This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/323830343a363933303a3a2f33322d313238203d3e20323730323534.roa File: 323830343a363933303a3a2f33322d313238203d3e20323730323534.roa (raw, json) Hash identifier: TbCsSgrz9sQNmiYx6jwFPkby/3N+y/zaetwRGhfIYJk= Subject key identifier: EA:F2:8A:BE:F4:9D:E8:D8:9D:A1:F3:7C:62:C4:87:D4:78:E4:00:E7 Certificate issuer: /CN=7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240 Certificate serial: 06688B631A6992EE743EC6E815952741DC33008F Authority key identifier: 7B:04:A8:9A:0E:FB:0F:63:26:A5:EC:37:FB:B8:AF:F4:24:8B:62:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.cer Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/323830343a363933303a3a2f33322d313238203d3e20323730323534.roa Signing time: Wed 31 Dec 2025 13:15:25 +0000 ROA not before: Wed 31 Dec 2025 13:10:25 +0000 ROA not after: Wed 30 Dec 2026 13:15:25 +0000 asID: 270254 IP address blocks: 2804:6930::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.crl rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 Jan 2026 07:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:68:8b:63:1a:69:92:ee:74:3e:c6:e8:15:95:27:41:dc:33:00:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240 Validity Not Before: Dec 31 13:10:25 2025 GMT Not After : Dec 30 13:15:25 2026 GMT Subject: CN=EAF28ABEF49DE8D89DA1F37C62C487D478E400E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:95:18:1b:85:53:b6:2a:9a:31:df:69:87: 32:16:1a:ce:79:af:cb:16:53:12:f9:9a:48:52:a4: b3:5e:1f:b5:67:da:7f:ba:f5:6f:3d:c6:c2:05:c5: 72:70:f3:e2:38:d9:ed:67:fc:e4:09:42:ca:30:7a: 4b:05:7b:57:1b:cb:f1:0d:b2:53:c8:4c:5f:4d:3b: 5e:b3:58:d9:18:74:00:ec:96:62:fa:8f:ab:a5:50: c8:3d:eb:ed:36:a5:d4:98:31:8b:2f:08:4a:fe:b3: 7f:f2:6c:16:db:05:f0:3e:03:42:42:0b:04:9f:6d: 51:46:6d:fe:0c:ee:86:7d:49:b2:c3:90:7e:96:25: a1:79:64:93:8d:2a:3d:e3:9c:9f:be:d3:76:b5:c5: 9e:6d:89:61:0b:dd:3b:d0:f9:b8:ab:25:2a:ed:fb: 26:db:78:ad:d3:ce:e3:d1:f1:d4:4e:d8:08:de:ec: 6a:c6:d2:29:58:77:4e:8f:cf:9b:c6:fb:21:4c:66: 17:9d:a7:f7:a5:08:37:1e:0c:62:de:cd:a9:ba:71: e2:48:8c:15:de:e3:9e:c4:b1:0a:69:c6:86:da:54: a7:0e:7a:70:83:1d:d1:48:1b:ca:fa:07:20:94:ba: a0:0c:f4:74:3c:4a:51:af:87:99:63:6f:9b:2c:77: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F2:8A:BE:F4:9D:E8:D8:9D:A1:F3:7C:62:C4:87:D4:78:E4:00:E7 X509v3 Authority Key Identifier: keyid:7B:04:A8:9A:0E:FB:0F:63:26:A5:EC:37:FB:B8:AF:F4:24:8B:62:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/323830343a363933303a3a2f33322d313238203d3e20323730323534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6930::/32 Signature