This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a616130303a3a2f34302d3430203d3e20323635333834.roa File: 323830343a333334303a616130303a3a2f34302d3430203d3e20323635333834.roa (raw, json) Hash identifier: BhCWXo4Om3siEP9BjlJ7qNgS+spKDnn4HO8YuixQnQk= Subject key identifier: 5F:67:B6:BB:10:EA:11:76:C8:4D:25:53:84:29:F7:A6:69:97:BD:AD Certificate issuer: /CN=2AAD0546D869051DF88F8860A3540C3582BA1456 Certificate serial: 121A84FDA226381D541E3E175D2242BEA37E25B5 Authority key identifier: 2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a616130303a3a2f34302d3430203d3e20323635333834.roa Signing time: Wed 03 Dec 2025 15:17:24 +0000 ROA not before: Wed 03 Dec 2025 15:12:24 +0000 ROA not after: Wed 02 Dec 2026 15:17:24 +0000 asID: 265384 IP address blocks: 2804:3340:aa00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1a:84:fd:a2:26:38:1d:54:1e:3e:17:5d:22:42:be:a3:7e:25:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAD0546D869051DF88F8860A3540C3582BA1456 Validity Not Before: Dec 3 15:12:24 2025 GMT Not After : Dec 2 15:17:24 2026 GMT Subject: CN=5F67B6BB10EA1176C84D25538429F7A66997BDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2e:78:5f:9d:83:38:c2:99:09:cf:93:d9:8f: e5:4a:6a:21:43:30:f8:0d:d0:ec:dd:f6:5f:55:e8: 1d:c9:9a:1f:dd:ab:75:c2:05:85:11:5f:11:50:7f: 6f:0e:36:61:38:0d:0b:39:51:af:56:15:f5:0c:cd: 48:e6:84:02:4b:41:f5:27:0a:3e:2f:23:b9:db:94: 1a:fb:72:75:18:6e:4f:05:73:7a:9d:9f:56:58:c5: c1:2c:9e:5a:83:6d:d4:4a:94:01:90:fc:72:41:16: df:87:f0:da:02:41:5d:84:d9:52:a1:16:44:ea:81: d0:c1:da:56:0a:62:3f:58:1e:bd:a6:cc:cd:03:84: 78:87:57:26:b7:b0:44:7b:72:a5:23:91:04:dc:51: e7:b8:49:8f:be:73:79:0c:35:6c:dc:88:fc:09:04: 1a:bf:c3:ee:5e:bd:c8:cf:b5:50:50:5a:6b:b5:c7: aa:1d:ae:e4:b4:a8:54:29:85:2e:66:52:86:dd:4a: 8a:9b:b3:7b:b5:d1:a3:d2:8a:6a:66:f2:92:49:85: f1:17:fe:bb:82:ef:70:ac:ee:36:4e:95:d7:ed:8d: f3:cb:89:90:00:d9:b5:34:5f:61:ae:09:4a:dd:f8: 6d:bb:83:b6:b6:c0:1f:c8:81:cc:48:9d:74:b7:0d: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:67:B6:BB:10:EA:11:76:C8:4D:25:53:84:29:F7:A6:69:97:BD:AD X509v3 Authority Key Identifier: keyid:2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a616130303a3a2f34302d3430203d3e20323635333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3340:aa00::/40 Signature Algorithm: sha256WithRSAEncryption 5f:5b:c4:02:c4:ab:4b:fe:2d:e5:c5:9e:ad:79:a9:4e:f8:4c: 3c:58:cd:ae:36:3f:e7:b1:c0:fe:a2:43:4f:a2:8e:63:5e:1c: 