This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/323830343a3265303a3a2f33322d313238203d3e203238323333.roa File: 323830343a3265303a3a2f33322d313238203d3e203238323333.roa (raw, json) Hash identifier: eU0smZdjRDgVUGcWQ/zHo3v5ZA3NtXPmjkvPiUAWuEE= Subject key identifier: FA:77:E0:3B:3E:D3:B5:6F:C6:90:B8:4F:BD:29:BF:17:38:4A:09:FE Certificate issuer: /CN=F59F0917DC2784889616CA6E5F885D25D0E0D1E5 Certificate serial: 17BD7479676CCE08F0B5DA5DF684FC49EB8D526C Authority key identifier: F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/323830343a3265303a3a2f33322d313238203d3e203238323333.roa Signing time: Tue 18 Nov 2025 18:57:43 +0000 ROA not before: Tue 18 Nov 2025 18:52:43 +0000 ROA not after: Tue 17 Nov 2026 18:57:43 +0000 asID: 28233 IP address blocks: 2804:2e0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.crl rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bd:74:79:67:6c:ce:08:f0:b5:da:5d:f6:84:fc:49:eb:8d:52:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F59F0917DC2784889616CA6E5F885D25D0E0D1E5 Validity Not Before: Nov 18 18:52:43 2025 GMT Not After : Nov 17 18:57:43 2026 GMT Subject: CN=FA77E03B3ED3B56FC690B84FBD29BF17384A09FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:cb:92:5a:ba:4a:55:1f:dd:39:30:3a:55: 9a:61:79:90:1f:92:59:cb:2f:93:9a:08:c2:d4:a7: d2:26:7e:2d:1f:de:4c:c0:4d:2d:9e:2a:50:4c:11: 49:1c:fa:bc:bf:c6:fd:ab:38:aa:30:b7:40:55:33: 57:33:6d:a0:c7:d7:15:7e:7b:0c:fc:48:47:1e:df: c8:5b:58:5d:04:9e:0a:c3:a9:9a:cb:6a:59:51:0d: 2d:5a:e6:40:fc:bb:ab:07:94:01:2e:df:ab:ae:43: 7a:dc:3a:06:41:40:48:3b:f2:6a:93:f7:d0:cf:61: 45:7a:1d:ec:d1:18:30:2f:53:22:f6:99:4b:e1:ad: 3a:c8:b3:11:e7:f8:60:6c:0a:c2:34:e2:b1:32:1a: 4f:ef:a4:01:24:01:42:1b:b4:0c:3e:aa:b8:a6:42: 8f:7f:4a:d2:cf:50:60:27:2b:83:58:13:ec:fb:cc: 87:c1:a4:73:76:8f:8f:c5:53:ae:af:2e:0d:97:3d: 40:b8:98:3c:30:1c:b8:ef:b4:2e:95:d0:41:67:a7: 6f:5c:c9:a6:34:09:2b:8f:c9:23:12:a9:ec:aa:0d: ca:8a:08:c0:d1:20:be:af:f1:9e:74:56:48:8f:b1: 12:2f:95:30:39:f0:7d:fa:b8:9d:3b:57:88:b2:f3: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:77:E0:3B:3E:D3:B5:6F:C6:90:B8:4F:BD:29:BF:17:38:4A:09:FE X509v3 Authority Key Identifier: keyid:F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/323830343a3265303a3a2f33322d313238203d3e203238323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2e0::/32 Signature Algorithm: sha256WithRSAEncryption 64:1f:22:07:a0:9f:2a:1d:ed:50:8c:5b:64:1f:28:c0:fa:f7: a1:be:02:23:f9:2d:da:a9:dc:6b:99:1a:90:28:6b:65:ba:26: 