This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a383030303a3a2f33332d3333203d3e20323730343938.roa File: 323830343a366365303a383030303a3a2f33332d3333203d3e20323730343938.roa (raw, json) Hash identifier: 9z1hUAjp6O7RYrSxnZq9tYPhqhdMlDmD7Im3Jyz9kcs= Subject key identifier: 0B:F8:BA:9D:AC:56:0D:C8:46:AE:E1:B5:B9:11:11:43:E2:9D:BB:A4 Certificate issuer: /CN=B487F45E78D59DF1F45590F19639DB670B31088D Certificate serial: 32126ED3901858360852F5A121E25E7236C6BFD6 Authority key identifier: B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer Subject info access: rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a383030303a3a2f33332d3333203d3e20323730343938.roa Signing time: Mon 05 Jan 2026 13:53:55 +0000 ROA not before: Mon 05 Jan 2026 13:48:55 +0000 ROA not after: Mon 04 Jan 2027 13:53:55 +0000 asID: 270498 IP address blocks: 2804:6ce0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Jan 2026 18:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:12:6e:d3:90:18:58:36:08:52:f5:a1:21:e2:5e:72:36:c6:bf:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B487F45E78D59DF1F45590F19639DB670B31088D Validity Not Before: Jan 5 13:48:55 2026 GMT Not After : Jan 4 13:53:55 2027 GMT Subject: CN=0BF8BA9DAC560DC846AEE1B5B9111143E29DBBA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1e:7b:41:a0:74:e0:fc:00:3b:7f:cc:65:8d: 95:59:01:94:33:b9:32:cb:52:13:71:6f:b0:94:d3: 9b:79:83:d2:16:36:32:86:d5:2c:44:1a:e9:c6:14: 77:9e:3d:23:a0:7a:ee:c2:32:6f:04:e3:e9:bb:96: e9:d5:0c:3c:f0:52:b6:39:80:0e:a3:7f:d4:8d:16: 30:10:e4:ef:da:1a:e3:bd:25:c3:bf:b3:26:af:56: 67:7b:8c:c6:44:60:4c:5c:2e:d4:df:4b:a7:da:c9: 1e:a9:5a:56:42:b0:dc:9b:7e:ba:f2:18:1f:d4:b8: d6:6d:61:c1:00:44:ec:d3:70:93:64:3f:6f:15:7c: 2f:ce:6a:03:ad:95:43:2f:65:67:65:05:29:63:38: e7:ab:98:8d:47:b8:1c:40:d6:7c:15:5f:0e:86:3e: 70:27:b2:8a:b7:71:9b:c3:19:4f:16:46:04:75:cb: 39:37:46:1a:eb:cd:ce:67:fa:6b:f0:d5:84:71:9f: f1:7b:1f:09:fe:00:a9:af:fe:f7:60:c7:1b:68:24: 09:09:ed:9d:bf:4d:24:a8:7e:1c:fc:ff:77:01:f9: 4d:2b:d5:e3:07:61:2b:c7:a0:87:03:a0:29:04:85: 90:bc:9b:a9:27:cd:0e:c8:ac:bc:98:a5:97:fa:8c: 43:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F8:BA:9D:AC:56:0D:C8:46:AE:E1:B5:B9:11:11:43:E2:9D:BB:A4 X509v3 Authority Key Identifier: keyid:B4:87:F4:5E:78:D5:9D:F1:F4:55:90:F1:96:39:DB:67:0B:31:08:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/B487F45E78D59DF1F45590F19639DB670B31088D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B487F45E78D59DF1F45590F19639DB670B31088D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6GjKhCPcpnVYAoMB4qvM1QuWtFj3HUBZVHCKkGZsRo3N/0/323830343a366365303a383030303a3a2f33332d3333203d3e20323730343938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6ce0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 