This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a383030343a3a2f36342d3634203d3e20323633343536.roa File: 323830343a313231383a383030343a3a2f36342d3634203d3e20323633343536.roa (raw, json) Hash identifier: F1njWR31mDPdOBNk60TPS93hNIPXMNbAi0H6LhY+sTA= Subject key identifier: 58:C7:30:90:CB:7F:C2:E3:E5:26:B9:00:C2:F7:2E:24:3D:F6:E3:26 Certificate issuer: /CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C Certificate serial: 2AACD84DA2EA748C466A90968EC5F83C1C1F13EE Authority key identifier: 1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer Subject info access: rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a383030343a3a2f36342d3634203d3e20323633343536.roa Signing time: Wed 31 Dec 2025 13:13:14 +0000 ROA not before: Wed 31 Dec 2025 13:08:14 +0000 ROA not after: Wed 30 Dec 2026 13:13:14 +0000 asID: 263456 IP address blocks: 2804:1218:8004::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 Jan 2026 02:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ac:d8:4d:a2:ea:74:8c:46:6a:90:96:8e:c5:f8:3c:1c:1f:13:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C Validity Not Before: Dec 31 13:08:14 2025 GMT Not After : Dec 30 13:13:14 2026 GMT Subject: CN=58C73090CB7FC2E3E526B900C2F72E243DF6E326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:6c:ae:d2:a9:e5:79:cf:69:7d:d1:3e:1a: f5:95:4c:b3:51:48:da:d8:bf:70:57:00:17:7c:71: f6:55:9e:5b:ee:13:44:74:07:e7:9d:c5:42:a8:dc: 97:d5:a1:97:06:6a:c5:27:35:30:fa:32:b1:f7:89: 09:9f:b0:4a:63:cf:99:3a:8a:b8:a1:27:eb:a3:37: e3:1d:96:c6:ff:7e:f6:d6:ba:df:bd:9c:9f:d3:3e: de:f1:5b:72:d3:c9:b8:04:fd:56:c4:95:9d:e0:9f: 8a:8b:df:34:9b:ec:8f:f5:5f:41:ef:f1:90:74:6e: 4e:67:5b:42:43:78:1c:00:02:79:ff:55:e3:cb:ff: 89:66:07:a4:fc:e6:ae:52:73:a6:a7:62:bd:99:48: 0c:f0:3e:43:ab:83:bf:bb:82:2b:6f:a0:19:5a:d4: 66:a3:45:f4:aa:2b:87:03:44:fe:b7:43:a9:d9:98: ef:f0:14:d2:d6:06:71:6d:e0:61:ee:ae:03:00:46: 20:91:26:84:56:87:2c:e4:bb:8c:f5:22:66:f4:16: 3f:6d:14:c0:77:3f:39:fc:23:52:0e:e6:01:dd:57: 60:59:df:0c:90:f1:98:21:08:87:c1:db:a7:d0:fb: 3a:40:53:4e:10:d5:2c:dd:93:a5:2e:5c:bb:d8:e4: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C7:30:90:CB:7F:C2:E3:E5:26:B9:00:C2:F7:2E:24:3D:F6:E3:26 X509v3 Authority Key Identifier: keyid:1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a383030343a3a2f36342d3634203d3e20323633343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1218:8004::/64 Signature Algorithm: sha256WithRSAEncryption 3a:03:75:38:45:4c:aa:21:49:c5:d9:61:ae:c5:b7:88:36:e3: 3b:02:1f:49:b2:2b:5d:ae:09:e9:22:ec:fc:a3:9f:f1:ac:16: 