This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/323830343a363861303a3a2f33322d313238203d3e20323639373035.roa File: 323830343a363861303a3a2f33322d313238203d3e20323639373035.roa (raw, json) Hash identifier: zhdfCF+qRAETjvfVQ6OraQ2dmSybxhayrJCM+QSnLjw= Subject key identifier: F8:0E:BF:C7:9F:A0:58:65:3E:10:E6:54:5A:7D:3C:56:38:AB:71:35 Certificate issuer: /CN=417A3C46308D4692153B994B72E51599225B4979 Certificate serial: 292A6E6D8001B349BDCBEDFB07DAB853B2F35DC9 Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer Subject info access: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/323830343a363861303a3a2f33322d313238203d3e20323639373035.roa Signing time: Mon 01 Dec 2025 11:31:38 +0000 ROA not before: Mon 01 Dec 2025 11:26:38 +0000 ROA not after: Mon 30 Nov 2026 11:31:38 +0000 asID: 269705 IP address blocks: 2804:68a0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 00:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2a:6e:6d:80:01:b3:49:bd:cb:ed:fb:07:da:b8:53:b2:f3:5d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417A3C46308D4692153B994B72E51599225B4979 Validity Not Before: Dec 1 11:26:38 2025 GMT Not After : Nov 30 11:31:38 2026 GMT Subject: CN=F80EBFC79FA058653E10E6545A7D3C5638AB7135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:36:0e:ab:74:18:27:db:0c:ed:56:8c:7c: b1:01:81:49:8f:a5:38:6d:94:2d:ed:ab:52:0a:9a: dc:ba:c8:67:df:87:ee:43:ee:0c:95:a8:21:ed:05: fe:47:0c:47:4f:6b:ff:95:ad:73:d2:e1:09:e4:6a: e5:47:27:11:0b:07:09:ea:1b:e4:7b:7d:ee:f8:8a: 9e:b0:7a:7e:cf:93:fe:76:4f:a5:91:f2:1f:ea:7e: d0:da:4a:ab:3a:96:84:16:af:d9:1b:e8:8a:0a:81: ee:a4:04:b6:f8:46:e8:a5:75:53:46:21:6f:c3:4c: c0:50:3a:9f:13:93:56:be:f7:84:d0:cf:eb:58:e6: 05:59:88:af:cc:ca:c7:88:c1:38:d2:cb:8e:31:ec: 1a:87:f1:de:38:55:b7:c1:e3:3a:b4:f4:ef:ae:4f: a0:17:0b:87:85:7b:6b:85:35:bb:96:34:f2:d3:ce: 94:21:49:31:c3:7e:8e:d0:62:51:14:00:52:67:2c: f5:be:24:04:81:9c:48:fd:41:37:66:0c:9b:9c:e6: 4d:ca:47:89:96:a4:da:5d:a4:dd:c5:de:77:c9:3d: 9c:8a:51:09:e6:19:b2:f2:d6:4c:7e:5e:0a:de:f7: e7:19:5b:87:63:fc:c4:fc:d8:1d:b9:59:58:83:bf: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0E:BF:C7:9F:A0:58:65:3E:10:E6:54:5A:7D:3C:56:38:AB:71:35 X509v3 Authority Key Identifier: keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/323830343a363861303a3a2f33322d313238203d3e20323639373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:68a0::/32 Signature Algorithm: sha256WithRSAEncryption 18:54:c8:58:58:a4:a1:3d:7f:37:40:f6:21:1d:4f:c4:1e:b4: e9:60:03:e9:f2:8e:59:86:24:ed:7e:d8:d4:ef:d9:a7:b4:1a: 