This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3a2f33322d3438203d3e203533303139.roa File: 323830343a3564633a3a2f33322d3438203d3e203533303139.roa (raw, json) Hash identifier: eVMXxyV2mQ7Q89Mz0NDhC5x5jPNokJXQRoeegBIjbh8= Subject key identifier: 50:98:C8:E1:7F:BA:0D:7E:09:0B:DC:CA:A0:E4:9B:E8:E7:A5:8B:E8 Certificate issuer: /CN=34BF6A56915CA33890219A0C1EA36D5F1688801B Certificate serial: 6A3BE185829ED6E508ADE5BC055764753001936F Authority key identifier: 34:BF:6A:56:91:5C:A3:38:90:21:9A:0C:1E:A3:6D:5F:16:88:80:1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BF6A56915CA33890219A0C1EA36D5F1688801B.cer Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3a2f33322d3438203d3e203533303139.roa Signing time: Fri 12 Dec 2025 13:37:07 +0000 ROA not before: Fri 12 Dec 2025 13:32:07 +0000 ROA not after: Fri 11 Dec 2026 13:37:07 +0000 asID: 53019 IP address blocks: 2804:5dc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/34BF6A56915CA33890219A0C1EA36D5F1688801B.crl rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/34BF6A56915CA33890219A0C1EA36D5F1688801B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BF6A56915CA33890219A0C1EA36D5F1688801B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Dec 2025 08:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3b:e1:85:82:9e:d6:e5:08:ad:e5:bc:05:57:64:75:30:01:93:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34BF6A56915CA33890219A0C1EA36D5F1688801B Validity Not Before: Dec 12 13:32:07 2025 GMT Not After : Dec 11 13:37:07 2026 GMT Subject: CN=5098C8E17FBA0D7E090BDCCAA0E49BE8E7A58BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:38:91:28:7a:95:e5:19:7b:cb:70:73:a7:1d: 1b:10:6e:80:29:ee:55:a5:72:32:70:d9:de:f6:c8: 03:49:65:30:c5:e0:05:55:d3:7a:5f:7d:3c:97:0d: db:9f:5a:a6:d9:39:20:58:b6:3b:0b:47:75:58:6c: 84:8c:0f:56:68:87:c0:4d:ed:88:51:a2:19:99:26: 82:cb:ea:66:5f:98:12:78:86:12:3a:74:88:d8:07: 7e:e4:02:8a:6c:e5:40:39:42:1b:d4:90:23:24:f6: b5:c4:86:d8:10:b3:6c:40:ea:bb:c5:d7:e1:a6:cc: a8:be:22:7b:82:6d:e5:2d:1b:0b:4b:fa:c5:df:47: 77:3d:d8:de:e0:30:c6:ef:7c:43:72:56:c7:31:80: 99:3e:b6:da:54:13:37:5b:3b:c8:f2:5d:06:3f:c7: de:b4:1c:ef:fd:48:e3:05:eb:8c:f5:45:6d:96:76: 2d:af:60:9b:17:f1:aa:a6:cb:9e:e1:31:65:18:a6: a1:4c:6e:f4:b9:b4:d9:dc:f9:84:f3:65:b7:bf:97: 28:96:76:4c:96:e4:2a:f1:2c:0e:dc:e8:e3:fa:82: 25:cf:b7:ba:ff:cc:33:4a:06:0c:7e:75:49:09:cf: 80:a3:42:90:ba:21:6b:6b:b6:fa:bc:e0:a7:d2:39: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:98:C8:E1:7F:BA:0D:7E:09:0B:DC:CA:A0:E4:9B:E8:E7:A5:8B:E8 X509v3 Authority Key Identifier: keyid:34:BF:6A:56:91:5C:A3:38:90:21:9A:0C:1E:A3:6D:5F:16:88:80:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/34BF6A56915CA33890219A0C1EA36D5F1688801B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BF6A56915CA33890219A0C1EA36D5F1688801B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3a2f33322d3438203d3e203533303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5dc::/32 