24:01:24:1d:f7:94:ec:2b:5a:13:d7:96:b3:04:e9:c8:bc:85: 9f:39:78:ad:d3:c3:1f:67:12:ea:eb:10:60:58:6f:f0:83:4d: 79:dc:50:67:4e:e9:d9:c6:f2:9a:a1:25:b9:f3:47:d1:ff:fd: 71:be:fa:b6:ca:d9:94:1f:66:15:46:56:41:09:95:84:52:ae: 86:74:b6:be:79:61:be:a6:a9:25:90:2b:58:97:d4:2e:68:fa: f7:72:60:97:22:db:23:e9:91:80:42:2f:ca:72:7d:94:3f:84: 5a:9e:4d:48:d7:42:29:46:cb:64:95:74:39:63:40:eb:c9:bf: 2c:ab:f7:9e:ae:9d:9a:a4:d6:cb:67:0e:20:21:2d:83:2d:20: 99:25:5c:a4:bb:d9:b9:72:b4:1c:33:01:ee:da:3a:46:22:7d: a2:84:6f:d2:64:77:96:f5:ad:a0:09:dc:3f:bf:a8:f2:15:87: 0d:87:aa:97:84:04:b3:dc:ef:56:c3:f5:7d:f3:78:ea:2f:73: 58:6b:9a:94:10:48:04:bb:ba:fb:da:ad:c1:dd:af:49:41:94: 52:91:33:ab -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUKqzYTaLqdIxGapCWjsX4PBwfE+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NUFBMjA3MzIyQzNFMzE0NkM0REY0RDQzMTU5M0Qx NUJERUQ2QzAeFw0yNTEyMzExMzA4MTRaFw0yNjEyMzAxMzEzMTRaMDMxMTAvBgNV BAMTKDU4QzczMDkwQ0I3RkMyRTNFNTI2QjkwMEMyRjcyRTI0M0RGNkUzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOGyu0qnlec9pfdE+GvWVTLNR SNrYv3BXABd8cfZVnlvuE0R0B+edxUKo3JfVoZcGasUnNTD6MrH3iQmfsEpjz5k6 irihJ+ujN+Mdlsb/fvbWut+9nJ/TPt7xW3LTybgE/VbElZ3gn4qL3zSb7I/1X0Hv 8ZB0bk5nW0JDeBwAAnn/VePL/4lmB6T85q5Sc6anYr2ZSAzwPkOrg7+7gitvoBla 1GajRfSqK4cDRP63Q6nZmO/wFNLWBnFt4GHurgMARiCRJoRWhyzku4z1Imb0Fj9t FMB3Pzn8I1IO5gHdV2BZ3wyQ8ZghCIfB26fQ+zpAU04Q1Szdk6UuXLvY5AP/AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUWMcwkMt/wuPlJrkAwvcuJD324yYwHwYDVR0j BBgwFoAUHWWqIHMiw+MUbE301DFZPRW97WwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUt5NERVdUxpMnVoVGtLc1lSSGVXZXBqbWRQTjFXVmpHcFZhZEFva2dy bTMvMC8xRDY1QUEyMDczMjJDM0UzMTQ2QzRERjRENDMxNTkzRDE1QkRFRDZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFENjVBQTIwNzMyMkMzRTMx NDZDNERGNEQ0MzE1OTNEMTVCREVENkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VLeTREVXVMaTJ1aFRrS3NZUkhlV2Vwam1kUE4xV1ZqR3BWYWRBb2tncm0zLzAv MzIzODMwMzQzYTMxMzIzMTM4M2EzODMwMzAzNDNhM2EyZjM2MzQyZDM2MzQyMDNk M2UyMDMyMzYzMzM0MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAk BggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACgEEhiABAAAMA0GCSqGSIb3DQEB CwUAA4IBAQA6A3U4RUyqIUnF2WGuxbeINuM7Ah9JsitdrgnpIuz8o5/xrBYkASQd 95TsK1oT15azBOnIvIWfOXit08MfZxLq6xBgWG/wg0153FBnTunZxvKaoSW580fR //1xvvq2ytmUH2YVRlZBCZWEUq6GdLa+eWG+pqklkCtYl9QuaPr3cmCXItsj6ZGA Qi/Kcn2UP4Rank1I10IpRstklXQ5Y0Dryb8sq/eerp2apNbLZw4gIS2DLSCZJVyk u9m5crQcMwHu2jpGIn2ihG/SZHeW9a2gCdw/v6jyFYcNh6qXhASz3O9Ww/V983jq L3NYa5qUEEgEu7r72q3B3a9JQZRSkTOr -----END CERTIFICATE-----Generated at Fri Jan 2 15:10:22 2026 by rpki-client