This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G34DoiX6f1pcGzfTRJHpWKwiYG85avjb1Q32YK8eimv7/0/323830343a333366303a3a2f33322d3438203d3e20323635343236.roa File: 323830343a333366303a3a2f33322d3438203d3e20323635343236.roa (raw, json) Hash identifier: /ib+wKqNznoyQmgE+liPS3MS6W0/N2wVHETfvpwBaoQ= Subject key identifier: 6A:FD:D9:0B:27:19:0B:BB:E4:8C:3E:74:7E:05:B3:3C:10:4A:FB:0F Certificate issuer: /CN=5CFCDB30DCC83A9C5335016D0A6ABC57F11992CE Certificate serial: 20B5CAB09238F02BD5954047E1E54B3B9674EB0D Authority key identifier: 5C:FC:DB:30:DC:C8:3A:9C:53:35:01:6D:0A:6A:BC:57:F1:19:92:CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFCDB30DCC83A9C5335016D0A6ABC57F11992CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/G34DoiX6f1pcGzfTRJHpWKwiYG85avjb1Q32YK8eimv7/0/323830343a333366303a3a2f33322d3438203d3e20323635343236.roa Signing time: Mon 29 Dec 2025 19:48:32 +0000 ROA not before: Mon 29 Dec 2025 19:43:32 +0000 ROA not after: Mon 28 Dec 2026 19:48:32 +0000 asID: 265426 IP address blocks: 2804:33f0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G34DoiX6f1pcGzfTRJHpWKwiYG85avjb1Q32YK8eimv7/0/5CFCDB30DCC83A9C5335016D0A6ABC57F11992CE.crl rsync://rpki-repo.registro.br/repo/G34DoiX6f1pcGzfTRJHpWKwiYG85avjb1Q32YK8eimv7/0/5CFCDB30DCC83A9C5335016D0A6ABC57F11992CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFCDB30DCC83A9C5335016D0A6ABC57F11992CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 11:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b5:ca:b0:92:38:f0:2b:d5:95:40:47:e1:e5:4b:3b:96:74:eb:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFCDB30DCC83A9C5335016D0A6ABC57F11992CE Validity Not Before: Dec 29 19:43:32 2025 GMT Not After : Dec 28 19:48:32 2026 GMT Subject: CN=6AFDD90B27190BBBE48C3E747E05B33C104AFB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:7f:e5:79:17:e5:ee:89:8a:9b:fa:05:dd: b1:20:aa:a0:7b:ba:2a:f3:9a:d8:30:e8:82:4e:f8: 20:09:c8:ce:9e:21:42:32:21:86:c0:d8:b2:9c:20: b8:be:ae:b6:de:ca:ca:cf:c5:7b:70:34:55:a9:e9: 96:d0:ca:e1:09:fd:de:34:a6:39:a7:20:7f:40:73: 2f:2b:bb:c1:4d:9a:c2:10:22:48:f0:25:f3:51:53: 5f:d7:b0:f7:ae:4c:9d:4b:c4:f2:73:54:67:da:e4: 2c:d7:cc:dc:e7:50:68:01:0e:91:37:04:d3:d6:ce: 7e:d2:51:84:05:dc:4d:5f:a2:40:f9:19:32:50:78: 51:6f:a5:8b:3d:00:05:91:a5:9c:ba:50:f0:e5:d9: bf:ee:0c:e1:5a:ef:e9:5b:1e:ea:7c:70:03:73:3d: b2:08:50:8c:c4:a0:44:9f:84:58:7f:4d:f9:8a:00: c1:bd:48:c1:3b:c3:91:07:c3:5b:53:e9:ee:b6:8f: 7e:68:8b:c8:2d:18:67:8b:52:7e:1e:19:cd:75:e1: e3:44:66:a7:e7:e1:66:ef:ec:0b:8e:a4:e9:26:01: 9b:c1:e5:b6:81:20:10:89:5b:5f:45:16:cb:19:15: 2e:fe:85:54:13:e3:83:b6:cc:d6:ae:ee:c6:8a:f6: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FD:D9:0B:27:19:0B:BB:E4:8C:3E:74:7E:05:B3:3C:10:4A:FB:0F X509v3 Authority Key Identifier: