d3lDalJZUk1RbWtDQ0oyMjY3ZFo1Y2toZVY3SEtSUlJF SlkvMi82MzIxOTEzQjhGMjY1REIyNjYyNjM2ODRDMUJDNDIwNjQwMDYxRTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjE5MTNCOEYyNjVEQjI2 NjI2MzY4NEMxQkM0MjA2NDAwNjFFMUEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRLczdMZllwd3d5Q2pSWVJNUW1rQ0NKMjI2N2RaNWNraGVWN0hLUlJSRUpZLzIv MzIzODMwMzEzYTM4NjUzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMTM5MzgzOTM0 Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoAQCOMA0GCSqGSIb3DQEBCwUAA4IBAQB42dCerpj3HWnj D7qv+DXFFAtQGKRGjfJZDuxPypeIhq1bKm+VMERWwX8GSUPyJ2bDGe6MXv3qksoS BdPGbdpMtF/YWtYn8+EWHgdQJPm3IFPND6iDRQpvbZhORGeTgV9mAFM9sCx2+BAI mG1jF13+LVdeISL74BBPvZliVj3wzrdyZ3yCI/lJAaTwpHOX8eo7ekVVTgUAPj59 mHK+KVwrNygwQ7hn96iaOPU/3Nh0YfOO28XnZ2wfgdYOV1/bWsLt45Zsetotj2zV vMWLcoFgAWg2h+vih661Hoo++5f9o0yi5og44+Zebeuzm1dfHGf0BN0eE/cgTF+9 IP2MA1Vz -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:19 2026 by rpki-client