This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/323830343a333964343a3a2f33322d313238203d3e20323636303533.roa File: 323830343a333964343a3a2f33322d313238203d3e20323636303533.roa (raw, json) Hash identifier: 3N1NqwWTxZRb8CKk0Jinn4QSx71/zHoEz764cS3FP38= Subject key identifier: A0:96:CA:99:12:8D:2F:08:22:A3:9F:49:E9:A8:1D:0F:06:3D:12:07 Certificate issuer: /CN=E27513DF0F80F1E934FC7A0C421F868E94751182 Certificate serial: 1C6DC68C5A5BDA2A1A0DB58E5899ECC138883FF7 Authority key identifier: E2:75:13:DF:0F:80:F1:E9:34:FC:7A:0C:42:1F:86:8E:94:75:11:82 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/323830343a333964343a3a2f33322d313238203d3e20323636303533.roa Signing time: Wed 31 Dec 2025 11:58:09 +0000 ROA not before: Wed 31 Dec 2025 11:53:09 +0000 ROA not after: Wed 30 Dec 2026 11:58:09 +0000 asID: 266053 IP address blocks: 2804:39d4::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.crl rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Jan 2026 10:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6d:c6:8c:5a:5b:da:2a:1a:0d:b5:8e:58:99:ec:c1:38:88:3f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E27513DF0F80F1E934FC7A0C421F868E94751182 Validity Not Before: Dec 31 11:53:09 2025 GMT Not After : Dec 30 11:58:09 2026 GMT Subject: CN=A096CA99128D2F0822A39F49E9A81D0F063D1207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2d:95:7e:0f:da:7e:9f:c2:28:94:c6:2f:61: fb:fb:48:c0:5e:87:a4:72:6e:33:02:6e:19:9a:38: 31:8a:43:c7:32:9a:c8:ac:81:a3:e4:3b:6e:f4:42: 5a:00:d9:13:cd:fa:8b:e5:bd:09:5b:a6:06:49:c3: 49:21:a0:5f:b5:38:d7:10:4a:27:ec:70:90:8a:d0: 50:92:68:46:08:9e:96:76:a9:8c:8f:35:d3:9a:49: 83:f0:93:f0:1a:37:e9:71:8c:4e:d8:b9:e0:50:a6: 86:19:8b:2e:ea:48:6b:ad:a5:62:34:73:97:a9:4d: 59:da:ea:fc:e6:ee:c1:a4:23:64:b8:3a:63:5c:d6: 0f:b0:29:8f:fc:bd:88:1d:b7:b3:2a:73:91:e7:f1: d0:b1:c8:42:a4:c6:88:b9:cb:45:7f:dd:a7:a8:47: 01:75:9f:fa:9c:4b:16:d4:d9:43:37:c0:77:dd:f4: 62:df:9e:06:d6:ff:4a:ce:84:81:3a:c6:db:7c:68: 04:2f:a8:53:5f:91:7a:02:aa:08:0d:71:d3:45:c7: 37:32:82:f4:08:95:4f:f9:66:e3:e7:bb:27:76:b9: 9b:21:f0:1e:78:d8:83:5f:4d:be:54:24:9b:fc:98: 46:28:83:19:95:97:47:08:fe:9b:e1:a6:91:32:f4: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:96:CA:99:12:8D:2F:08:22:A3:9F:49:E9:A8:1D:0F:06:3D:12:07 X509v3 Authority Key Identifier: keyid:E2:75:13:DF:0F:80:F1:E9:34:FC:7A:0C:42:1F:86:8E:94:75:11:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/323830343a333964343a3a2f33322d313238203d3e20323636303533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:39d4::/32 Signature Algorithm: sha256WithRSAEncryption 