This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/323830343a376464303a3a2f33322d313238203d3e20323731353834.roa File: 323830343a376464303a3a2f33322d313238203d3e20323731353834.roa (raw, json) Hash identifier: mlUJ+quRfskP/Sx5+VIC5IVIX52LJCcChlx6Gr6nMLo= Subject key identifier: AF:9F:77:23:FD:EA:D1:26:D4:EF:CB:70:ED:F0:16:67:A2:AE:F7:93 Certificate issuer: /CN=F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3 Certificate serial: 7B7AF1F31D7B15DF11AE364172FFC52410547C79 Authority key identifier: F8:40:9E:FF:6F:B6:FE:F1:1C:3B:A9:A4:80:1F:61:51:3E:4F:41:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/323830343a376464303a3a2f33322d313238203d3e20323731353834.roa Signing time: Mon 29 Dec 2025 15:44:39 +0000 ROA not before: Mon 29 Dec 2025 15:39:39 +0000 ROA not after: Mon 28 Dec 2026 15:44:39 +0000 asID: 271584 IP address blocks: 2804:7dd0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 05:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7a:f1:f3:1d:7b:15:df:11:ae:36:41:72:ff:c5:24:10:54:7c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3 Validity Not Before: Dec 29 15:39:39 2025 GMT Not After : Dec 28 15:44:39 2026 GMT Subject: CN=AF9F7723FDEAD126D4EFCB70EDF01667A2AEF793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:31:29:f4:0c:8c:ff:d2:99:fb:67:e9:9c: 45:93:d6:35:da:14:b2:e6:cc:f8:46:ba:92:f9:6f: 58:d5:6e:6b:f7:45:51:67:04:58:f6:b3:cf:bf:6e: 87:04:ba:50:95:3c:22:81:81:b8:d6:de:c6:b8:5e: e8:2e:5b:a7:a7:53:99:28:65:2d:64:a2:8b:1f:0a: f3:51:cb:ee:46:f6:3b:58:13:9c:5e:e7:52:78:05: 9f:af:93:08:db:5a:e1:35:e3:76:3d:fd:58:b1:07: ce:4b:1a:e4:f4:95:06:64:4e:f0:f3:73:34:ed:ee: bf:35:1b:ec:c7:d4:2a:12:db:3d:92:09:84:eb:b2: 8c:f7:a6:c2:a2:70:98:92:fd:d4:fd:e5:47:a1:4e: a7:7d:19:20:0c:79:c0:ce:2a:b9:6b:1c:aa:c9:1b: 7f:40:15:0b:c4:87:5f:02:42:e5:b6:3a:9a:1f:ae: 78:e9:2c:f9:0b:ed:7e:73:70:4a:18:43:60:a8:97: ef:07:24:db:fe:70:c4:d6:e4:17:9b:b2:f4:f8:86: 7b:6d:a2:06:b3:21:98:9b:c4:70:91:91:4b:5c:fa: 41:52:88:89:99:88:c4:41:e4:a9:bb:ba:95:50:21: 4c:89:19:e4:f4:d0:40:90:3f:8c:a3:ea:9a:9d:1b: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9F:77:23:FD:EA:D1:26:D4:EF:CB:70:ED:F0:16:67:A2:AE:F7:93 X509v3 Authority Key Identifier: keyid:F8:40:9E:FF:6F:B6:FE:F1:1C:3B:A9:A4:80:1F:61:51:3E:4F:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/323830343a376464303a3a2f33322d313238203d3e20323731353834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7dd0::/32 Signature Algorithm: sha256WithRSAEncryption 6a:2e:ee:91:b8:5b:01:27:4e:b9:7b:06:0c:e8:bb:2f:35:83: