This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/323830343a313234633a3a2f33322d3438203d3e20323633343638.roa File: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (raw, json) Hash identifier: tO3ng5ssl7OXoRcbQLn/q2hJzoTtQtHd+JHRdfRMwYU= Subject key identifier: BD:14:B6:61:3B:02:A6:96:F2:41:D2:1E:0D:61:7E:FA:B3:64:D7:43 Certificate issuer: /CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560 Certificate serial: 18238E3968A273E6BEA780A745697194978DD26D Authority key identifier: 34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/323830343a313234633a3a2f33322d3438203d3e20323633343638.roa Signing time: Mon 01 Dec 2025 18:53:40 +0000 ROA not before: Mon 01 Dec 2025 18:48:40 +0000 ROA not after: Mon 30 Nov 2026 18:53:40 +0000 asID: 263468 IP address blocks: 2804:124c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:23:8e:39:68:a2:73:e6:be:a7:80:a7:45:69:71:94:97:8d:d2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560 Validity Not Before: Dec 1 18:48:40 2025 GMT Not After : Nov 30 18:53:40 2026 GMT Subject: CN=BD14B6613B02A696F241D21E0D617EFAB364D743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:47:12:87:d9:f2:68:24:2b:81:2b:13:98: 72:b1:49:e7:11:30:90:59:54:db:ac:f6:13:92:c1: 31:ca:d5:61:f2:98:c6:65:61:62:a9:f9:c2:31:2b: cf:b2:91:1f:56:b2:7f:88:97:a5:98:95:38:59:11: 4a:f7:c3:1c:58:6b:27:51:1c:04:35:21:d1:d6:e0: 40:ed:73:35:3d:4b:67:0b:09:e6:11:26:95:6a:32: 83:d7:ff:e8:78:fb:01:07:ac:76:a8:fe:d9:8f:b2: bb:03:a5:e8:44:89:d3:23:3b:d5:5f:fa:01:0c:27: 89:0d:fa:53:dc:da:da:b4:6b:ab:46:d7:24:30:aa: e1:e6:33:ff:a7:72:4a:6d:ec:dd:63:5c:e4:32:f1: f5:62:bc:d8:6b:9b:86:43:bd:ec:0f:bb:8e:02:29: bf:b5:16:30:a0:f1:bb:e9:88:b8:48:1b:ca:67:03: 95:58:f9:7e:2f:de:b6:3c:48:96:df:8c:42:96:cd: 33:62:00:d1:c5:a3:4b:5b:d0:e7:c8:ee:e3:ad:f1: 18:18:90:50:fd:d3:e8:46:19:33:70:7c:4e:b4:94: 97:01:a9:e5:09:87:5a:ad:b3:b2:52:4f:77:e5:82: ce:4e:cb:78:15:db:1e:74:3a:00:40:57:14:16:ea: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:14:B6:61:3B:02:A6:96:F2:41:D2:1E:0D:61:7E:FA:B3:64:D7:43 X509v3 Authority Key Identifier: keyid:34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/323830343a313234633a3a2f33322d3438203d3e20323633343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:124c::/32 Signature Algorithm: sha256WithRSAEncryption 23:77:cd:9d:b9:55:96:7f:51:0e:be:36:5f:55:f8:dd:7c:36: 4e:47:cd:ab:7f:94:ea:8c:8b:9c:ba:9f:55:be:27:20:eb:bd: 6a:f3:5b:d9:73:9d:a5:ef:f9:a8:0a:08:45:6d:c9:31:f8:18: 15:14:65:2b:ab:b0:62:38:b2:ab:22:29:cf:2c:57:3b:da:2c: b5:8f:fb:db:44:63:0b:4f:f2:5b:da:58:7d:ea:72:01:23:c7: 56:f8:74:ff:e3:bd:73:62:e7:b3:2d:c4:06:99:a2:b9:6e:f8: 4d:1b:c0:2e:6c:54:92:d7:52:fd:8c:24:52:b3:c8:b2:22:60: 76:f4:d6:97:d4:55:50:fc:1c:d7:c6:1c:44:4d:e4:e9:28:a1: 8d:49:a8:c0:c2:de:e9:55:26:ba:49:01:99:ec:f5:f3:00:15: e0:c5:36:6f:cb:95:00:9c:2a:e9:5b:2f:d2:40:1c:7a:ff:bb: a3:f9:c2:08:56:58:6a:15:9a:fc:b6:f0:19:5b:5c:de:46:0c: c2:fc:84:f7:17:74:6c:bb:8d:a8:5f:62:ce:b2:92:bd:7b:c4: 78:62:06:4e:09:dd:cb:2f:a8:f8:d3:20:77:88:ab:15:26:14: 96:96:1b:21:bc:e2:21:e7:12:47:43:f3:78:6f:e0:d7:14:0f: 6e:97:56:39 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUGCOOOWiic+a+p4CnRWlxlJeN0m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3N0YxQTM0RUM0QTU3MEQ5MjM2MkEzQjE2NUNCMDNG QTFBODU2MDAeFw0yNTEyMDExODQ4NDBaFw0yNjExMzAxODUzNDBaMDMxMTAvBgNV BAMTKEJEMTRCNjYxM0IwMkE2OTZGMjQxRDIxRTBENjE3RUZBQjM2NEQ3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1kcSh9nyaCQrgSsTmHKxSecR MJBZVNus9hOSwTHK1WHymMZlYWKp+cIxK8+ykR9Wsn+Il6WYlThZEUr3wxxYaydR HAQ1IdHW4EDtczU9S2cLCeYRJpVqMoPX/+h4+wEHrHao/tmPsrsDpehEidMjO9Vf +gEMJ4kN+lPc2tq0a6tG1yQwquHmM/+nckpt7N1jXOQy8fVivNhrm4ZDvewPu44C Kb+1FjCg8bvpiLhIG8pnA5VY+X4v3rY8SJbfjEKWzTNiANHFo0tb0OfI7uOt8RgY kFD90+hGGTNwfE60lJcBqeUJh1qts7JST3flgs5Oy3gV2x50OgBAVxQW6hzrAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUvRS2YTsCppbyQdIeDWF++rNk10MwHwYDVR0j BBgwFoAUNHfxo07EpXDZI2KjsWXLA/oahWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC8zNDc3RjFBMzRFQzRBNTcwRDkyMzYyQTNCMTY1Q0IwM0ZBMUE4NTYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0NzdGMUEzNEVDNEE1NzBE OTIzNjJBM0IxNjVDQjAzRkExQTg1NjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJONVk2MjVnblRBTlBpVm1UTHROeDVQNlJKSHRNRVJjZXNLY2czcWNFYW5ZLzAv MzIzODMwMzQzYTMxMzIzNDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz MzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQSTDANBgkqhkiG9w0BAQsFAAOCAQEAI3fNnblV ln9RDr42X1X43Xw2TkfNq3+U6oyLnLqfVb4nIOu9avNb2XOdpe/5qAoIRW3JMfgY FRRlK6uwYjiyqyIpzyxXO9ostY/720RjC0/yW9pYfepyASPHVvh0/+O9c2Lnsy3E BpmiuW74TRvALmxUktdS/YwkUrPIsiJgdvTWl9RVUPwc18YcRE3k6SihjUmowMLe 6VUmukkBmez18wAV4MU2b8uVAJwq6Vsv0kAcev+7o/nCCFZYahWa/LbwGVtc3kYM wvyE9xd0bLuNqF9izrKSvXvEeGIGTgndyy+o+NMgd4irFSYUlpYbIbziIecSR0Pz eG/g1xQPbpdWOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:20 2025 by rpki-client