67:04:3d:a4:da:82:1b:5c:b0:ca:0b:80:68:ef:a2:1b:e0:f4: a5:9f:45:c0:30:06:72:6e:75:3c:e0:73:08:a5:39:ce:61:be: 50:c5:3f:20:30:e1:31:ea:54:13:db:07:b4:8b:47:cd:bf:78: db:1b:e5:24:32:28:7d:aa:0b:9e:82:79:a1:48:d1:cb:b7:41: ce:6a:6c:94:74:ea:10:25:60:77:d9:ad:12:c7:20:9a:48:d7: 6a:bd:c7:a4:c8:bf:b7:71:3c:bd:d9:98:0d:fd:0c:51:9b:a9: b3:79:51:e2:b9:c4:a6:10:32:db:0b:64:44:7a:8f:cb:dc:ea: e1:80:bb:e9:93:4c:68:f8:60:49:07:84:e7:34:66:f0:78:b3: 99:19:60:fc:07:77:c3:96:b5:38:8f:34:25:26:86:9a:fa:4f: 02:cb:58:a8:28:a2:35:04:95:45:03:4a:01:d1:4e:15:b2:89: 44:20:4b:12:99:db:06:76:58:c3:da:7c:2d:61:78:0d:68:17: 32:d3:22:20:c2:92:49:ed:b8:78:2e:f7:17:5c:21:f6:41:1d: 46:ff:61:4f -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUF710eWdszgjwtdpd9oT8SeuNUmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5RjA5MTdEQzI3ODQ4ODk2MTZDQTZFNUY4ODVEMjVE MEUwRDFFNTAeFw0yNTExMTgxODUyNDNaFw0yNjExMTcxODU3NDNaMDMxMTAvBgNV BAMTKEZBNzdFMDNCM0VEM0I1NkZDNjkwQjg0RkJEMjlCRjE3Mzg0QTA5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJl8uSWrpKVR/dOTA6VZpheZAf klnLL5OaCMLUp9Imfi0f3kzATS2eKlBMEUkc+ry/xv2rOKowt0BVM1czbaDH1xV+ ewz8SEce38hbWF0EngrDqZrLallRDS1a5kD8u6sHlAEu36uuQ3rcOgZBQEg78mqT 99DPYUV6HezRGDAvUyL2mUvhrTrIsxHn+GBsCsI04rEyGk/vpAEkAUIbtAw+qrim Qo9/StLPUGAnK4NYE+z7zIfBpHN2j4/FU66vLg2XPUC4mDwwHLjvtC6V0EFnp29c yaY0CSuPySMSqeyqDcqKCMDRIL6v8Z50VkiPsRIvlTA58H36uJ07V4iy80BXAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU+nfgOz7TtW/GkLhPvSm/FzhKCf4wHwYDVR0j BBgwFoAU9Z8JF9wnhIiWFspuX4hdJdDg0eUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0gyeXAzUkpDVDl0R1RHNHhVblRON0JXMlI2ek1tczlkTnlHang1WFhz RnQvMC9GNTlGMDkxN0RDMjc4NDg4OTYxNkNBNkU1Rjg4NUQyNUQwRTBEMUU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1OUYwOTE3REMyNzg0ODg5 NjE2Q0E2RTVGODg1RDI1RDBFMEQxRTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNIMnlwM1JKQ1Q5dEdURzR4VW5UTjdCVzJSNnpNbXM5ZE55R2p4NVhYc0Z0LzAv MzIzODMwMzQzYTMyNjUzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzODMy MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEAuAwDQYJKoZIhvcNAQELBQADggEBAGQfIgegnyod 7VCMW2QfKMD696G+AiP5Ldqp3GuZGpAoa2W6JmcEPaTaghtcsMoLgGjvohvg9KWf RcAwBnJudTzgcwilOc5hvlDFPyAw4THqVBPbB7SLR82/eNsb5SQyKH2qC56CeaFI 0cu3Qc5qbJR06hAlYHfZrRLHIJpI12q9x6TIv7dxPL3ZmA39DFGbqbN5UeK5xKYQ MtsLZER6j8vc6uGAu+mTTGj4YEkHhOc0ZvB4s5kZYPwHd8OWtTiPNCUmhpr6TwLL WKgoojUElUUDSgHRThWyiUQgSxKZ2wZ2WMPafC1heA1oFzLTIiDCkkntuHgu9xdc IfZBHUb/YU8= -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:35 2025 by rpki-client