This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/323830343a3563383a3a2f33322d3438203d3e20323632353431.roa File: 323830343a3563383a3a2f33322d3438203d3e20323632353431.roa (raw, json) Hash identifier: zjAZcmBZeLItDUB8YXVke5uQmycIa3e/w8aXnKf9Vdk= Subject key identifier: 3F:53:01:89:E4:28:53:7A:09:E4:AE:AD:F5:53:BF:E7:AA:F8:8B:26 Certificate issuer: /CN=DFBB164DBC72494619B08F0FA235F18F7F107520 Certificate serial: 554C6C7578B515E5CA0E3791F6341E06797956B8 Authority key identifier: DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer Subject info access: rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/323830343a3563383a3a2f33322d3438203d3e20323632353431.roa Signing time: Mon 05 Jan 2026 17:00:26 +0000 ROA not before: Mon 05 Jan 2026 16:55:26 +0000 ROA not after: Mon 04 Jan 2027 17:00:26 +0000 asID: 262541 IP address blocks: 2804:5c8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 Jan 2026 12:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4c:6c:75:78:b5:15:e5:ca:0e:37:91:f6:34:1e:06:79:79:56:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBB164DBC72494619B08F0FA235F18F7F107520 Validity Not Before: Jan 5 16:55:26 2026 GMT Not After : Jan 4 17:00:26 2027 GMT Subject: CN=3F530189E428537A09E4AEADF553BFE7AAF88B26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:a5:07:87:f1:88:3e:55:0d:57:1a:14:a8: 59:17:08:8c:58:35:2a:0d:79:c0:a3:b9:1f:f5:b1: 9b:b7:82:96:3a:28:e8:6c:6b:2d:d5:51:94:41:1a: 00:c2:d4:2f:c4:6c:b1:e1:9f:6c:bc:07:e9:e0:ea: 2f:b2:74:3b:18:b4:4d:b1:0d:64:16:4d:4d:16:8c: d0:66:76:64:4c:b9:a0:a3:0a:4e:78:15:4c:43:72: 5a:6c:99:11:d5:5b:24:82:77:00:13:66:11:92:e8: 55:bb:c8:63:19:60:38:cc:d8:a7:e6:28:06:b5:7c: 99:77:5f:08:0a:db:1b:1a:31:38:1d:24:60:ce:9b: 9b:86:c7:bf:7d:c0:80:cd:5f:7a:30:f7:d9:76:16: b7:fc:20:74:6f:72:59:d3:d4:4c:34:26:5e:a8:c0: b9:19:1c:58:ef:49:6d:47:c4:c2:c1:3a:82:d7:0e: 2b:ec:39:c7:c6:01:76:7d:22:88:24:19:77:89:71: aa:37:1f:7c:c3:19:a5:02:f6:72:aa:55:68:f7:02: 6e:f8:f3:6c:6a:23:0a:bb:e1:0b:e1:33:cf:7a:db: be:4b:57:13:74:e7:69:18:e3:28:30:b0:4c:44:c6: e8:71:27:46:57:6a:b3:5d:6c:e2:03:7e:39:2e:bd: e7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:53:01:89:E4:28:53:7A:09:E4:AE:AD:F5:53:BF:E7:AA:F8:8B:26 X509v3 Authority Key Identifier: keyid:DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/323830343a3563383a3a2f33322d3438203d3e20323632353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5c8::/32 Signature Algorithm: sha256WithRSAEncryption 32:46:0c:30:1c:dc:fc:b9:5a:79:50:2f:46:e7:9e:73:ad:fa: