This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34302d3430203d3e20323635333834.roa File: 323830343a333334303a626230303a3a2f34302d3430203d3e20323635333834.roa (raw, json) Hash identifier: ffw108s5Bshz4Z35AoKf/DfBWP9aaSLuu+OMFw1h+jQ= Subject key identifier: 2D:A1:BB:A8:28:3F:B5:8E:72:45:BC:65:CC:32:A8:80:AE:EE:A0:AB Certificate issuer: /CN=2AAD0546D869051DF88F8860A3540C3582BA1456 Certificate serial: 2BA538B036C2A738EC0A79A3441E25877C6827EB Authority key identifier: 2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34302d3430203d3e20323635333834.roa Signing time: Wed 03 Dec 2025 15:17:25 +0000 ROA not before: Wed 03 Dec 2025 15:12:25 +0000 ROA not after: Wed 02 Dec 2026 15:17:25 +0000 asID: 265384 IP address blocks: 2804:3340:bb00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a5:38:b0:36:c2:a7:38:ec:0a:79:a3:44:1e:25:87:7c:68:27:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAD0546D869051DF88F8860A3540C3582BA1456 Validity Not Before: Dec 3 15:12:25 2025 GMT Not After : Dec 2 15:17:25 2026 GMT Subject: CN=2DA1BBA8283FB58E7245BC65CC32A880AEEEA0AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:8c:58:b7:6c:25:41:8f:a5:57:df:c6:0e: 8e:dd:b5:06:fb:cd:00:c2:76:4e:83:c7:e1:3e:a0: 50:d4:03:4a:a9:96:44:ef:7e:36:a7:8a:b9:d7:30: 4c:1a:af:e9:c9:5f:89:1e:e6:df:17:dd:a0:a3:bb: dd:56:30:55:0c:6f:9b:27:7f:6c:b4:9c:93:78:0c: c3:30:45:5e:d9:54:d1:44:d9:3a:32:49:15:0a:fc: 46:93:68:7f:27:64:33:d0:b8:44:39:6d:c9:dc:13: db:91:56:f3:50:8a:64:04:49:84:f3:24:19:ba:5f: 9c:db:cb:84:88:bd:3b:5f:5f:e6:c4:b0:91:15:d8: 08:07:78:44:dc:fa:16:02:f6:ce:f9:98:7e:6c:bf: af:49:8b:8d:83:85:8d:55:f1:77:5f:60:c4:b8:fa: c4:c7:64:79:48:91:68:5b:1d:f9:db:35:22:83:94: 94:d4:33:78:0f:97:d4:4f:97:f6:c8:77:8c:23:5d: 55:75:82:59:25:bf:94:76:28:c3:1c:16:83:25:af: b1:39:aa:1f:68:fa:4b:08:19:3b:33:a8:1c:09:ca: df:85:a8:ba:29:db:e2:27:5a:b6:c1:f7:d1:8a:1e: a0:8c:99:d7:8b:71:58:34:df:20:30:83:35:67:2e: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A1:BB:A8:28:3F:B5:8E:72:45:BC:65:CC:32:A8:80:AE:EE:A0:AB X509v3 Authority Key Identifier: keyid:2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34302d3430203d3e20323635333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3340:bb00::/40 Signature Algorithm: sha256WithRSAEncryption 78:ba:1e:9c:44:e3:9b:6c:51:42:3f:b3:ce:52:29:49:d9:a8: e4:f2:d7:ba:b3:28:ed:f7:80:05:11:44:6e:33:ee:e0:52:55: 