6c:b5:6e:be:cc:54:cb:cf:a5:0f:89:9d:8c:d8:66:95:69:ec: 8a:c2:66:95:1b:46:37:29:ea:a0:2f:f0:52:f6:4a:0e:ff:7d: 51:d4:74:76:41:4f:e0:a0:fd:74:60:f5:3b:a5:c6:02:0e:69: 98:f6:47:40:a8:bd:00:5d:ab:01:5b:17:fc:62:f9:48:b3:84: 92:04:3b:3b:69:ce:78:18:bd:ce:08:11:fa:8b:02:09:e3:61: 1d:b6:2d:97:f2:f4:91:44:83:90:fd:d5:b4:7f:fa:a9:f4:d0: 14:fb:d1:64:47:b5:a6:e7:78:e9:a4:d6:0e:65:f0:11:de:53: 44:23:d6:10:83:ae:d8:33:a8:33:9e:c7:57:97:19:05:e5:73: b7:9a:f6:81:1b:ab:33:21:0e:98:47:2c:3b:b0:d3:de:b6:36: b0:c2:ed:07:da:73:5d:58:46:10:2f:49:bd:a6:c6:87:86:19: 0d:e7:5d:3c:c8:f2:31:bd:13:e5:21:72:bb:05:ae:24:25:b1: df:8d:a5:12:9e:f6:d8:ba:f5:fd:b6:08:08:de:70:02:c2:50: 54:8b:53:bf:c1:0d:6b:f8:a2:a5:70:85:6e:00:bf:f3:82:f5: 1f:b0:ea:eb:47:86:51:24:49:1b:a3:03:95:df:32:20:db:3f: 88:4a:82:88 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUMhJu05AYWDYIUvWhIeJecjbGv9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4N0Y0NUU3OEQ1OURGMUY0NTU5MEYxOTYzOURCNjcw QjMxMDg4RDAeFw0yNjAxMDUxMzQ4NTVaFw0yNzAxMDQxMzUzNTVaMDMxMTAvBgNV BAMTKDBCRjhCQTlEQUM1NjBEQzg0NkFFRTFCNUI5MTExMTQzRTI5REJCQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHntBoHTg/AA7f8xljZVZAZQz uTLLUhNxb7CU05t5g9IWNjKG1SxEGunGFHeePSOgeu7CMm8E4+m7lunVDDzwUrY5 gA6jf9SNFjAQ5O/aGuO9JcO/syavVmd7jMZEYExcLtTfS6fayR6pWlZCsNybfrry GB/UuNZtYcEAROzTcJNkP28VfC/OagOtlUMvZWdlBSljOOermI1HuBxA1nwVXw6G PnAnsoq3cZvDGU8WRgR1yzk3Rhrrzc5n+mvw1YRxn/F7Hwn+AKmv/vdgxxtoJAkJ 7Z2/TSSofhz8/3cB+U0r1eMHYSvHoIcDoCkEhZC8m6knzQ7IrLyYpZf6jENbAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUC/i6naxWDchGruG1uRERQ+Kdu6QwHwYDVR0j BBgwFoAUtIf0XnjVnfH0VZDxljnbZwsxCI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkdqS2hDUGNwblZZQW9NQjRxdk0xUXVXdEZqM0hVQlpWSENLa0dac1Jv M04vMC9CNDg3RjQ1RTc4RDU5REYxRjQ1NTkwRjE5NjM5REI2NzBCMzEwODhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0ODdGNDVFNzhENTlERjFG NDU1OTBGMTk2MzlEQjY3MEIzMTA4OEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZHaktoQ1BjcG5WWUFvTUI0cXZNMVF1V3RGajNIVUJaVkhDS2tHWnNSbzNOLzAv MzIzODMwMzQzYTM2NjM2NTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMDM0MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEbOCAMA0GCSqGSIb3DQEBCwUA A4IBAQBstW6+zFTLz6UPiZ2M2GaVaeyKwmaVG0Y3KeqgL/BS9koO/31R1HR2QU/g oP10YPU7pcYCDmmY9kdAqL0AXasBWxf8YvlIs4SSBDs7ac54GL3OCBH6iwIJ42Ed ti2X8vSRRIOQ/dW0f/qp9NAU+9FkR7Wm53jppNYOZfAR3lNEI9YQg67YM6gznsdX lxkF5XO3mvaBG6szIQ6YRyw7sNPetjawwu0H2nNdWEYQL0m9psaHhhkN5108yPIx vRPlIXK7Ba4kJbHfjaUSnvbYuvX9tggI3nACwlBUi1O/wQ1r+KKlcIVuAL/zgvUf sOrrR4ZRJEkbowOV3zIg2z+ISoKI -----END CERTIFICATE-----Generated at Sun Jan 11 03:00:55 2026 by rpki-client