This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/323830343a343763633a3a2f33322d313238203d3e20323637303737.roa File: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (raw, json) Hash identifier: Zb565rDHy7WtypXGVJ40AUrNMbJgCT2lb99PVr98XvA= Subject key identifier: 2D:5F:C9:F4:84:06:9B:FB:42:F3:94:8E:7A:29:A2:CF:E3:05:E7:F7 Certificate issuer: /CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Certificate serial: 5EB5343F0945C5DBD7E4255FB6B25BE59B285DCB Authority key identifier: 42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/323830343a343763633a3a2f33322d313238203d3e20323637303737.roa Signing time: Fri 09 Jan 2026 06:34:10 +0000 ROA not before: Fri 09 Jan 2026 06:29:10 +0000 ROA not after: Fri 08 Jan 2027 06:34:10 +0000 asID: 267077 IP address blocks: 2804:47cc::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Jan 2026 09:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b5:34:3f:09:45:c5:db:d7:e4:25:5f:b6:b2:5b:e5:9b:28:5d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Validity Not Before: Jan 9 06:29:10 2026 GMT Not After : Jan 8 06:34:10 2027 GMT Subject: CN=2D5FC9F484069BFB42F3948E7A29A2CFE305E7F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:60:a8:41:1f:83:32:3d:aa:78:18:c4:f3:78: bc:a4:a0:87:bc:36:12:2b:82:f3:ae:56:c1:f8:5a: 6a:d6:b7:30:55:d1:5d:3b:07:4e:c7:b3:aa:c4:73: 37:a6:94:55:a5:98:24:ad:c5:de:66:3b:8c:e2:56: 47:75:16:ce:59:d5:1a:05:bb:71:d3:a6:00:4e:52: c5:3f:58:24:f3:c8:72:28:8c:62:b6:1c:6b:25:41: 53:a5:c7:b8:86:f5:5a:49:6c:3d:be:6a:7c:81:b2: b9:78:11:7a:fb:36:47:fd:69:a8:4e:65:c0:29:b1: eb:1d:8f:c2:c8:6d:66:91:fa:94:56:7c:86:ac:91: a0:ac:29:82:2f:a3:35:8d:71:55:af:51:0f:9d:e4: f6:d5:03:51:a6:c7:a8:55:77:cb:0c:41:04:d1:6f: 28:41:3d:be:51:a2:49:92:bc:6b:e9:3d:74:ec:3d: 1b:81:6a:c7:da:9e:b6:79:a2:f5:62:fa:d9:81:1a: 85:5d:45:67:68:48:a4:e8:86:6b:0d:12:3d:5e:2b: 46:e3:45:3f:fe:19:f1:26:31:70:9d:fd:8a:ef:70: 1d:dc:24:17:30:d3:be:be:ac:be:69:83:9f:3d:a4: 4e:b6:17:a5:d3:8d:08:69:bf:c8:2f:c2:67:85:29: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5F:C9:F4:84:06:9B:FB:42:F3:94:8E:7A:29:A2:CF:E3:05:E7:F7 X509v3 Authority Key Identifier: keyid:42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/323830343a343763633a3a2f33322d313238203d3e20323637303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:47cc::/32 Signature Algorithm: sha256WithRSAEncryption 3d:3b:a1:3b:fd:09:d1:53:fa:e6:e7:df:e2:d4:b0:2f:d7:62: 