5a:38:ef:c8:7b:5b:84:d3:a8:a1:d7:11:bb:70:66:52:a5:2c: c6:a9:7c:b7:5b:c9:f0:4c:ec:0d:04:2f:6e:82:ad:e8:5a:77: 1e:4d:cd:d9:92:21:fa:32:3a:7e:f7:8b:e5:ab:6a:8a:47:71: f7:57:91:18:3f:d9:1c:dc:e3:0a:a5:49:6f:dc:94:c6:7c:19: 57:e9:c5:7a:85:39:75:d4:74:b5:a8:6c:08:cb:3a:ca:1f:e7: 72:d9:81:26:ac:60:a9:2a:b1:ef:53:3d:a2:b6:87:1f:fa:d5: e3:61:93:98:5f:53:60:03:37:bf:e1:c0:e5:38:c5:2b:73:91: 65:f2:96:f4:84:35:29:96:3f:f7:23:1e:77:2f:83:42:8e:db: e2:13:11:e2:c5:16:57:ea:a4:1a:18:d0:e7:00:31:77:2c:49: 2a:40:30:7e:0b:56:62:a0:90:11:b5:bc:f5:29:cf:3e:33:69: d5:94:6a:f9:96:9a:a8:3d:8e:3f:46:5c:d6:49:83:40:78:bc: 79:cc:80:c3:42:ef:15:86:50:57:56:bb:52:3c:e3:d2:77:7e: d2:7a:68:c7:a9:8c:8e:f8:a3:de:7f:11:ce:9a:3e:5a:90:9b: a1:26:f8:50:b5:52:74:4d:c9:cc:d8:18:89:67:ce:08:d3:fa: 28:6b:83:83 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUHG3GjFpb2ioaDbWOWJnswTiIP/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI3NTEzREYwRjgwRjFFOTM0RkM3QTBDNDIxRjg2OEU5 NDc1MTE4MjAeFw0yNTEyMzExMTUzMDlaFw0yNjEyMzAxMTU4MDlaMDMxMTAvBgNV BAMTKEEwOTZDQTk5MTI4RDJGMDgyMkEzOUY0OUU5QTgxRDBGMDYzRDEyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoLZV+D9p+n8IolMYvYfv7SMBe h6RybjMCbhmaODGKQ8cymsisgaPkO270QloA2RPN+ovlvQlbpgZJw0khoF+1ONcQ SifscJCK0FCSaEYInpZ2qYyPNdOaSYPwk/AaN+lxjE7YueBQpoYZiy7qSGutpWI0 c5epTVna6vzm7sGkI2S4OmNc1g+wKY/8vYgdt7Mqc5Hn8dCxyEKkxoi5y0V/3aeo RwF1n/qcSxbU2UM3wHfd9GLfngbW/0rOhIE6xtt8aAQvqFNfkXoCqggNcdNFxzcy gvQIlU/5ZuPnuyd2uZsh8B542INfTb5UJJv8mEYogxmVl0cI/pvhppEy9GgjAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUoJbKmRKNLwgio59J6agdDwY9EgcwHwYDVR0j BBgwFoAU4nUT3w+A8ek0/HoMQh+GjpR1EYIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRTb2ExMlVHbll4UDZ2VDkzNWVMZzhNdEZ4bmVpaEZDNjN6ZFpCMmtn NHEvMC9FMjc1MTNERjBGODBGMUU5MzRGQzdBMEM0MjFGODY4RTk0NzUxMTgyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyNzUxM0RGMEY4MEYxRTkz NEZDN0EwQzQyMUY4NjhFOTQ3NTExODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJkU29hMTJVR25ZeFA2dlQ5MzVlTGc4TXRGeG5laWhGQzYzemRaQjJrZzRxLzAv MzIzODMwMzQzYTMzMzk2NDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzYzMDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBDnUMA0GCSqGSIb3DQEBCwUAA4IBAQBaOO/I e1uE06ih1xG7cGZSpSzGqXy3W8nwTOwNBC9ugq3oWnceTc3ZkiH6Mjp+94vlq2qK R3H3V5EYP9kc3OMKpUlv3JTGfBlX6cV6hTl11HS1qGwIyzrKH+dy2YEmrGCpKrHv Uz2itocf+tXjYZOYX1NgAze/4cDlOMUrc5Fl8pb0hDUplj/3Ix53L4NCjtviExHi xRZX6qQaGNDnADF3LEkqQDB+C1ZioJARtbz1Kc8+M2nVlGr5lpqoPY4/RlzWSYNA eLx5zIDDQu8VhlBXVrtSPOPSd37SemjHqYyO+KPefxHOmj5akJuhJvhQtVJ0TcnM 2BiJZ84I0/ooa4OD -----END CERTIFICATE-----Generated at Sun Jan 11 20:45:23 2026 by rpki-client