3f:13:89:a3:20:69:eb:86:9e:1f:74:7a:4a:94:49:ef:78:bd: 2a:d5:96:e8:e5:00:f8:bc:ff:78:9d:da:48:9a:9e:6f:99:e2: 3f:f1:5d:17:99:b7:ef:3f:e9:50:fb:89:5c:38:6f:47:d5:fb: 0a:29:a2:85:c8:8b:fc:c4:ba:8f:9f:04:eb:07:21:4a:74:f6: c1:05:77:64:06:59:58:ea:8f:4c:bd:f6:1b:59:a8:c1:ab:15: 16:87:e3:80:97:02:ee:31:d3:b5:db:83:6c:b8:3c:71:5b:07: 22:a3:af:57:bc:23:0b:21:59:82:a7:70:13:1e:18:b2:c8:05: e9:02:0d:be:9b:d3:83:0d:38:82:e3:a5:cf:5b:cd:27:a8:1d: ee:dc:4d:7a:77:15:b0:e2:5a:0e:78:ca:75:92:ec:22:18:54: 9e:58:3a:5a:f8:c2:8f:cb:13:0e:9c:2d:fb:82:e7:91:90:8e: 15:04:74:64:a1:e5:fc:05:90:84:e7:1f:0e:83:26:ab:a5:e9: 05:3a:ec:7f:6b:48:d6:6a:82:31:1f:b0:1f:b1:84:89:c0:2a: 1f:91:5f:61 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUKSpubYABs0m9y+37B9q4U7LzXckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE3QTNDNDYzMDhENDY5MjE1M0I5OTRCNzJFNTE1OTky MjVCNDk3OTAeFw0yNTEyMDExMTI2MzhaFw0yNjExMzAxMTMxMzhaMDMxMTAvBgNV BAMTKEY4MEVCRkM3OUZBMDU4NjUzRTEwRTY1NDVBN0QzQzU2MzhBQjcxMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYjjYOq3QYJ9sM7VaMfLEBgUmP pThtlC3tq1IKmty6yGffh+5D7gyVqCHtBf5HDEdPa/+VrXPS4QnkauVHJxELBwnq G+R7fe74ip6wen7Pk/52T6WR8h/qftDaSqs6loQWr9kb6IoKge6kBLb4RuildVNG IW/DTMBQOp8Tk1a+94TQz+tY5gVZiK/MyseIwTjSy44x7BqH8d44VbfB4zq09O+u T6AXC4eFe2uFNbuWNPLTzpQhSTHDfo7QYlEUAFJnLPW+JASBnEj9QTdmDJuc5k3K R4mWpNpdpN3F3nfJPZyKUQnmGbLy1kx+Xgre9+cZW4dj/MT82B25WViDv6CxAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU+A6/x5+gWGU+EOZUWn08VjircTUwHwYDVR0j BBgwFoAUQXo8RjCNRpIVO5lLcuUVmSJbSXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkszQ2lNZzh3cHJ0NGtkWVhZTGRXeG5oREFoRjNOZDk5b1pvWmVBTmh1 ZTcvMC80MTdBM0M0NjMwOEQ0NjkyMTUzQjk5NEI3MkU1MTU5OTIyNUI0OTc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxN0EzQzQ2MzA4RDQ2OTIx NTNCOTk0QjcyRTUxNTk5MjI1QjQ5NzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJLM0NpTWc4d3BydDRrZFlYWUxkV3huaERBaEYzTmQ5OW9ab1plQU5odWU3LzAv MzIzODMwMzQzYTM2Mzg2MTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzkzNzMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBGigMA0GCSqGSIb3DQEBCwUAA4IBAQAYVMhY WKShPX83QPYhHU/EHrTpYAPp8o5ZhiTtftjU79mntBo/E4mjIGnrhp4fdHpKlEnv eL0q1Zbo5QD4vP94ndpImp5vmeI/8V0XmbfvP+lQ+4lcOG9H1fsKKaKFyIv8xLqP nwTrByFKdPbBBXdkBllY6o9MvfYbWajBqxUWh+OAlwLuMdO124NsuDxxWwcio69X vCMLIVmCp3ATHhiyyAXpAg2+m9ODDTiC46XPW80nqB3u3E16dxWw4loOeMp1kuwi GFSeWDpa+MKPyxMOnC37gueRkI4VBHRkoeX8BZCE5x8OgyarpekFOux/a0jWaoIx H7AfsYSJwCofkV9h -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:52 2025 by rpki-client