03:b6:fb:07:d1:47:18:b7:8e:f3:71:53:9b:52:9d:59:15:02: 2c:7e:99:d0:d9:0b:08:86:53:1e:85:4d:a3:22:03:4c:af:cd: 48:f3:47:8b:31:04:6b:58:d4:bd:6a:af:6f:09:e0:60:6f:4d: a4:9d:0c:34:c6:e9:9c:1f:a2:04:15:9e:18:20:78:17:05:6e: 38:68:2a:55:e1:f1:c5:29:d0:56:1a:85:4f:a0:7b:bc:a7:5b: 22:62:a3:98:13:e5:df:af:31:5f:6c:c5:8d:fd:0b:8d:e2:46: 24:09:f5:e2:2e:6f:26:61:7b:04:18:64:cd:58:2e:e1:c4:05: f3:a9:67:d3:ab:9c:ac:75:b6:4a:61:a8:fd:3f:3c:ef:e0:90: 63:49:aa:e8:5e:72:7b:4d:93:d9:21:35:b9:df:38:ef:8f:a5: 9f:a6:b0:54:d0:78:4c:dc:bc:20:99:b3:58:be:be:bb:6d:32: e2:9d:f0:bd:a5:9f:62:74:09:3b:c7:5a:bb:5a:da:4c:ee:fd: c0:fa:fa:18:cb:3c:02:a9:9d:05:43:d2:7d:58:e0:fe:b0:33: d6:56:98:81:be:7f:8a:03:4f:f1:93:85:c6:78:eb:45:1e:a1: ee:e4:4e:8a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUXrU0PwlFxdvX5CVftrJb5ZsoXcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1RTcyOEFFMUZBRTg1QTVENkQxN0NDNTNENjhDREUy MUZBNjM5RDAeFw0yNjAxMDkwNjI5MTBaFw0yNzAxMDgwNjM0MTBaMDMxMTAvBgNV BAMTKDJENUZDOUY0ODQwNjlCRkI0MkYzOTQ4RTdBMjlBMkNGRTMwNUU3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnYKhBH4MyPap4GMTzeLykoIe8 NhIrgvOuVsH4WmrWtzBV0V07B07Hs6rEczemlFWlmCStxd5mO4ziVkd1Fs5Z1RoF u3HTpgBOUsU/WCTzyHIojGK2HGslQVOlx7iG9VpJbD2+anyBsrl4EXr7Nkf9aahO ZcApsesdj8LIbWaR+pRWfIaskaCsKYIvozWNcVWvUQ+d5PbVA1Gmx6hVd8sMQQTR byhBPb5RokmSvGvpPXTsPRuBasfanrZ5ovVi+tmBGoVdRWdoSKTohmsNEj1eK0bj RT/+GfEmMXCd/YrvcB3cJBcw076+rL5pg589pE62F6XTjQhpv8gvwmeFKe+TAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQULV/J9IQGm/tC85SOeimiz+MF5/cwHwYDVR0j BBgwFoAUQl5yiuH66FpdbRfMU9aM3iH6Y50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL MUovMC80MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNUU3MjhBRTFGQUU4NUE1 RDZEMTdDQzUzRDY4Q0RFMjFGQTYzOUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhaYVVKQWdNWGpZdFo4cGVvSzJ5QmNIZHhqSlNBWTJiOVN6WHM0NzYzSzFKLzAv MzIzODMwMzQzYTM0Mzc2MzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzczMDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBEfMMA0GCSqGSIb3DQEBCwUAA4IBAQA9O6E7 /QnRU/rm59/i1LAv12IDtvsH0UcYt47zcVObUp1ZFQIsfpnQ2QsIhlMehU2jIgNM r81I80eLMQRrWNS9aq9vCeBgb02knQw0xumcH6IEFZ4YIHgXBW44aCpV4fHFKdBW GoVPoHu8p1siYqOYE+XfrzFfbMWN/QuN4kYkCfXiLm8mYXsEGGTNWC7hxAXzqWfT q5ysdbZKYaj9Pzzv4JBjSaroXnJ7TZPZITW53zjvj6WfprBU0HhM3LwgmbNYvr67 bTLinfC9pZ9idAk7x1q7WtpM7v3A+voYyzwCqZ0FQ9J9WOD+sDPWVpiBvn+KA0/x k4XGeOtFHqHu5E6K -----END CERTIFICATE-----Generated at Mon Jan 12 13:15:25 2026 by rpki-client