This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa File: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (raw, json) Hash identifier: rBkVsA9Vp1/erFkNnm/hXpS9EC37BBs3SUgY7oXf1XU= Subject key identifier: 43:D6:93:17:46:FE:FF:DB:3A:66:AD:B2:16:6F:F7:78:EF:70:66:C4 Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Certificate serial: 1937B3EAAC35C4B43907FB3C90B451B9FD1BC467 Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa Signing time: Thu 20 Nov 2025 23:56:49 +0000 ROA not before: Thu 20 Nov 2025 23:51:49 +0000 ROA not after: Thu 19 Nov 2026 23:56:49 +0000 asID: 269707 IP address blocks: 2804:68a8::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 02:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:37:b3:ea:ac:35:c4:b4:39:07:fb:3c:90:b4:51:b9:fd:1b:c4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Validity Not Before: Nov 20 23:51:49 2025 GMT Not After : Nov 19 23:56:49 2026 GMT Subject: CN=43D6931746FEFFDB3A66ADB2166FF778EF7066C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:5f:3e:33:22:b6:6c:b5:ed:42:86:0c:38: ec:61:48:10:e6:90:a1:ac:33:e9:0a:43:c8:0f:7c: 41:1e:c0:7c:c3:96:e4:cf:08:ca:45:fb:75:2c:0e: cc:b9:4b:6f:db:e1:71:9d:04:20:60:ab:f2:1d:55: c7:4b:43:3e:81:d7:22:17:60:21:12:14:82:42:5d: 82:68:7f:1a:73:2b:f3:c4:10:3a:eb:0a:33:38:86: 44:fe:fd:c1:ca:0d:43:9d:9d:b0:d6:6b:6a:49:a4: 0b:c4:e8:82:a4:3a:c1:3f:c6:ea:70:ed:52:17:af: 56:65:62:47:cb:86:0f:9d:fc:e7:4f:2d:97:57:a8: c7:78:f5:08:1c:88:2a:c6:d3:03:b2:4a:76:b5:a5: 74:88:a0:31:f8:eb:6a:df:ce:d3:1c:d6:ea:38:07: 25:7d:1e:f6:ac:4f:2d:32:0d:df:9c:d4:9e:b7:08: 32:9b:10:96:4a:0a:d0:ac:18:ed:ee:c7:85:13:26: d4:f1:90:c7:11:75:af:83:3e:34:21:d2:c6:4d:e9: dd:d7:f8:76:35:28:91:2f:9b:85:59:b0:d6:89:e8: 10:b4:1e:e5:c9:87:c7:df:c5:0e:22:14:ac:3e:21: e2:c7:c2:ac:fd:95:36:62:d0:b3:ac:82:1f:44:94: 9a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D6:93:17:46:FE:FF:DB:3A:66:AD:B2:16:6F:F7:78:EF:70:66:C4 X509v3 Authority Key Identifier: keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:68a8::/32 Signature Algorithm: sha256WithRSAEncryption 01:05:16:2c:e3:90:fb:92:5d:9f:3c:e0:e7:70:bd:96:1f:dc: 23:8a:f2:f1:b2:7a:34:62:e7:f3:ce:f5:55:c1:7b:09:46:c8: 9f:10:0e:d1:27:88:d2:fd:36:63:20:2f:62:0b:8b:a8:08:5a: c3:cd:7a:82:34:61:6f:b9:cd:5d:ae:c5:38:74:50:30:1b:a8: 00:03:7d:b7:2a:84:76:32:82:e0:9a:49:ac:a4:bd:fc:59:f3: da:b4:1d:57:33:93:2d:c4:46:56:b7:ef:9f:4f:6a:0a:49:c1: 0b:d9:45:3a:27:24:ac:93:16:1c:c1:b0:54:ff:1a:ca:a4:05: 0b:40:55:4e:22:59:d3:8b:86:ce:93:dc:ea:c5:16:03:d4:32: fa:2f:50:4d:1c:06:f9:37:c4:20:50:79:73:28:0c:43:9c:e9: 5d:4e:e7:7d:25:9f:5e:50:89:c4:e5:2b:46:03:16:3e:98:01: ad:c2:f3:5a:7b:fd:95:16:f8:ec:0a:37:1f:a9:fd:01:3c:74: 14:01:f4:fb:c7:d7:35:60:6c:18:cb:4b:e2:fd:14:93:f0:1d: 23:10:03:6c:31:ac:76:e3:5d:d9:1e:31:32:0b:c5:43:a3:19: 3a:a6:ec:3f:79:9b:7b:85:e8:c2:51:4a:9e:92:52:2e:25:57: b2:6c:3a:b0 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUGTez6qw1xLQ5B/s8kLRRuf0bxGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0Rjk5QzUwQkNFNjIyQzI1RjZDRjQwODNCM0NCRTM2 NEM4QkExRDAeFw0yNTExMjAyMzUxNDlaFw0yNjExMTkyMzU2NDlaMDMxMTAvBgNV BAMTKDQzRDY5MzE3NDZGRUZGREIzQTY2QURCMjE2NkZGNzc4RUY3MDY2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPi18+MyK2bLXtQoYMOOxhSBDm kKGsM+kKQ8gPfEEewHzDluTPCMpF+3UsDsy5S2/b4XGdBCBgq/IdVcdLQz6B1yIX YCESFIJCXYJofxpzK/PEEDrrCjM4hkT+/cHKDUOdnbDWa2pJpAvE6IKkOsE/xupw 7VIXr1ZlYkfLhg+d/OdPLZdXqMd49QgciCrG0wOySna1pXSIoDH462rfztMc1uo4 ByV9HvasTy0yDd+c1J63CDKbEJZKCtCsGO3ux4UTJtTxkMcRda+DPjQh0sZN6d3X +HY1KJEvm4VZsNaJ6BC0HuXJh8ffxQ4iFKw+IeLHwqz9lTZi0LOsgh9ElJpjAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUQ9aTF0b+/9s6Zq2yFm/3eO9wZsQwHwYDVR0j BBgwFoAUnU+ZxQvOYiwl9s9Ag7PL42TIuh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2 TUcvMC85RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENEY5OUM1MEJDRTYyMkMy NUY2Q0Y0MDgzQjNDQkUzNjRDOEJBMUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJhUENuZ0xrY0xvY2tyQU5zS1h1dXRVb05yZDRObzVEVng2M0JmaENMNk1HLzAv MzIzODMwMzQzYTM2Mzg2MTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzkzNzMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBGioMA0GCSqGSIb3DQEBCwUAA4IBAQABBRYs 45D7kl2fPODncL2WH9wjivLxsno0YufzzvVVwXsJRsifEA7RJ4jS/TZjIC9iC4uo CFrDzXqCNGFvuc1drsU4dFAwG6gAA323KoR2MoLgmkmspL38WfPatB1XM5MtxEZW t++fT2oKScEL2UU6JySskxYcwbBU/xrKpAULQFVOIlnTi4bOk9zqxRYD1DL6L1BN HAb5N8QgUHlzKAxDnOldTud9JZ9eUInE5StGAxY+mAGtwvNae/2VFvjsCjcfqf0B PHQUAfT7x9c1YGwYy0vi/RST8B0jEANsMax2413ZHjEyC8VDoxk6puw/eZt7hejC UUqeklIuJVeybDqw -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:40 2025 by rpki-client