be:4d:39:91:48:f7:6c:21:e3:54:34:16:9c:1c:a4:b0:39:2e: 57:56:ad:ba:d8:a6:b6:5a:55:4e:e0:25:cc:45:fa:4e:80:5e: d2:a7:d0:35:54:61:4c:5c:bb:ff:ac:bd:98:47:1a:27:cc:ef: a4:04:df:cf:98:ec:f9:21:a9:e7:19:3e:1a:6c:52:56:9f:00: d4:07:b7:d7:75:93:b2:74:72:99:54:7a:29:50:9a:e0:95:52: 93:4d:ea:ab:a6:cd:df:78:67:73:75:cc:45:12:00:88:49:ee: 36:57:55:e5:0b:2d:e6:3f:d3:b2:79:04:11:c5:58:ed:52:ae: 63:48:6d:17:91:00:94:24:12:30:dd:c2:d3:f5:9c:12:f9:db: ff:6c:86:5f:94:73:af:f2:37:85:69:ae:4c:61:90:58:8f:bd: eb:f5:b6:9b:69:8c:e8:48:1c:b3:bf:12:87:e3:73:cd:65:16: 93:4a:35:6f:cb:7e:68:a4:d9:84:de:7d:54:64:25:df:61:f6: 11:42:ef:eb:92:04:5d:78:76:94:26:1f:e7:96:3f:d9:cc:be: 69:55:9d:94:98:1c:7b:26:13:b4:28:2b:02:0b:32:60:cf:71: e2:ff:6c:38 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUe3rx8x17Fd8RrjZBcv/FJBBUfHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MDlFRkY2RkI2RkVGMTFDM0JBOUE0ODAxRjYxNTEz RTRGNDFBMzAeFw0yNTEyMjkxNTM5MzlaFw0yNjEyMjgxNTQ0MzlaMDMxMTAvBgNV BAMTKEFGOUY3NzIzRkRFQUQxMjZENEVGQ0I3MEVERjAxNjY3QTJBRUY3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrjEp9AyM/9KZ+2fpnEWT1jXa FLLmzPhGupL5b1jVbmv3RVFnBFj2s8+/bocEulCVPCKBgbjW3sa4XuguW6enU5ko ZS1koosfCvNRy+5G9jtYE5xe51J4BZ+vkwjbWuE143Y9/VixB85LGuT0lQZkTvDz czTt7r81G+zH1CoS2z2SCYTrsoz3psKicJiS/dT95UehTqd9GSAMecDOKrlrHKrJ G39AFQvEh18CQuW2OpofrnjpLPkL7X5zcEoYQ2Col+8HJNv+cMTW5BebsvT4hntt ogazIZibxHCRkUtc+kFSiImZiMRB5Km7upVQIUyJGeT00ECQP4yj6pqdG1vjAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUr593I/3q0SbU78tw7fAWZ6Ku95MwHwYDVR0j BBgwFoAU+ECe/2+2/vEcO6mkgB9hUT5PQaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE40SEpFM3UyekRTOUs1NUxBWGMxWWJHcm42NnhYcDhHNkpEZzZOSG1k UWEvMC9GODQwOUVGRjZGQjZGRUYxMUMzQkE5QTQ4MDFGNjE1MTNFNEY0MUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NDA5RUZGNkZCNkZFRjEx QzNCQTlBNDgwMUY2MTUxM0U0RjQxQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RONEhKRTN1MnpEUzlLNTVMQVhjMVliR3JuNjZ4WHA4RzZKRGc2TkhtZFFhLzAv MzIzODMwMzQzYTM3NjQ2NDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzEzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBH3QMA0GCSqGSIb3DQEBCwUAA4IBAQBqLu6R uFsBJ065ewYM6LsvNYO+TTmRSPdsIeNUNBacHKSwOS5XVq262Ka2WlVO4CXMRfpO gF7Sp9A1VGFMXLv/rL2YRxonzO+kBN/PmOz5IannGT4abFJWnwDUB7fXdZOydHKZ VHopUJrglVKTTeqrps3feGdzdcxFEgCISe42V1XlCy3mP9OyeQQRxVjtUq5jSG0X kQCUJBIw3cLT9ZwS+dv/bIZflHOv8jeFaa5MYZBYj73r9babaYzoSByzvxKH43PN ZRaTSjVvy35opNmE3n1UZCXfYfYRQu/rkgRdeHaUJh/nlj/ZzL5pVZ2UmBx7JhO0 KCsCCzJgz3Hi/2w4 -----END CERTIFICATE-----Generated at Fri Jan 9 20:56:40 2026 by rpki-client