Signature Algorithm: sha256WithRSAEncryption 4e:c9:69:e5:99:b8:72:9c:85:70:7f:3b:00:22:6c:e1:00:31: 1c:78:35:a1:97:37:43:8d:31:9a:5d:a9:ae:6a:a7:6e:0f:f1: f7:0a:66:a5:c3:72:92:76:8e:45:93:99:f2:bd:b8:b9:85:0c: cc:0b:bf:2a:86:f3:f3:b3:64:47:a9:1d:87:56:c4:af:d6:22: 9f:bd:62:53:af:fb:0d:e3:70:a0:9c:2f:00:8e:d3:a3:c9:16: 2b:f0:f3:31:6f:6c:d4:d8:fd:67:c8:e1:68:27:43:0b:af:51: 03:b7:91:f2:9f:3a:54:b8:a7:e0:c4:0f:e2:c8:2d:87:fd:16: 32:a0:63:c1:6b:6d:80:91:ce:c4:0c:ec:92:78:bb:30:01:27: 1c:eb:b7:64:c7:7c:7d:06:bd:f0:59:d2:96:1b:91:61:3c:06: 8b:d4:a2:f0:c1:2f:18:d8:9a:7d:85:65:28:71:14:1e:8a:b6: 0a:bc:af:25:51:00:f6:50:53:51:20:68:02:64:3a:8a:ae:69: 6e:7b:1c:b5:60:c9:8a:d3:8f:b4:d2:89:f8:c3:fc:b9:b1:3c: e8:40:31:99:00:b4:40:dd:d3:c2:40:5b:ac:a4:2e:39:7f:75: 81:26:af:ff:0e:75:49:d2:e8:39:57:ab:f7:3d:53:85:e3:6d: 30:d2:b7:4e -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUajvhhYKe1uUIreW8BVdkdTABk28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRCRjZBNTY5MTVDQTMzODkwMjE5QTBDMUVBMzZENUYx Njg4ODAxQjAeFw0yNTEyMTIxMzMyMDdaFw0yNjEyMTExMzM3MDdaMDMxMTAvBgNV BAMTKDUwOThDOEUxN0ZCQTBEN0UwOTBCRENDQUEwRTQ5QkU4RTdBNThCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoOJEoepXlGXvLcHOnHRsQboAp 7lWlcjJw2d72yANJZTDF4AVV03pffTyXDdufWqbZOSBYtjsLR3VYbISMD1Zoh8BN 7YhRohmZJoLL6mZfmBJ4hhI6dIjYB37kAops5UA5QhvUkCMk9rXEhtgQs2xA6rvF 1+GmzKi+InuCbeUtGwtL+sXfR3c92N7gMMbvfENyVscxgJk+ttpUEzdbO8jyXQY/ x960HO/9SOMF64z1RW2Wdi2vYJsX8aqmy57hMWUYpqFMbvS5tNnc+YTzZbe/lyiW dkyW5CrxLA7c6OP6giXPt7r/zDNKBgx+dUkJz4CjQpC6IWtrtvq84KfSOZe3AgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUUJjI4X+6DX4JC9zKoOSb6Oeli+gwHwYDVR0j BBgwFoAUNL9qVpFcoziQIZoMHqNtXxaIgBswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby8xdFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vwa1hpY1M3cFFX LzAvMzRCRjZBNTY5MTVDQTMzODkwMjE5QTBDMUVBMzZENUYxNjg4ODAxQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zNEJGNkE1NjkxNUNBMzM4OTAy MTlBMEMxRUEzNkQ1RjE2ODg4MDFCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x dFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vwa1hpY1M3cFFXLzAvMzIz ODMwMzQzYTM1NjQ2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMDMxMzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAoBAXcMA0GCSqGSIb3DQEBCwUAA4IBAQBOyWnlmbhynIVwfzsA ImzhADEceDWhlzdDjTGaXamuaqduD/H3Cmalw3KSdo5Fk5nyvbi5hQzMC78qhvPz s2RHqR2HVsSv1iKfvWJTr/sN43CgnC8AjtOjyRYr8PMxb2zU2P1nyOFoJ0MLr1ED t5HynzpUuKfgxA/iyC2H/RYyoGPBa22Akc7EDOySeLswAScc67dkx3x9Br3wWdKW G5FhPAaL1KLwwS8Y2Jp9hWUocRQeirYKvK8lUQD2UFNRIGgCZDqKrmluexy1YMmK 04+00on4w/y5sTzoQDGZALRA3dPCQFuspC45f3WBJq//DnVJ0ug5V6v3PVOF420w 0rdO -----END CERTIFICATE-----Generated at Wed Dec 17 01:06:30 2025 by rpki-client