This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/323830343a3236303a3a2f33322d3438203d3e203533323134.roa File: 323830343a3236303a3a2f33322d3438203d3e203533323134.roa (raw, json) Hash identifier: CSjxJIPVekiuAihuhqys3CVPKgtFric0Aso8vB1SYNs= Subject key identifier: 84:F6:DB:7E:55:2B:67:9B:6B:72:78:1E:26:F1:27:B4:2D:AD:9D:E1 Certificate issuer: /CN=B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D Certificate serial: 7A7BEA5B45471D6128D140D2A5EEF97ADB5FC471 Authority key identifier: B7:BB:7B:E8:E4:4F:9F:85:3E:4E:F9:EF:A8:0E:68:0D:7C:BE:EF:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.cer Subject info access: rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/323830343a3236303a3a2f33322d3438203d3e203533323134.roa Signing time: Wed 26 Nov 2025 18:53:05 +0000 ROA not before: Wed 26 Nov 2025 18:48:05 +0000 ROA not after: Wed 25 Nov 2026 18:53:05 +0000 asID: 53214 IP address blocks: 2804:260::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.crl rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7b:ea:5b:45:47:1d:61:28:d1:40:d2:a5:ee:f9:7a:db:5f:c4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D Validity Not Before: Nov 26 18:48:05 2025 GMT Not After : Nov 25 18:53:05 2026 GMT Subject: CN=84F6DB7E552B679B6B72781E26F127B42DAD9DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a9:92:bd:98:f6:32:7f:f6:f6:92:24:27:b7: 0f:ed:71:6c:a0:f3:78:4d:4f:3c:1c:98:29:12:26: 0a:d7:1b:d4:12:cc:17:19:22:a7:97:04:6a:ca:3e: 48:e7:2c:6c:22:c5:84:3b:ac:1a:7d:a8:68:ab:90: 30:d3:f0:54:38:66:ae:b3:c5:f4:11:0a:1e:55:f9: 67:d8:4f:60:63:d9:53:84:94:a9:3a:de:85:a5:20: b0:8b:19:74:46:9b:1c:7d:40:54:d6:ec:57:ab:98: 61:a4:93:27:44:35:c5:92:65:a9:2d:de:46:de:ff: 31:0f:de:ba:26:05:4c:3c:7f:57:ab:ba:f5:ee:38: 1c:e9:b6:dc:8a:16:d8:df:e8:27:77:17:24:dd:da: 86:d2:a0:41:d0:62:86:12:8e:fa:96:2a:27:be:63: f3:f9:77:4b:92:68:f8:d5:80:f7:3c:b0:b1:fa:25: e6:f9:c3:20:19:d1:14:3e:be:a5:3d:27:21:da:46: cf:8c:38:f0:25:22:37:0f:1c:59:1a:a5:04:f7:ed: 9a:fa:35:4a:5a:7a:85:f5:e6:20:ce:d6:b8:b4:c0: 5d:83:08:fb:5f:a8:3c:21:1e:fe:33:66:92:a2:95: e9:61:c1:67:b9:1a:19:c8:ae:78:5e:89:80:56:4b: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F6:DB:7E:55:2B:67:9B:6B:72:78:1E:26:F1:27:B4:2D:AD:9D:E1 X509v3 Authority Key Identifier: keyid:B7:BB:7B:E8:E4:4F:9F:85:3E:4E:F9:EF:A8:0E:68:0D:7C:BE:EF:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BB7BE8E44F9F853E4EF9EFA80E680D7CBEEF0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/323830343a3236303a3a2f33322d3438203d3e203533323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:260::/32 Signature Algorithm: