This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33332d3333203d3e203631353837.roa File: 323830343a333330303a3a2f33332d3333203d3e203631353837.roa (raw, json) Hash identifier: 50ZrtiKH44uTIJSGJuGz2wHP+dU0W3ONOJ8kj9Y/zRw= Subject key identifier: 20:57:CA:70:0A:CD:B8:7B:7A:17:24:9C:27:8F:E3:BA:5B:15:A6:27 Certificate issuer: /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B Certificate serial: 5AB4134AC34A1440C28BE2D33B785501AA6CA53E Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33332d3333203d3e203631353837.roa Signing time: Tue 02 Dec 2025 19:03:43 +0000 ROA not before: Tue 02 Dec 2025 18:58:43 +0000 ROA not after: Tue 01 Dec 2026 19:03:43 +0000 asID: 61587 IP address blocks: 2804:3300::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 08:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b4:13:4a:c3:4a:14:40:c2:8b:e2:d3:3b:78:55:01:aa:6c:a5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B Validity Not Before: Dec 2 18:58:43 2025 GMT Not After : Dec 1 19:03:43 2026 GMT Subject: CN=2057CA700ACDB87B7A17249C278FE3BA5B15A627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:a6:e5:14:08:ff:57:13:bd:c5:a7:d1:93: a4:9b:55:51:20:82:f0:6e:28:92:55:38:de:6c:f1: 52:27:b0:f9:6e:a3:27:44:e5:2f:67:53:4f:d0:12: 80:4f:68:0f:0b:ed:f0:0a:4a:51:cc:1f:2b:9f:a7: 9f:5e:d2:19:27:bb:06:46:59:8f:f4:5b:53:10:52: 45:4f:43:d1:7f:7c:8d:c0:c8:77:ff:85:15:5a:84: f2:29:fc:4b:eb:df:3a:a3:d8:25:ab:52:f4:91:72: d3:5a:eb:22:4b:43:b1:d7:b9:72:ed:4b:3e:5b:dd: 6f:5c:de:19:6d:58:23:7f:9a:29:ce:0b:21:75:94: 70:c0:ff:56:e1:3e:2c:2c:d1:71:9d:ff:00:4b:5d: 96:4a:cb:16:3e:cb:a6:fa:c2:3a:65:fc:f9:62:33: c5:14:59:b6:3b:75:6a:07:80:89:7f:b6:a0:7f:8a: d5:f2:89:85:37:22:04:81:c1:a5:4f:e4:29:37:d2: 65:0e:51:85:37:83:0d:ee:a1:45:6e:68:73:41:e8: 95:5e:fa:3f:65:d7:6b:46:0e:5e:70:2e:30:d7:7e: 2f:f2:64:9b:06:c6:1e:3d:8f:10:7c:98:8b:09:53: 4b:ed:98:02:b7:24:33:d8:76:38:16:97:7e:cc:3c: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:57:CA:70:0A:CD:B8:7B:7A:17:24:9C:27:8F:E3:BA:5B:15:A6:27 X509v3 Authority Key Identifier: keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33332d3333203d3e203631353837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3300::/33 Signature Algorithm: sha256WithRSAEncryption 61:eb:46:39:27:e4:a7:ba:2d:03:95:68:67:da:e2:44:b0:e2: e4:dc:fc:36:cd:52:8f:a7:cb:09:af:e4:aa:1e:f7:a3:92:35: c5:59:b8:60:90:bd:10:1c:4f:0e:01:fe:c2:a5:e7:c1:e2:9c: 3c:9b:de:35:45:50:35:ea:d2:ae:92:15:08:05:e1:dd:70:fe: a0:cc:00:b6:ed:61:f9:bc:8e:20:c3:59:53:ec:fd:aa:ee:fe: 81:18:66:26:f8:d7:41:32:aa:43:a3:9e:99:3e:36:6e:b0:ca: 09:95:dc:81:63:6e:cb:56:01:fe:95:8b:a4:df:06:9a:87:05: 87:55:00:87:ca:20:04:f5:da:6f:1f:31:44:1c:f7:47:6a:81: ea:e6:7e:ca:98:39:5f:c7:24:a7:79:93:bb:20:6d:7d:74:fc: 64:a3:a6:f1:13:6c:b1:6b:85:15:d0:bf:a1:6f:62:14:66:16: 17:e9:50:49:fb:f0:4d:82:13:9b:a9:9b:81:75:4e:f3:04:65: f8:ab:65:ce:e4:51:2a:fb:1d:bb:d7:95:a9:d0:f9:fc:a4:04: 3f:d2:6a:d6:02:f1:7b:1e:fc:a8:16:cf:cc:f5:de:ec:27:3e: f4:5d:3c:6b:1a:0b:06:53:42:ed:24:0b:a7:ed:6a:27:03:cb: 7d:4f:0f:fe -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUWrQTSsNKFEDCi+LTO3hVAapspT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2 RjVFRjEwQjAeFw0yNTEyMDIxODU4NDNaFw0yNjEyMDExOTAzNDNaMDMxMTAvBgNV BAMTKDIwNTdDQTcwMEFDREI4N0I3QTE3MjQ5QzI3OEZFM0JBNUIxNUE2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQablFAj/VxO9xafRk6SbVVEg gvBuKJJVON5s8VInsPluoydE5S9nU0/QEoBPaA8L7fAKSlHMHyufp59e0hknuwZG WY/0W1MQUkVPQ9F/fI3AyHf/hRVahPIp/Evr3zqj2CWrUvSRctNa6yJLQ7HXuXLt Sz5b3W9c3hltWCN/minOCyF1lHDA/1bhPiws0XGd/wBLXZZKyxY+y6b6wjpl/Pli M8UUWbY7dWoHgIl/tqB/itXyiYU3IgSBwaVP5Ck30mUOUYU3gw3uoUVuaHNB6JVe +j9l12tGDl5wLjDXfi/yZJsGxh49jxB8mIsJU0vtmAK3JDPYdjgWl37MPK3NAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUIFfKcArNuHt6FyScJ4/julsVpicwHwYDVR0j BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv MzIzODMwMzQzYTMzMzMzMDMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzYzMTM1 MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwDgQCAAIwCAMGBygEMwAAMA0GCSqGSIb3DQEBCwUAA4IBAQBh60Y5J+Sn ui0DlWhn2uJEsOLk3Pw2zVKPp8sJr+SqHvejkjXFWbhgkL0QHE8OAf7CpefB4pw8 m941RVA16tKukhUIBeHdcP6gzAC27WH5vI4gw1lT7P2q7v6BGGYm+NdBMqpDo56Z PjZusMoJldyBY27LVgH+lYuk3waahwWHVQCHyiAE9dpvHzFEHPdHaoHq5n7KmDlf xySneZO7IG19dPxko6bxE2yxa4UV0L+hb2IUZhYX6VBJ+/BNghObqZuBdU7zBGX4 q2XO5FEq+x2715Wp0Pn8pAQ/0mrWAvF7HvyoFs/M9d7sJz70XTxrGgsGU0LtJAun 7WonA8t9Tw/+ -----END CERTIFICATE-----Generated at Sun Dec 7 08:32:20 2025 by rpki-client