ed:f4:46:f6:5e:d2:96:24:fe:d1:4b:a2:d5:d8:f3:81:ab:1a: 5e:ed:59:a1:12:a4:d2:d4:51:0c:94:5b:c9:26:31:3b:77:62: 21:29:d6:68:48:94:36:af:60:66:5c:63:95:b3:bd:d9:cd:83: 2b:8b:15:2e:af:4b:57:ce:fb:cf:7d:b3:e2:14:ef:68:6a:d4: ea:ab:e3:0a:da:75:3f:69:aa:5f:c4:d7:63:2a:4f:f0:6e:b5: 42:6c:02:1d:27:49:41:3d:89:76:04:72:8c:10:d7:0a:84:5d: f4:20:a0:32:88:f9:c8:20:68:6a:3d:90:ca:e1:2a:38:fe:6e: 36:05:00:58:54:14:7d:47:3f:3f:c1:f1:b2:d9:36:73:4c:7a: 26:87:56:20:43:0d:1a:d8:0a:73:c1:49:6e:2b:b2:74:54:9e: 2e:e2:9d:d6:a0:48:54:31:93:49:dc:cb:fa:21:e2:5f:b9:9f: 61:bc:a9:d9:aa:4e:a9:f5:1e:f3:b1:d5:b4:92:6a:95:b5:cb: 24:6c:45:94:1c:54:18:ea:49:7e:9a:99:7c:e1:01:90:52:f9: c1:60:76:6d:a0:8b:d9:62:a1:d4:3b:d0:b7:70:a2:a7:2d:19: c4:32:7d:fa -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUVUxsdXi1FeXKDjeR9jQeBnl5VrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQjE2NERCQzcyNDk0NjE5QjA4RjBGQTIzNUYxOEY3 RjEwNzUyMDAeFw0yNjAxMDUxNjU1MjZaFw0yNzAxMDQxNzAwMjZaMDMxMTAvBgNV BAMTKDNGNTMwMTg5RTQyODUzN0EwOUU0QUVBREY1NTNCRkU3QUFGODhCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hKUHh/GIPlUNVxoUqFkXCIxY NSoNecCjuR/1sZu3gpY6KOhsay3VUZRBGgDC1C/EbLHhn2y8B+ng6i+ydDsYtE2x DWQWTU0WjNBmdmRMuaCjCk54FUxDclpsmRHVWySCdwATZhGS6FW7yGMZYDjM2Kfm KAa1fJl3XwgK2xsaMTgdJGDOm5uGx799wIDNX3ow99l2Frf8IHRvclnT1Ew0Jl6o wLkZHFjvSW1HxMLBOoLXDivsOcfGAXZ9IogkGXeJcao3H3zDGaUC9nKqVWj3Am74 82xqIwq74QvhM896275LVxN052kY4ygwsExExuhxJ0ZXarNdbOIDfjkuvee5AgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUP1MBieQoU3oJ5K6t9VO/56r4iyYwHwYDVR0j BBgwFoAU37sWTbxySUYZsI8PojXxj38QdSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0JNcVpxNVl2R0Q4ZFpVckFSREc5SjVWNHEzV011d3F1OW9IWE43aGVh NG4vMC9ERkJCMTY0REJDNzI0OTQ2MTlCMDhGMEZBMjM1RjE4RjdGMTA3NTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkIxNjREQkM3MjQ5NDYx OUIwOEYwRkEyMzVGMThGN0YxMDc1MjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dCTXFacTVZdkdEOGRaVXJBUkRHOUo1VjRxM1dNdXdxdTlvSFhON2hlYTRuLzAv MzIzODMwMzQzYTM1NjMzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM1 MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEBcgwDQYJKoZIhvcNAQELBQADggEBADJGDDAc3Py5 WnlQL0bnnnOt+u30RvZe0pYk/tFLotXY84GrGl7tWaESpNLUUQyUW8kmMTt3YiEp 1mhIlDavYGZcY5WzvdnNgyuLFS6vS1fO+899s+IU72hq1Oqr4wradT9pql/E12Mq T/ButUJsAh0nSUE9iXYEcowQ1wqEXfQgoDKI+cggaGo9kMrhKjj+bjYFAFhUFH1H Pz/B8bLZNnNMeiaHViBDDRrYCnPBSW4rsnRUni7indagSFQxk0ncy/oh4l+5n2G8 qdmqTqn1HvOx1bSSapW1yyRsRZQcVBjqSX6amXzhAZBS+cFgdm2gi9liodQ70Ldw oqctGcQyffo= -----END CERTIFICATE-----Generated at Tue Jan 6 20:29:02 2026 by rpki-client