This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa File: 323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa (raw, json) Hash identifier: sAFBkkAs/a/qCLjB51G8D2locRWGn2109w7QvZfLyBI= Subject key identifier: E3:D5:9E:47:AF:DD:D4:A5:1C:F2:F4:C7:46:92:1D:60:67:93:7E:F4 Certificate issuer: /CN=2AAD0546D869051DF88F8860A3540C3582BA1456 Certificate serial: 526BA44899AC3D314800113B7A7D326D4B6D199A Authority key identifier: 2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa Signing time: Wed 03 Dec 2025 15:17:25 +0000 ROA not before: Wed 03 Dec 2025 15:12:25 +0000 ROA not after: Wed 02 Dec 2026 15:17:25 +0000 asID: 265384 IP address blocks: 2804:3340:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6b:a4:48:99:ac:3d:31:48:00:11:3b:7a:7d:32:6d:4b:6d:19:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAD0546D869051DF88F8860A3540C3582BA1456 Validity Not Before: Dec 3 15:12:25 2025 GMT Not After : Dec 2 15:17:25 2026 GMT Subject: CN=E3D59E47AFDDD4A51CF2F4C746921D6067937EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:4c:19:73:36:90:e6:57:c1:3a:83:a4:f6: 5a:83:c0:64:d0:9d:66:29:45:d4:5b:d1:7c:bf:93: d3:71:3c:f3:96:88:f4:54:0b:70:9e:d3:36:32:db: c2:ba:6f:12:78:7a:ed:50:50:3c:1d:1c:a6:3a:48: 7e:93:fb:fb:7c:b9:3b:93:40:ba:30:6b:e8:f5:b6: 71:aa:db:bd:16:16:33:8b:8c:ab:88:7d:88:c0:e7: 1d:6f:a3:c1:5f:67:5c:a0:b2:97:77:63:25:68:e3: a7:24:52:ff:f0:a9:04:f9:ec:57:20:02:7a:b8:94: 28:65:70:e5:73:4d:b4:87:cd:52:7a:95:ef:a9:f1: 83:ac:a1:d9:3f:12:0d:69:e9:56:3c:69:9a:1f:18: 6b:03:23:37:34:80:9a:38:8f:3a:b1:37:88:31:30: e0:63:0b:9f:fe:ef:8f:75:33:7a:13:64:eb:ed:31: 1f:14:32:09:36:e3:53:61:ac:79:30:88:f4:95:dd: 71:ca:09:58:5e:44:8c:06:1f:25:61:3a:93:9f:2f: 2d:53:1c:3c:f6:cc:8c:ff:e9:c6:95:99:1f:e6:33: 9b:db:36:d4:b4:39:0a:a9:f2:c5:e9:df:c8:a8:4f: ff:f6:39:c3:a5:ab:95:f9:ca:82:05:1f:cd:db:9f: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D5:9E:47:AF:DD:D4:A5:1C:F2:F4:C7:46:92:1D:60:67:93:7E:F4 X509v3 Authority Key Identifier: keyid:2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3340:2000::/40 Signature Algorithm: sha256WithRSAEncryption 05:8f:0f:9b:85:6a:5f:96:53:8e:c9:a2:96:66:af:ef:a9:57: 96:99:c5:15:a3:e8:db:bf:a6:34:4d:5c:00:57:7b:3b:eb:13: 06:b2:b4:1d:ee:27:3d:78:89:b0:81:7b:b2:84:2f:b0:03:8b: ef:f6:28:ac:d5:4d:e8:11:31:81:a4:4d:9e:0a:78:12:4d:ff: bd:f8:2b:ed:39:0e:8f:36:79:01:09:05:bf:4f:1a:35:6a:df: 54:26:25:c1:69:61:e3:e1:da:08:11:32:05:df:5b:d9:56:8e: 36:ad:f1:f3:dc:a4:b1:76:98:a1:5a:0e:bf:93:cd:c6:8a:4f: 61:5d:5d:ea:d1:df:fb:12:60:c2:c0:55:72:48:b9:85:e7:0f: 30:82:cb:e6:97:7a:7a:39:8e:08:07:a6:74:79:df:56:74:f8: 9b:fa:2d:82:1d:eb:a3:dd:43:06:8b:3d:54:e4:f3:b6:90:f4: a7:74:1b:28:bb:55:83:c1:24:75:8a:db:fc:2d:47:b4:50:a7: a6:99:67:12:0c:cd:7c:ed:29:12:6d:0f:50:7a:92:f5:68:42: 3e:57:a5:58:db:01:eb:0c:c0:65:97:dc:17:0a:4b:fc:ad:3d: 31:01:1e:65:16:21:9d:38:8f:b3:2e:d4:c4:78:cf:bb:b9:e2: a2:03:81:2d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUUmukSJmsPTFIABE7en0ybUttGZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRDA1NDZEODY5MDUxREY4OEY4ODYwQTM1NDBDMzU4 MkJBMTQ1NjAeFw0yNTEyMDMxNTEyMjVaFw0yNjEyMDIxNTE3MjVaMDMxMTAvBgNV BAMTKEUzRDU5RTQ3QUZEREQ0QTUxQ0YyRjRDNzQ2OTIxRDYwNjc5MzdFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvckwZczaQ5lfBOoOk9lqDwGTQ nWYpRdRb0Xy/k9NxPPOWiPRUC3Ce0zYy28K6bxJ4eu1QUDwdHKY6SH6T+/t8uTuT QLowa+j1tnGq270WFjOLjKuIfYjA5x1vo8FfZ1ygspd3YyVo46ckUv/wqQT57Fcg Anq4lChlcOVzTbSHzVJ6le+p8YOsodk/Eg1p6VY8aZofGGsDIzc0gJo4jzqxN4gx MOBjC5/+7491M3oTZOvtMR8UMgk241NhrHkwiPSV3XHKCVheRIwGHyVhOpOfLy1T HDz2zIz/6caVmR/mM5vbNtS0OQqp8sXp38ioT//2OcOlq5X5yoIFH83bn0MVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU49WeR6/d1KUc8vTHRpIdYGeTfvQwHwYDVR0j BBgwFoAUKq0FRthpBR34j4hgo1QMNYK6FFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR cHQvMC8yQUFEMDU0NkQ4NjkwNTFERjg4Rjg4NjBBMzU0MEMzNTgyQkExNDU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQUQwNTQ2RDg2OTA1MURG ODhGODg2MEEzNTQwQzM1ODJCQTE0NTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv MzIzODMwMzQzYTMzMzMzNDMwM2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNTMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEM0AgMA0GCSqGSIb3DQEBCwUA A4IBAQAFjw+bhWpfllOOyaKWZq/vqVeWmcUVo+jbv6Y0TVwAV3s76xMGsrQd7ic9 eImwgXuyhC+wA4vv9iis1U3oETGBpE2eCngSTf+9+CvtOQ6PNnkBCQW/Txo1at9U JiXBaWHj4doIETIF31vZVo42rfHz3KSxdpihWg6/k83Gik9hXV3q0d/7EmDCwFVy SLmF5w8wgsvml3p6OY4IB6Z0ed9WdPib+i2CHeuj3UMGiz1U5PO2kPSndBsou1WD wSR1itv8LUe0UKemmWcSDM187SkSbQ9QepL1aEI+V6VY2wHrDMBll9wXCkv8rT0x AR5lFiGdOI+zLtTEeM+7ueKiA4Et -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:59 2025 by rpki-client