Algorithm: sha256WithRSAEncryption 33:b4:b4:c9:93:e7:b1:82:2c:1f:8e:7c:30:04:82:7b:d1:4e: ac:aa:9e:ec:b6:35:84:70:f5:ed:b8:e1:7a:ee:0e:9d:80:11: 7d:e6:6b:31:04:6a:21:fa:e5:b0:1d:ca:0d:75:8f:32:45:0a: 83:d3:7b:26:86:85:63:5b:ea:a5:f6:db:b8:df:44:ff:7b:84: 3a:1d:3c:e2:d1:04:56:30:24:c0:12:36:d9:6d:89:92:57:41: d4:b4:b5:46:68:54:28:51:b2:08:11:08:d4:39:4b:df:de:ef: 01:9d:dd:80:1a:1f:d8:e6:b5:75:f8:1c:13:b7:01:04:46:49: ee:8b:62:f6:cf:87:8a:27:ab:c0:71:af:e4:b0:df:bf:b3:e9: c1:b2:2e:6a:25:e2:69:3c:b6:17:d7:58:a0:d3:3e:5e:0e:f4: 1e:e4:16:f0:fe:95:b0:1a:22:39:43:8d:67:2d:0f:93:c1:04: 6d:61:b8:90:43:00:b2:ac:e4:39:b9:31:f5:47:a0:c8:ef:3b: 6c:af:9c:fc:91:81:bc:e1:32:2a:c6:25:f9:b0:07:8c:fd:34: 96:28:15:47:45:f5:63:37:8c:8e:c7:f6:60:ff:cf:2b:11:e0: 88:4d:4d:3f:f4:79:65:d4:05:d9:e8:2b:02:43:bd:89:e1:6b: be:2e:d1:68 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUBmiLYxppku50PsboFZUnQdwzAI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IwNEE4OUEwRUZCMEY2MzI2QTVFQzM3RkJCOEFGRjQy NDhCNjI0MDAeFw0yNTEyMzExMzEwMjVaFw0yNjEyMzAxMzE1MjVaMDMxMTAvBgNV BAMTKEVBRjI4QUJFRjQ5REU4RDg5REExRjM3QzYyQzQ4N0Q0NzhFNDAwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkkZUYG4VTtiqaMd9phzIWGs55 r8sWUxL5mkhSpLNeH7Vn2n+69W89xsIFxXJw8+I42e1n/OQJQsoweksFe1cby/EN slPITF9NO16zWNkYdADslmL6j6ulUMg96+02pdSYMYsvCEr+s3/ybBbbBfA+A0JC CwSfbVFGbf4M7oZ9SbLDkH6WJaF5ZJONKj3jnJ++03a1xZ5tiWEL3TvQ+birJSrt +ybbeK3TzuPR8dRO2Aje7GrG0ilYd06Pz5vG+yFMZhedp/elCDceDGLezam6ceJI jBXe457EsQppxobaVKcOenCDHdFIG8r6ByCUuqAM9HQ8SlGvh5ljb5ssd12PAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU6vKKvvSd6NidofN8YsSH1HjkAOcwHwYDVR0j BBgwFoAUewSomg77D2Mmpew3+7iv9CSLYkAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz LzAvN0IwNEE4OUEwRUZCMEY2MzI2QTVFQzM3RkJCOEFGRjQyNDhCNjI0MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QjA0QTg5QTBFRkIwRjYzMjZB NUVDMzdGQkI4QUZGNDI0OEI2MjQwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y RHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktzLzAvMzIz ODMwMzQzYTM2MzkzMzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3MzAz MjM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBGkwMA0GCSqGSIb3DQEBCwUAA4IBAQAztLTJk+ex giwfjnwwBIJ70U6sqp7stjWEcPXtuOF67g6dgBF95msxBGoh+uWwHcoNdY8yRQqD 03smhoVjW+ql9tu430T/e4Q6HTzi0QRWMCTAEjbZbYmSV0HUtLVGaFQoUbIIEQjU OUvf3u8Bnd2AGh/Y5rV1+BwTtwEERknui2L2z4eKJ6vAca/ksN+/s+nBsi5qJeJp PLYX11ig0z5eDvQe5Bbw/pWwGiI5Q41nLQ+TwQRtYbiQQwCyrOQ5uTH1R6DI7zts r5z8kYG84TIqxiX5sAeM/TSWKBVHRfVjN4yOx/Zg/88rEeCITU0/9Hll1AXZ6CsC Q72J4Wu+LtFo -----END CERTIFICATE-----Generated at Thu Jan 1 12:34:21 2026 by rpki-client