70:6f:a3:a9:f1:4c:2f:30:ae:7c:7b:13:fe:db:d4:ea:5f:28: 66:59:a5:b1:75:85:36:b9:54:90:cb:09:79:d8:27:a2:cd:4e: e3:bc:3c:ca:5a:59:3e:ec:ff:af:15:9e:ce:ac:6e:35:aa:40: 01:15:e3:0a:a9:6b:d0:c6:09:4f:e0:f4:73:55:68:27:77:74: cc:43:c2:20:e1:af:cc:e4:18:59:a1:9a:83:87:3f:f6:0f:83: b7:b8:20:d9:5d:41:cc:a8:0a:48:98:ce:06:57:d3:25:66:44: ae:45:44:bb:df:42:1f:b4:29:5b:79:48:55:6f:2a:62:06:84: e2:a2:be:be:d0:0a:b0:9e:f6:c1:e2:22:9f:3c:cf:68:c9:6b: c1:ab:f6:fe:48:71:49:a7:76:b7:a1:82:1c:8f:ac:82:f6:a4: 71:d9:0f:e8:85:22:1a:3f:e9:d6:85:d9:ad:e1:c0:a3:6a:dd: 26:a5:d2:45:09:b1:05:39:94:79:8b:40:38:4b:ca:69:e4:81: ef:9a:09:5e:a5:11:4b:78:c3:3b:c3:8e:1e:1d:cd:ac:a1:39: 26:59:f9:3a -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUK6U4sDbCpzjsCnmjRB4lh3xoJ+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRDA1NDZEODY5MDUxREY4OEY4ODYwQTM1NDBDMzU4 MkJBMTQ1NjAeFw0yNTEyMDMxNTEyMjVaFw0yNjEyMDIxNTE3MjVaMDMxMTAvBgNV BAMTKDJEQTFCQkE4MjgzRkI1OEU3MjQ1QkM2NUNDMzJBODgwQUVFRUEwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCydIxYt2wlQY+lV9/GDo7dtQb7 zQDCdk6Dx+E+oFDUA0qplkTvfjanirnXMEwar+nJX4ke5t8X3aCju91WMFUMb5sn f2y0nJN4DMMwRV7ZVNFE2ToySRUK/EaTaH8nZDPQuEQ5bcncE9uRVvNQimQESYTz JBm6X5zby4SIvTtfX+bEsJEV2AgHeETc+hYC9s75mH5sv69Ji42DhY1V8XdfYMS4 +sTHZHlIkWhbHfnbNSKDlJTUM3gPl9RPl/bId4wjXVV1glklv5R2KMMcFoMlr7E5 qh9o+ksIGTszqBwJyt+FqLop2+InWrbB99GKHqCMmdeLcVg03yAwgzVnLmH/AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQULaG7qCg/tY5yRbxlzDKogK7uoKswHwYDVR0j BBgwFoAUKq0FRthpBR34j4hgo1QMNYK6FFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR cHQvMC8yQUFEMDU0NkQ4NjkwNTFERjg4Rjg4NjBBMzU0MEMzNTgyQkExNDU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQUQwNTQ2RDg2OTA1MURG ODhGODg2MEEzNTQwQzM1ODJCQTE0NTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv MzIzODMwMzQzYTMzMzMzNDMwM2E2MjYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNTMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEM0C7MA0GCSqGSIb3DQEBCwUA A4IBAQB4uh6cROObbFFCP7POUilJ2ajk8te6syjt94AFEURuM+7gUlVwb6Op8Uwv MK58exP+29TqXyhmWaWxdYU2uVSQywl52CeizU7jvDzKWlk+7P+vFZ7OrG41qkAB FeMKqWvQxglP4PRzVWgnd3TMQ8Ig4a/M5BhZoZqDhz/2D4O3uCDZXUHMqApImM4G V9MlZkSuRUS730IftClbeUhVbypiBoTior6+0AqwnvbB4iKfPM9oyWvBq/b+SHFJ p3a3oYIcj6yC9qRx2Q/ohSIaP+nWhdmt4cCjat0mpdJFCbEFOZR5i0A4S8pp5IHv mglepRFLeMM7w44eHc2soTkmWfk6 -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:11 2025 by rpki-client