This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d3332203d3e203631353837.roa File: 323830343a333330303a3a2f33322d3332203d3e203631353837.roa (raw, json) Hash identifier: bnIaNVImI9qZeSV6DloKDJN1UGGBHk7nvmCaxyNdsbE= Subject key identifier: DB:F1:05:F6:CB:7B:D0:6E:C2:52:F3:98:83:5B:AE:BE:03:1D:9C:80 Certificate issuer: /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B Certificate serial: 4CF0CDBF5734169ABAD86BB4AD1EED83570D3E4B Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d3332203d3e203631353837.roa Signing time: Tue 02 Dec 2025 19:03:43 +0000 ROA not before: Tue 02 Dec 2025 18:58:43 +0000 ROA not after: Tue 01 Dec 2026 19:03:43 +0000 asID: 61587 IP address blocks: 2804:3300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 13:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f0:cd:bf:57:34:16:9a:ba:d8:6b:b4:ad:1e:ed:83:57:0d:3e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B Validity Not Before: Dec 2 18:58:43 2025 GMT Not After : Dec 1 19:03:43 2026 GMT Subject: CN=DBF105F6CB7BD06EC252F398835BAEBE031D9C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:f6:84:46:85:e5:38:fa:7c:0c:d7:79:36: 99:80:1a:1d:23:21:bf:a3:ec:ce:6b:4b:ab:01:a1: 67:fc:4f:8e:15:34:db:3f:f7:d7:b7:20:87:fb:e0: 63:9f:3b:83:0e:f9:21:7b:50:42:23:36:07:bb:c3: 05:f8:a5:f1:19:be:1f:a6:ce:36:f4:37:75:dd:cb: 66:9f:bf:f0:18:b3:1f:27:18:c8:b4:d9:74:0e:78: 41:a7:98:c4:db:73:9a:38:c6:e0:2f:be:56:56:81: b5:a4:09:40:78:33:eb:c3:ba:82:8b:79:70:e5:5c: 41:76:df:1b:53:8b:2b:58:c7:c4:1f:0e:d5:6d:74: 4c:bc:5d:ba:c5:68:27:86:4f:07:8d:8f:90:b5:e8: 33:9e:3a:be:99:f9:d3:cf:43:44:0a:ca:69:64:96: 22:ce:65:bd:3d:20:d2:28:4c:f2:10:cc:04:b1:85: 7a:ba:ec:26:3d:7f:bb:ad:09:2f:84:fa:9d:ca:33: 2a:ca:d1:7f:43:f5:38:29:79:ac:59:ec:b2:fc:b8: e7:6a:62:ad:ca:4a:7f:d5:b3:c9:a7:09:6d:1a:a6: 54:92:65:b8:3e:8a:a3:bc:de:e3:ed:09:38:53:47: 63:56:40:9f:48:fb:80:e7:8a:13:cf:9c:bd:02:02: 7c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F1:05:F6:CB:7B:D0:6E:C2:52:F3:98:83:5B:AE:BE:03:1D:9C:80 X509v3 Authority Key Identifier: keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d3332203d3e203631353837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3300::/32 Signature Algorithm: sha256WithRSAEncryption 1d:a6:64:36:0b:49:2e:c7:06:71:68:bb:2f:ce:6a:93:0f:51: 5c:ac:fc:11:7c:9a:69:ca:47:1b:0a:2e:2a:5f:18:50:b0:4c: a6:c5:57:7e:2f:97:1e:65:23:1d:39:fb:8a:a8:65:d7:11:3c: 15:d3:6b:01:a8:f5:20:7d:ba:c3:e0:36:f2:1c:60:7c:aa:54: fb:9e:9a:a9:41:0b:08:d4:4b:6b:09:21:ac:83:b5:d0:21:15: 02:c6:f7:40:16:f2:83:bf:ea:f9:10:22:bf:9c:4b:8b:a0:23: 2b:38:30:34:b4:c5:8e:2a:1c:8f:9e:a5:5d:65:56:49:00:36: 5a:ee:90:d5:81:ae:3d:e9:93:ce:cc:3e:95:62:cd:20:d1:42: 00:34:52:ac:57:21:14:8f:6d:d9:03:79:1f:60:13:bf:eb:9b: 84:db:11:2b:c6:be:fb:56:95:d7:ec:a8:c0:24:7c:7c:04:e1: b7:ce:87:f1:07:33:ab:d4:a5:89:dd:4b:ec:bb:63:b2:b2:ec: 80:e3:51:10:3f:2c:2a:0b:29:17:e6:9b:b7:a6:73:20:26:a5: 9c:8c:59:01:73:8a:fb:30:bb:4e:88:92:2a:81:29:c7:1d:88: c2:d7:fd:a5:b9:9a:6f:8b:01:51:42:b1:e3:39:0a:a4:a5:41: a8:d2:13:77 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUTPDNv1c0Fpq62Gu0rR7tg1cNPkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2 RjVFRjEwQjAeFw0yNTEyMDIxODU4NDNaFw0yNjEyMDExOTAzNDNaMDMxMTAvBgNV BAMTKERCRjEwNUY2Q0I3QkQwNkVDMjUyRjM5ODgzNUJBRUJFMDMxRDlDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbuvaERoXlOPp8DNd5NpmAGh0j Ib+j7M5rS6sBoWf8T44VNNs/99e3IIf74GOfO4MO+SF7UEIjNge7wwX4pfEZvh+m zjb0N3Xdy2afv/AYsx8nGMi02XQOeEGnmMTbc5o4xuAvvlZWgbWkCUB4M+vDuoKL eXDlXEF23xtTiytYx8QfDtVtdEy8XbrFaCeGTweNj5C16DOeOr6Z+dPPQ0QKymlk liLOZb09INIoTPIQzASxhXq67CY9f7utCS+E+p3KMyrK0X9D9TgpeaxZ7LL8uOdq Yq3KSn/Vs8mnCW0aplSSZbg+iqO83uPtCThTR2NWQJ9I+4DnihPPnL0CAnwbAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU2/EF9st70G7CUvOYg1uuvgMdnIAwHwYDVR0j BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv MzIzODMwMzQzYTMzMzMzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM1 MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEMwAwDQYJKoZIhvcNAQELBQADggEBAB2mZDYLSS7H BnFouy/OapMPUVys/BF8mmnKRxsKLipfGFCwTKbFV34vlx5lIx05+4qoZdcRPBXT awGo9SB9usPgNvIcYHyqVPuemqlBCwjUS2sJIayDtdAhFQLG90AW8oO/6vkQIr+c S4ugIys4MDS0xY4qHI+epV1lVkkANlrukNWBrj3pk87MPpVizSDRQgA0UqxXIRSP bdkDeR9gE7/rm4TbESvGvvtWldfsqMAkfHwE4bfOh/EHM6vUpYndS+y7Y7Ky7IDj URA/LCoLKRfmm7emcyAmpZyMWQFzivswu06IkiqBKccdiMLX/aW5mm+LAVFCseM5 CqSlQajSE3c= -----END CERTIFICATE-----Generated at Sun Dec 7 03:47:47 2025 by rpki-client