This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa File: 323830343a386338383a3a2f33322d3438203d3e20323733333131.roa (raw, json) Hash identifier: EgwJ42oqabBLSt341k6rowzLzzjq1/i+Hka42ubuLkI= Subject key identifier: 16:36:2B:3A:CF:6B:2C:9E:78:6D:B3:1D:B3:9E:02:ED:07:67:85:37 Certificate issuer: /CN=44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39 Certificate serial: 09D86E21F81978D4CB097D07E8F84202B2D5F600 Authority key identifier: 44:B5:4D:25:55:E4:ED:03:AE:FA:FC:0B:4B:45:63:63:5A:9F:BA:39 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.cer Subject info access: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa Signing time: Fri 02 Jan 2026 18:31:06 +0000 ROA not before: Fri 02 Jan 2026 18:26:06 +0000 ROA not after: Fri 01 Jan 2027 18:31:06 +0000 asID: 273311 IP address blocks: 2804:8c88::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.crl rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 10:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d8:6e:21:f8:19:78:d4:cb:09:7d:07:e8:f8:42:02:b2:d5:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39 Validity Not Before: Jan 2 18:26:06 2026 GMT Not After : Jan 1 18:31:06 2027 GMT Subject: CN=16362B3ACF6B2C9E786DB31DB39E02ED07678537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:af:40:04:d0:6f:48:9c:1b:d9:b2:46:b6: 1c:ce:63:b4:ed:53:85:de:5e:a8:2b:36:06:6b:7e: 57:38:5c:ed:f8:24:87:3c:ac:c2:04:44:14:e1:b9: 19:6f:09:fa:24:e8:93:64:4f:a7:a4:5b:84:cb:e1: 2c:b2:5f:31:53:12:e1:5b:67:1b:44:ec:4b:ab:62: d5:af:19:c1:dc:d2:91:ec:ee:72:ed:e4:aa:12:85: 36:ae:5c:b4:26:07:7d:1d:08:cf:a7:26:e4:16:0d: 3d:41:d0:86:0a:74:8a:03:3a:be:eb:f1:fb:c9:c6: 52:78:eb:78:fe:4c:2d:bb:90:06:bb:4f:58:7f:39: 99:ee:15:d0:76:d9:e4:27:e0:09:ad:52:06:4a:8b: 7c:87:e9:0a:7b:c1:2e:09:f1:e7:39:2f:6c:54:76: 1b:04:12:3c:b8:21:8d:1e:ad:f3:d4:e6:d0:db:7a: 21:7e:c1:c2:0c:80:76:87:39:d7:28:75:1c:ff:db: 2a:a0:79:19:10:0c:0f:82:09:5c:3f:3f:f6:7b:c7: 25:dc:e6:a7:20:25:0c:eb:9a:64:95:e7:da:8a:1b: 8a:31:1d:e3:97:12:4e:cc:e8:09:3a:88:25:96:fd: 04:ea:9d:d1:c5:e7:b0:ad:84:33:42:82:43:4e:36: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:36:2B:3A:CF:6B:2C:9E:78:6D:B3:1D:B3:9E:02:ED:07:67:85:37 X509v3 Authority Key Identifier: keyid:44:B5:4D:25:55:E4:ED:03:AE:FA:FC:0B:4B:45:63:63:5A:9F:BA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8c88::/32 Signature Algorithm: sha256WithRSAEncryption 30:2a:6d:34:c3:13:fe:93:9e:83:6c:ce:93:ff:2d:e2:fc:f4: