This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/323830343a393638343a3a2f33322d3332203d3e20323734333430.roa File: 323830343a393638343a3a2f33322d3332203d3e20323734333430.roa (raw, json) Hash identifier: 8MU8B1WD2GoB02y0EHm9ZbkyAdDINniz73DNebBmao8= Subject key identifier: 89:83:87:C7:F5:AD:85:B6:48:86:FF:4F:C3:DD:B0:E9:8A:10:FF:E4 Certificate issuer: /CN=04F82AB6D03AAC998F1C1C22272D92FD17905BDC Certificate serial: 406BD1CB754B4741E2974D0A075B16B9965903E0 Authority key identifier: 04:F8:2A:B6:D0:3A:AC:99:8F:1C:1C:22:27:2D:92:FD:17:90:5B:DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/323830343a393638343a3a2f33322d3332203d3e20323734333430.roa Signing time: Tue 06 Jan 2026 18:14:39 +0000 ROA not before: Tue 06 Jan 2026 18:09:39 +0000 ROA not after: Tue 05 Jan 2027 18:14:39 +0000 asID: 274340 IP address blocks: 2804:9684::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.crl rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 20:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6b:d1:cb:75:4b:47:41:e2:97:4d:0a:07:5b:16:b9:96:59:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04F82AB6D03AAC998F1C1C22272D92FD17905BDC Validity Not Before: Jan 6 18:09:39 2026 GMT Not After : Jan 5 18:14:39 2027 GMT Subject: CN=898387C7F5AD85B64886FF4FC3DDB0E98A10FFE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:64:24:c7:4f:ad:cd:3c:6b:86:21:2b:2a: b5:1c:be:ea:32:25:9e:86:96:e1:8b:3e:79:f1:99: 17:1c:40:c9:ce:b3:b9:c0:fd:a8:a4:40:ea:99:69: a5:4d:19:77:1a:a4:34:6b:4e:bf:a4:0d:85:d3:b9: a7:05:b3:47:7c:8a:31:e3:82:f6:de:68:bb:29:cd: 64:c2:c3:6c:32:ec:e1:b5:22:ba:6e:b4:19:0e:3e: 86:dc:18:85:66:b1:77:34:ea:bf:57:c1:9b:b1:3d: 9d:ac:2e:5e:0a:5a:79:a6:72:55:6a:e2:f5:55:6f: 81:5b:22:3d:57:49:e9:75:0c:6d:1a:82:a0:62:fe: fb:9d:4d:57:7e:b6:94:ab:cd:37:0e:1c:12:d2:00: 6c:e9:db:98:7d:d3:e0:ec:48:ae:0c:f6:54:e4:e5: 22:01:b4:98:99:49:fb:5b:48:11:05:40:be:46:68: 8e:3e:6c:e8:d6:e0:a6:c0:7a:01:8b:51:a4:0c:dc: 7b:d4:1b:0e:46:08:42:86:f2:63:06:71:e5:eb:4a: c1:63:df:70:f3:ea:78:d9:a9:10:8b:c2:fb:ad:a6: 29:0c:22:6d:6a:a3:56:e0:63:77:19:26:8d:7f:0f: 34:f0:0d:92:26:7b:c1:58:9f:43:ab:80:5d:2b:b4: b5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:83:87:C7:F5:AD:85:B6:48:86:FF:4F:C3:DD:B0:E9:8A:10:FF:E4 X509v3 Authority Key Identifier: keyid:04:F8:2A:B6:D0:3A:AC:99:8F:1C:1C:22:27:2D:92:FD:17:90:5B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/323830343a393638343a3a2f33322d3332203d3e20323734333430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9684::/32 Signature Algorithm: sha256WithRSAEncryption 