This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/323830343a336432343a3a2f33322d313238203d3e20323636323536.roa File: 323830343a336432343a3a2f33322d313238203d3e20323636323536.roa (raw, json) Hash identifier: NxTg1w8n8X0x8BKJRk9RFLy+0U2I5i7p8dxkUVjTniE= Subject key identifier: BC:35:E5:B5:2A:6C:4E:02:B5:F3:2F:79:40:F9:10:34:14:26:63:2E Certificate issuer: /CN=4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5 Certificate serial: 71084E6E99C826A3E17DF9925E381E88784FC6B0 Authority key identifier: 4E:FC:29:A3:CA:C6:2D:B4:E3:A7:70:31:15:B3:41:CC:74:89:C9:D5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.cer Subject info access: rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/323830343a336432343a3a2f33322d313238203d3e20323636323536.roa Signing time: Mon 05 Jan 2026 18:10:09 +0000 ROA not before: Mon 05 Jan 2026 18:05:09 +0000 ROA not after: Mon 04 Jan 2027 18:10:09 +0000 asID: 266256 IP address blocks: 2804:3d24::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.crl rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 15:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:08:4e:6e:99:c8:26:a3:e1:7d:f9:92:5e:38:1e:88:78:4f:c6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5 Validity Not Before: Jan 5 18:05:09 2026 GMT Not After : Jan 4 18:10:09 2027 GMT Subject: CN=BC35E5B52A6C4E02B5F32F7940F910341426632E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:02:a8:a0:4e:b4:00:ff:7f:16:15:45:c9:f1: 8a:ee:d1:82:29:83:12:91:88:09:c7:f4:b4:cc:f6: cb:d6:7b:b6:25:67:6e:37:fb:f7:e6:0e:7d:e7:3e: 7a:3c:ab:30:03:39:d3:b6:31:e9:c7:93:ee:7c:97: ba:25:ee:fd:9b:18:ab:9b:7a:37:46:83:01:b0:97: ad:22:0f:79:75:cc:f7:38:19:39:5d:25:bd:e2:6f: 2c:92:a1:03:70:4a:0f:06:4f:5b:7c:fe:73:3c:f2: d5:d9:ae:b2:3a:66:c9:0c:05:bf:d2:68:2e:39:66: 5d:b7:89:34:2e:12:88:24:b7:7e:73:96:ac:a5:29: 5f:f2:c7:c6:37:63:d6:bf:26:56:58:a3:af:cb:72: d4:fc:d0:06:0e:d8:98:c3:04:b7:c3:21:cb:e9:d3: 7b:a1:5c:b1:60:70:42:b6:db:04:5f:91:2f:95:69: 9b:ab:a6:93:de:85:99:ca:92:e4:15:63:ef:ec:12: 86:8d:1b:15:8b:2d:b8:69:3e:d7:d1:a2:ae:19:d2: 38:d8:2f:47:48:21:10:07:5f:6c:c4:76:07:29:11: e2:55:0f:63:05:e0:80:8a:02:5e:c0:ab:e1:25:8a: e6:14:7d:d7:95:cd:2d:48:62:0e:33:3a:b1:be:ce: c0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:35:E5:B5:2A:6C:4E:02:B5:F3:2F:79:40:F9:10:34:14:26:63:2E X509v3 Authority Key Identifier: keyid:4E:FC:29:A3:CA:C6:2D:B4:E3:A7:70:31:15:B3:41:CC:74:89:C9:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/323830343a336432343a3a2f33322d313238203d3e20323636323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3d24::/32 Signature Algorithm: sha256WithRSAEncryption