f3:62:95:1e:d1:1e:ca:68:f7:96:94:31:62:90:07:c3:c7:14: 05:0c:ea:af:4e:cc:92:11:95:86:ba:ea:85:e8:1c:77:02:30: 15:4b:54:3d:e9:67:b3:c3:1f:e2:50:3c:5c:fc:85:c0:48:6d: e7:b2:05:89:55:53:8c:88:7c:79:3f:9e:97:29:8e:29:78:eb: 84:22:d8:89:0a:dc:ee:f6:32:30:d8:be:a6:2f:47:9c:17:20: 7e:d2:f3:b0:e0:b2:08:83:ab:7f:64:80:85:cb:14:55:75:c1: 29:dc:49:f1:81:71:a5:22:6b:85:fa:8a:29:93:ee:3e:5d:c2: f2:a9:6e:41:3a:b9:f1:1c:03:df:4c:a8:ab:f1:5f:4b:82:45: e8:1f:e7:45:b0:e8:0f:83:19:4b:81:3d:1a:fe:cb:82:81:40: 7a:48:be:42:38:17:62:81:4c:77:b9:b1:c0:82:af:7c:50:22: af:7c:bd:80:e2:7e:fd:28:62:48:4b:9b:95:50:ba:9b:a3:0b: 04:bf:20:7d:68:f7:e1:c7:85:f8:40:b4:8f:30:92:f1:2d:75: 99:a9:82:3f:a4:02:c7:d7:1b:ef:78:0a:ad:45:6b:04:5f:d6: de:a0:84:da -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUCdhuIfgZeNTLCX0H6PhCArLV9gAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRCNTREMjU1NUU0RUQwM0FFRkFGQzBCNEI0NTYzNjM1 QTlGQkEzOTAeFw0yNjAxMDIxODI2MDZaFw0yNzAxMDExODMxMDZaMDMxMTAvBgNV BAMTKDE2MzYyQjNBQ0Y2QjJDOUU3ODZEQjMxREIzOUUwMkVEMDc2Nzg1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Aq9ABNBvSJwb2bJGthzOY7Tt U4XeXqgrNgZrflc4XO34JIc8rMIERBThuRlvCfok6JNkT6ekW4TL4SyyXzFTEuFb ZxtE7EurYtWvGcHc0pHs7nLt5KoShTauXLQmB30dCM+nJuQWDT1B0IYKdIoDOr7r 8fvJxlJ463j+TC27kAa7T1h/OZnuFdB22eQn4AmtUgZKi3yH6Qp7wS4J8ec5L2xU dhsEEjy4IY0erfPU5tDbeiF+wcIMgHaHOdcodRz/2yqgeRkQDA+CCVw/P/Z7xyXc 5qcgJQzrmmSV59qKG4oxHeOXEk7M6Ak6iCWW/QTqndHF57CthDNCgkNONvsZAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUFjYrOs9rLJ54bbMds54C7QdnhTcwHwYDVR0j BBgwFoAURLVNJVXk7QOu+vwLS0VjY1qfujkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJI VEMvMC80NEI1NEQyNTU1RTRFRDAzQUVGQUZDMEI0QjQ1NjM2MzVBOUZCQTM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0QjU0RDI1NTVFNEVEMDNB RUZBRkMwQjRCNDU2MzYzNUE5RkJBMzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR6M3lpakQxQkJoaVNGUDdkVzhGc0doc00zRnJGdkVtREw5Y0JhbUpSSFRDLzAv MzIzODMwMzQzYTM4NjMzODM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASMiDANBgkqhkiG9w0BAQsFAAOCAQEAMCptNMMT /pOeg2zOk/8t4vz082KVHtEeymj3lpQxYpAHw8cUBQzqr07MkhGVhrrqhegcdwIw FUtUPelns8Mf4lA8XPyFwEht57IFiVVTjIh8eT+elymOKXjrhCLYiQrc7vYyMNi+ pi9HnBcgftLzsOCyCIOrf2SAhcsUVXXBKdxJ8YFxpSJrhfqKKZPuPl3C8qluQTq5 8RwD30yoq/FfS4JF6B/nRbDoD4MZS4E9Gv7LgoFAeki+QjgXYoFMd7mxwIKvfFAi r3y9gOJ+/ShiSEublVC6m6MLBL8gfWj34ceF+EC0jzCS8S11mamCP6QCx9cb73gK rUVrBF/W3qCE2g== -----END CERTIFICATE-----Generated at Fri Jan 9 20:56:49 2026 by rpki-client