keyid:5C:FC:DB:30:DC:C8:3A:9C:53:35:01:6D:0A:6A:BC:57:F1:19:92:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G34DoiX6f1pcGzfTRJHpWKwiYG85avjb1Q32YK8eimv7/0/5CFCDB30DCC83A9C5335016D0A6ABC57F11992CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFCDB30DCC83A9C5335016D0A6ABC57F11992CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G34DoiX6f1pcGzfTRJHpWKwiYG85avjb1Q32YK8eimv7/0/323830343a333366303a3a2f33322d3438203d3e20323635343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:33f0::/32 Signature Algorithm: sha256WithRSAEncryption 53:cc:86:3e:71:14:15:bd:0b:a9:ed:1e:ca:71:65:42:ef:eb: 2c:d1:27:fd:3f:ab:e3:f6:b9:9f:b7:b9:b2:d8:43:1b:13:32: d1:65:e7:14:7a:d8:a6:0f:54:8d:ad:71:e0:12:fb:42:3a:93: b0:11:50:0e:31:32:5a:b7:cc:fd:90:05:f4:6e:13:f4:f7:ee: 93:e1:a8:e7:5d:d8:10:8b:0a:b2:bb:c3:6e:12:93:b8:db:7a: be:8b:74:4e:6a:65:b9:81:5a:be:e8:36:4a:69:fc:44:fc:7b: 82:d4:f3:fc:f1:31:8c:82:64:d9:2e:82:23:15:bf:b4:02:b0: 20:4a:a4:19:5b:90:1a:cb:af:ed:ad:f2:99:22:e4:fb:ce:1a: 8e:09:b2:49:f9:63:0b:f2:a6:8d:cf:a5:51:bb:d6:e8:60:46: d0:c9:38:2d:2b:6d:78:bf:25:f8:e6:ae:3d:b6:f9:db:a3:8e: b7:ca:45:3f:96:a9:70:f0:82:66:6c:b1:86:48:fa:a4:6d:8d: bd:7e:3b:df:ea:05:02:19:14:80:c9:e6:7d:ad:0f:4f:fb:26: 0e:50:6b:8e:93:53:45:3c:be:ab:39:aa:d8:5e:5d:51:71:47: 74:c7:93:da:b1:18:b9:af:e7:8d:98:a8:e1:98:ec:b2:7c:4f: 49:aa:61:5a -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUILXKsJI48CvVlUBH4eVLO5Z06w0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGQ0RCMzBEQ0M4M0E5QzUzMzUwMTZEMEE2QUJDNTdG MTE5OTJDRTAeFw0yNTEyMjkxOTQzMzJaFw0yNjEyMjgxOTQ4MzJaMDMxMTAvBgNV BAMTKDZBRkREOTBCMjcxOTBCQkJFNDhDM0U3NDdFMDVCMzNDMTA0QUZCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaX/leRfl7omKm/oF3bEgqqB7 uirzmtgw6IJO+CAJyM6eIUIyIYbA2LKcILi+rrbeysrPxXtwNFWp6ZbQyuEJ/d40 pjmnIH9Acy8ru8FNmsIQIkjwJfNRU1/XsPeuTJ1LxPJzVGfa5CzXzNznUGgBDpE3 BNPWzn7SUYQF3E1fokD5GTJQeFFvpYs9AAWRpZy6UPDl2b/uDOFa7+lbHup8cANz PbIIUIzEoESfhFh/TfmKAMG9SME7w5EHw1tT6e62j35oi8gtGGeLUn4eGc114eNE Zqfn4Wbv7AuOpOkmAZvB5baBIBCJW19FFssZFS7+hVQT44O2zNau7saK9olFAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUav3ZCycZC7vkjD50fgWzPBBK+w8wHwYDVR0j BBgwFoAUXPzbMNzIOpxTNQFtCmq8V/EZks4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzM0RG9pWDZmMXBjR3pmVFJKSHBXS3dpWUc4NWF2amIxUTMyWUs4ZWlt djcvMC81Q0ZDREIzMERDQzgzQTlDNTMzNTAxNkQwQTZBQkM1N0YxMTk5MkNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDRkNEQjMwRENDODNBOUM1 MzM1MDE2RDBBNkFCQzU3RjExOTkyQ0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0czNERvaVg2ZjFwY0d6ZlRSSkhwV0t3aVlHODVhdmpiMVEzMllLOGVpbXY3LzAv MzIzODMwMzQzYTMzMzM2NjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1 MzQzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQz8DANBgkqhkiG9w0BAQsFAAOCAQEAU8yGPnEU Fb0Lqe0eynFlQu/rLNEn/T+r4/a5n7e5sthDGxMy0WXnFHrYpg9Uja1x4BL7QjqT sBFQDjEyWrfM/ZAF9G4T9Pfuk+Go513YEIsKsrvDbhKTuNt6vot0TmpluYFavug2 Smn8RPx7gtTz/PExjIJk2S6CIxW/tAKwIEqkGVuQGsuv7a3ymSLk+84ajgmySflj C/Kmjc+lUbvW6GBG0Mk4LStteL8l+OauPbb526OOt8pFP5apcPCCZmyxhkj6pG2N vX473+oFAhkUgMnmfa0PT/smDlBrjpNTRTy+qzmq2F5dUXFHdMeT2rEYua/njZio 4ZjssnxPSaphWg== -----END CERTIFICATE-----Generated at Fri Jan 9 23:29:49 2026 by rpki-client