a5:0d:2c:90:04:5c:ea:31:40:63:a4:83:bf:c0:29:10:f3:4f: 62:f7:11:a4:0a:a6:d2:4e:b6:68:a2:21:76:95:b1:88:08:af: bf:5f:85:fa:69:27:71:aa:3c:7b:bb:15:05:fa:f9:c7:9b:a0: ba:99:c0:17:22:e1:43:ce:06:be:56:8e:ea:96:07:e1:0a:6a: 2e:9f:b3:73:f5:ee:73:d5:49:e3:2c:18:a5:d8:cb:eb:d3:3d: 7b:43:6c:44:35:db:22:5a:fb:81:af:f0:92:08:79:85:90:7c: e5:a8:1f:9d:a9:68:5b:e8:27:eb:0b:0e:99:7a:07:25:ca:cc: 42:d0:9e:2f:45:f1:2c:15:8c:27:44:4d:8f:49:5e:87:47:79: a3:82:6e:c8:9b:8b:e0:99:de:f3:35:1f:57:41:06:2d:14:fc: 31:48:66:94:0b:96:05:8a:e3:44:a3:43:e3:a6:8c:c0:57:38: 16:a8:f3:be:ad:cf:40:3d:5a:7a:43:51:b9:77:f9:b6:26:b0: e8:da:ea:52:2b:a5:6c:24:7e:54:56:d3:7a:4a:77:d8:86:e8: a5:a6:16:f4:97:3f:b0:ac:30:c3:12:1d:a3:0b:09:56:4e:21: 28:bd:09:9a:f9:7b:e0:5b:b0:d0:90:41:94:e5:19:cb:63:19: 40:26:9e:3f -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUcQhObpnIJqPhffmSXjgeiHhPxrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGQzI5QTNDQUM2MkRCNEUzQTc3MDMxMTVCMzQxQ0M3 NDg5QzlENTAeFw0yNjAxMDUxODA1MDlaFw0yNzAxMDQxODEwMDlaMDMxMTAvBgNV BAMTKEJDMzVFNUI1MkE2QzRFMDJCNUYzMkY3OTQwRjkxMDM0MTQyNjYzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1AqigTrQA/38WFUXJ8Yru0YIp gxKRiAnH9LTM9svWe7YlZ243+/fmDn3nPno8qzADOdO2MenHk+58l7ol7v2bGKub ejdGgwGwl60iD3l1zPc4GTldJb3ibyySoQNwSg8GT1t8/nM88tXZrrI6ZskMBb/S aC45Zl23iTQuEogkt35zlqylKV/yx8Y3Y9a/JlZYo6/LctT80AYO2JjDBLfDIcvp 03uhXLFgcEK22wRfkS+VaZurppPehZnKkuQVY+/sEoaNGxWLLbhpPtfRoq4Z0jjY L0dIIRAHX2zEdgcpEeJVD2MF4ICKAl7Aq+EliuYUfdeVzS1IYg4zOrG+zsBdAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUvDXltSpsTgK18y95QPkQNBQmYy4wHwYDVR0j BBgwFoAUTvwpo8rGLbTjp3AxFbNBzHSJydUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9XU3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3 LzAvNEVGQzI5QTNDQUM2MkRCNEUzQTc3MDMxMTVCMzQxQ0M3NDg5QzlENS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80RUZDMjlBM0NBQzYyREI0RTNB NzcwMzExNUIzNDFDQzc0ODlDOUQ1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X U3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3LzAvMzIz ODMwMzQzYTMzNjQzMjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2MzYz MjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBD0kMA0GCSqGSIb3DQEBCwUAA4IBAQClDSyQBFzq MUBjpIO/wCkQ809i9xGkCqbSTrZooiF2lbGICK+/X4X6aSdxqjx7uxUF+vnHm6C6 mcAXIuFDzga+Vo7qlgfhCmoun7Nz9e5z1UnjLBil2Mvr0z17Q2xENdsiWvuBr/CS CHmFkHzlqB+dqWhb6CfrCw6ZegclysxC0J4vRfEsFYwnRE2PSV6HR3mjgm7Im4vg md7zNR9XQQYtFPwxSGaUC5YFiuNEo0PjpozAVzgWqPO+rc9APVp6Q1G5d/m2JrDo 2upSK6VsJH5UVtN6SnfYhuilphb0lz+wrDDDEh2jCwlWTiEovQma+XvgW7DQkEGU 5RnLYxlAJp4/ -----END CERTIFICATE-----Generated at Fri Jan 9 21:01:47 2026 by rpki-client