sha256WithRSAEncryption a4:16:bd:61:59:22:bb:86:e6:cb:e9:0e:91:85:62:b1:09:c3: 10:a1:0e:3f:d6:6d:22:d0:0a:bb:28:83:4a:d4:df:36:9b:0f: d3:cf:a4:7e:91:6c:ae:a3:da:e9:72:c8:58:b0:83:5e:e4:6d: 43:7d:a4:d8:d3:2e:d7:5f:6c:03:9c:35:c4:ae:e2:09:50:2e: 53:ba:86:3e:dc:f2:d0:35:1f:3c:b1:cf:b7:f9:fc:97:5f:08: 91:95:bc:5e:d5:92:6c:f3:46:b8:56:6b:0f:b2:a9:e6:22:65: 5f:9f:39:fc:17:d3:60:5a:7f:5b:e5:ab:5a:ab:c8:b7:e4:e5: 90:f1:51:8c:59:6e:0e:94:6e:20:04:a1:68:68:48:d9:29:70: 2c:e1:ba:b4:d7:62:73:91:fc:0b:df:4f:e5:b7:b4:4f:6c:dd: 76:35:ba:28:cf:be:79:eb:c6:48:ed:4d:4c:89:49:36:e8:b5: 21:bf:d1:dd:f9:b8:58:80:4f:ee:5b:89:6b:d1:3d:55:c6:1a: 23:77:18:04:47:9e:15:e5:ab:1d:0f:35:a7:0d:fd:96:88:0c: 4d:53:7b:e1:0b:d6:ff:d3:17:81:02:88:38:2c:97:0a:57:d3: 16:be:e2:0f:9a:61:76:0a:84:81:fe:b7:8e:ed:97:88:04:f8: 38:b0:66:a2 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUenvqW0VHHWEo0UDSpe75ettfxHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdCQjdCRThFNDRGOUY4NTNFNEVGOUVGQTgwRTY4MEQ3 Q0JFRUYwRDAeFw0yNTExMjYxODQ4MDVaFw0yNjExMjUxODUzMDVaMDMxMTAvBgNV BAMTKDg0RjZEQjdFNTUyQjY3OUI2QjcyNzgxRTI2RjEyN0I0MkRBRDlERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQqZK9mPYyf/b2kiQntw/tcWyg 83hNTzwcmCkSJgrXG9QSzBcZIqeXBGrKPkjnLGwixYQ7rBp9qGirkDDT8FQ4Zq6z xfQRCh5V+WfYT2Bj2VOElKk63oWlILCLGXRGmxx9QFTW7FermGGkkydENcWSZakt 3kbe/zEP3romBUw8f1eruvXuOBzpttyKFtjf6Cd3FyTd2obSoEHQYoYSjvqWKie+ Y/P5d0uSaPjVgPc8sLH6Jeb5wyAZ0RQ+vqU9JyHaRs+MOPAlIjcPHFkapQT37Zr6 NUpaeoX15iDO1ri0wF2DCPtfqDwhHv4zZpKilelhwWe5GhnIrnheiYBWSz+hAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUhPbbflUrZ5trcngeJvEntC2tneEwHwYDVR0j BBgwFoAUt7t76ORPn4U+TvnvqA5oDXy+7w0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzcxWHdQR1ZiQUxOSEVxMkhieUhGMnVEa0hacnJxV1RmTnZMeHBqYmlI VnYvMC9CN0JCN0JFOEU0NEY5Rjg1M0U0RUY5RUZBODBFNjgwRDdDQkVFRjBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3QkI3QkU4RTQ0RjlGODUz RTRFRjlFRkE4MEU2ODBEN0NCRUVGMEQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM3MVh3UEdWYkFMTkhFcTJIYnlIRjJ1RGtIWnJycVdUZk52THhwamJpSFZ2LzAv MzIzODMwMzQzYTMyMzYzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMjMx MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBAJgMA0GCSqGSIb3DQEBCwUAA4IBAQCkFr1hWSK7hubL 6Q6RhWKxCcMQoQ4/1m0i0Aq7KINK1N82mw/Tz6R+kWyuo9rpcshYsINe5G1DfaTY 0y7XX2wDnDXEruIJUC5TuoY+3PLQNR88sc+3+fyXXwiRlbxe1ZJs80a4VmsPsqnm ImVfnzn8F9NgWn9b5ataq8i35OWQ8VGMWW4OlG4gBKFoaEjZKXAs4bq012JzkfwL 30/lt7RPbN12Nbooz75568ZI7U1MiUk26LUhv9Hd+bhYgE/uW4lr0T1VxhojdxgE R54V5asdDzWnDf2WiAxNU3vhC9b/0xeBAog4LJcKV9MWvuIPmmF2CoSB/reO7ZeI BPg4sGai -----END CERTIFICATE-----Generated at Sat Dec 6 13:10:04 2025 by rpki-client