5b:83:dd:f1:d9:4b:fb:7c:b5:7c:83:84:be:5c:38:08:01:f1: 0b:dd:93:d8:ed:e7:4e:89:b9:bf:7f:e9:22:f0:cc:fd:88:e6: 9b:44:12:39:95:68:3c:e0:7b:cb:3d:4c:69:6a:2c:5f:40:4e: cb:23:64:92:35:2e:49:5c:21:c1:e5:75:9c:ef:45:49:51:d4: 2d:de:92:ef:f1:26:df:9c:1a:25:ac:b0:f6:25:de:14:21:df: fb:11:2b:1d:e4:1a:55:26:73:cd:bd:5d:4a:a4:c0:af:a1:e0: ad:de:b7:b2:a0:d3:6f:e1:cf:8e:3b:b1:a9:13:c0:d9:44:45: da:d3:76:11:be:c3:db:c0:a6:40:a5:6e:c7:a6:19:ce:47:e7: 61:24:15:10:49:22:a1:95:8d:1a:2b:15:12:1d:5e:62:58:73: 4d:73:06:5b:8c:66:9c:9e:0d:0a:55:61:3a:51:a8:4b:b6:aa: 4f:58:c0:a0:c7:b9:2b:1d:59:11:6b:04:36:0c:77:b6:e4:77: 57:3e:08:b5:85:b3:a7:fe:42:16:ac:95:6a:f1:94:b7:2b:b5: 3e:59:1f:fe:7b:dc:56:ec:13:8e:85:f9:59:ab:af:fc:76:d4: d2:e4:43:09:5a:71:ba:c0:98:fb:45:2d:e7:93:18:97:a7:b3: 33:cc:6e:78 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUQGvRy3VLR0Hil00KB1sWuZZZA+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRGODJBQjZEMDNBQUM5OThGMUMxQzIyMjcyRDkyRkQx NzkwNUJEQzAeFw0yNjAxMDYxODA5MzlaFw0yNzAxMDUxODE0MzlaMDMxMTAvBgNV BAMTKDg5ODM4N0M3RjVBRDg1QjY0ODg2RkY0RkMzRERCMEU5OEExMEZGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+L2Qkx0+tzTxrhiErKrUcvuoy JZ6GluGLPnnxmRccQMnOs7nA/aikQOqZaaVNGXcapDRrTr+kDYXTuacFs0d8ijHj gvbeaLspzWTCw2wy7OG1IrputBkOPobcGIVmsXc06r9XwZuxPZ2sLl4KWnmmclVq 4vVVb4FbIj1XSel1DG0agqBi/vudTVd+tpSrzTcOHBLSAGzp25h90+DsSK4M9lTk 5SIBtJiZSftbSBEFQL5GaI4+bOjW4KbAegGLUaQM3HvUGw5GCEKG8mMGceXrSsFj 33Dz6njZqRCLwvutpikMIm1qo1bgY3cZJo1/DzTwDZIme8FYn0OrgF0rtLVpAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUiYOHx/WthbZIhv9Pw92w6YoQ/+QwHwYDVR0j BBgwFoAUBPgqttA6rJmPHBwiJy2S/ReQW9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2hGYnF1cERFQzJ1alNwRm40Y1FYQWhweDJ5cGVTcWVQcktrcGR6b282 YWcvMC8wNEY4MkFCNkQwM0FBQzk5OEYxQzFDMjIyNzJEOTJGRDE3OTA1QkRDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0RjgyQUI2RDAzQUFDOTk4 RjFDMUMyMjI3MkQ5MkZEMTc5MDVCREMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0doRmJxdXBERUMydWpTcEZuNGNRWEFocHgyeXBlU3FlUHJLa3Bkem9vNmFnLzAv MzIzODMwMzQzYTM5MzYzODM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0 MzMzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASWhDANBgkqhkiG9w0BAQsFAAOCAQEAW4Pd8dlL +3y1fIOEvlw4CAHxC92T2O3nTom5v3/pIvDM/Yjmm0QSOZVoPOB7yz1MaWosX0BO yyNkkjUuSVwhweV1nO9FSVHULd6S7/Em35waJayw9iXeFCHf+xErHeQaVSZzzb1d SqTAr6Hgrd63sqDTb+HPjjuxqRPA2URF2tN2Eb7D28CmQKVux6YZzkfnYSQVEEki oZWNGisVEh1eYlhzTXMGW4xmnJ4NClVhOlGoS7aqT1jAoMe5Kx1ZEWsENgx3tuR3 Vz4ItYWzp/5CFqyVavGUtyu1Plkf/nvcVuwTjoX5Wauv/HbU0uRDCVpxusCY+0Ut 55MYl6ezM8xueA== -----END CERTIFICATE-----Generated at Fri Jan 9 23:26:19 2026 by rpki-client