4d:58:f5:94:97:69:42:cd:b6:9a:49:e7:b8:f3:c3:43:6d:c7: 5f:92:bc:f8:09:35:7c:eb:c4:40:db:3f:e6:f1:9a:e3:43:6b: 83:2d:37:da:89:4e:e9:84:98:5a:c6:09:8a:5b:04:c1:a3:4d: 78:e1:7d:a1:e1:e3:ef:2b:ac:9f:1d:5e:b8:b9:08:74:34:76: bf:29:e4:75:6c:55:5b:fb:01:8c:ea:2c:c6:da:ff:c0:a6:6f: 17:fa:0b:12:0e:ee:30:c6:8d:11:bc:67:59:7f:33:c8:b8:d7: 0f:e7:62:d6:cd:3f:27:9a:40:02:2f:da:16:71:36:19:70:27: 4b:6e:20:44:f3:1e:37:c0:9f:2d:d8:26:65:91:01:92:cb:55: 1e:da:05:a1:4d:32:4c:e0:1a:d0:1e:20:24:33:e1:d9:eb:f8: 2f:f6:bf:fb:1e:d6:0a:33:7f:9b:50:06:06:27:24:3b:87:25: e6:db:b9:d3:db:c9:15:81:70:45:9d:3c:1c:c3:21:dd:fb:62: cb:a7:ee:77:23:bd:2f:3c:42:bf:a2:f2:34:ad:aa:24:fe:55: 5b:49:a5:c0 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUEhqE/aImOB1UHj4XXSJCvqN+JbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRDA1NDZEODY5MDUxREY4OEY4ODYwQTM1NDBDMzU4 MkJBMTQ1NjAeFw0yNTEyMDMxNTEyMjRaFw0yNjEyMDIxNTE3MjRaMDMxMTAvBgNV BAMTKDVGNjdCNkJCMTBFQTExNzZDODREMjU1Mzg0MjlGN0E2Njk5N0JEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrLnhfnYM4wpkJz5PZj+VKaiFD MPgN0Ozd9l9V6B3Jmh/dq3XCBYURXxFQf28ONmE4DQs5Ua9WFfUMzUjmhAJLQfUn Cj4vI7nblBr7cnUYbk8Fc3qdn1ZYxcEsnlqDbdRKlAGQ/HJBFt+H8NoCQV2E2VKh FkTqgdDB2lYKYj9YHr2mzM0DhHiHVya3sER7cqUjkQTcUee4SY++c3kMNWzciPwJ BBq/w+5evcjPtVBQWmu1x6odruS0qFQphS5mUobdSoqbs3u10aPSimpm8pJJhfEX /ruC73Cs7jZOldftjfPLiZAA2bU0X2GuCUrd+G27g7a2wB/IgcxInXS3Db/PAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUX2e2uxDqEXbITSVThCn3pmmXva0wHwYDVR0j BBgwFoAUKq0FRthpBR34j4hgo1QMNYK6FFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR cHQvMC8yQUFEMDU0NkQ4NjkwNTFERjg4Rjg4NjBBMzU0MEMzNTgyQkExNDU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQUQwNTQ2RDg2OTA1MURG ODhGODg2MEEzNTQwQzM1ODJCQTE0NTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv MzIzODMwMzQzYTMzMzMzNDMwM2E2MTYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNTMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEM0CqMA0GCSqGSIb3DQEBCwUA A4IBAQBfW8QCxKtL/i3lxZ6tealO+Ew8WM2uNj/nscD+okNPoo5jXhxNWPWUl2lC zbaaSee488NDbcdfkrz4CTV868RA2z/m8ZrjQ2uDLTfaiU7phJhaxgmKWwTBo014 4X2h4ePvK6yfHV64uQh0NHa/KeR1bFVb+wGM6izG2v/Apm8X+gsSDu4wxo0RvGdZ fzPIuNcP52LWzT8nmkACL9oWcTYZcCdLbiBE8x43wJ8t2CZlkQGSy1Ue2gWhTTJM 4BrQHiAkM+HZ6/gv9r/7HtYKM3+bUAYGJyQ7hyXm27nT28kVgXBFnTwcwyHd+2LL p+53I70vPEK/ovI0raok/lVbSaXA -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:00 2025 by rpki-client