This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa File: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (raw, json) Hash identifier: cFDfHzBHdAZl0TReDFbmpsYTKY6dIq8BWZb70GDoydw= Subject key identifier: 69:B0:80:7B:64:01:E5:7D:94:51:3A:9F:AD:85:BF:E9:2E:34:8D:B1 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 19250D0E79E620EEEA54EFE039E2135A9E2BCC29 Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa Signing time: Mon 24 Nov 2025 21:21:12 +0000 ROA not before: Mon 24 Nov 2025 21:16:12 +0000 ROA not after: Mon 23 Nov 2026 21:21:12 +0000 asID: 273760 IP address blocks: 2804:8bcc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 19:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:25:0d:0e:79:e6:20:ee:ea:54:ef:e0:39:e2:13:5a:9e:2b:cc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Nov 24 21:16:12 2025 GMT Not After : Nov 23 21:21:12 2026 GMT Subject: CN=69B0807B6401E57D94513A9FAD85BFE92E348DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:1a:6a:bd:a9:f3:ab:93:2b:8e:61:fe:fb: e4:4c:12:62:f1:40:91:29:30:8f:0a:60:98:03:25: c1:ec:53:e8:58:ae:c6:7a:82:d4:df:1e:b0:e7:a8: 54:07:55:ea:e8:fc:65:e7:3b:aa:63:52:29:4e:ad: 73:cd:0b:10:a0:73:cd:68:49:e9:2b:44:9f:a5:4e: ba:92:fb:6c:b6:b0:ff:a1:af:5c:3c:c5:ba:f9:e9: 95:5b:9b:ff:73:03:c4:43:ee:9e:43:1d:d5:98:9f: 2d:ef:8f:ec:af:bb:f0:4f:1d:e8:7b:21:d7:c3:7f: 0c:b7:5a:56:a5:8f:46:d0:4b:00:e3:88:58:17:7a: 09:a1:2c:8d:73:57:7a:a8:91:ec:39:2a:1c:67:d9: d7:6e:d7:8f:ba:04:0a:e8:57:9f:56:a5:26:92:b7: a5:05:b6:07:a6:51:f9:4c:5b:f0:22:b0:c3:bb:1b: 98:c8:d7:c7:9f:63:e2:78:30:cb:04:aa:f7:03:b1: ed:dc:80:0b:88:f6:98:2a:c5:58:c8:b4:3e:aa:c8: ad:c7:fa:9a:37:92:33:73:40:f2:d8:df:22:c8:35: 09:13:72:47:7f:0c:5d:09:66:63:8b:24:19:a9:88: 05:ac:9a:33:41:53:6d:f4:0b:94:19:7b:e2:16:90: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B0:80:7B:64:01:E5:7D:94:51:3A:9F:AD:85:BF:E9:2E:34:8D:B1 X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8bcc::/32 Signature Algorithm: sha256WithRSAEncryption 06:e7:cf:af:54:6e:c8:3f:8a:e8:1e:d5:12:a3:93:35:b4:9c: 0a:0b:df:e4:2d:47:e2:83:bf:e5:28:89:39:52:aa:b4:e6:cc: 5a:88:89:e0:ee:37:bf:0b:1a:33:d2:b3:8c:3a:2a:ef:0a:29: 8a:73:9e:de:79:e7:16:bb:d7:83:05:e7:99:48:20:3e:53:30: 61:c9:05:1e:f3:04:88:a4:c0:44:d9:9c:c0:89:2e:36:ca:23: 76:3d:ca:54:ef:9a:aa:00:e2:43:c7:00:c3:18:f7:24:74:23: 03:57:d1:8a:b7:a7:d8:41:15:df:ec:cc:b6:dd:9b:7b:5c:44: 83:68:98:fe:24:95:72:85:aa:58:87:5c:88:5a:21:40:42:60: a6:f3:b8:5e:96:1a:8f:66:b9:db:92:7f:cf:7a:0a:fd:0a:b8: 64:c7:e9:c3:7e:01:f7:ab:8f:2d:96:5a:38:cf:dd:71:8e:8c: 53:60:20:d4:3d:e8:1a:fc:e0:66:62:0c:96:bd:5c:c1:d1:49: 9b:da:97:ec:dd:87:08:f0:e7:61:bd:5d:95:68:5d:e5:59:46: fa:78:40:3e:ae:01:cd:74:37:d4:1b:cc:c3:c4:63:a8:ab:15: 2a:e9:83:3e:73:81:51:42:5b:89:3b:06:47:54:46:71:2f:2e: d8:95:3a:aa -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUGSUNDnnmIO7qVO/gOeITWp4rzCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTExMjQyMTE2MTJaFw0yNjExMjMyMTIxMTJaMDMxMTAvBgNV BAMTKDY5QjA4MDdCNjQwMUU1N0Q5NDUxM0E5RkFEODVCRkU5MkUzNDhEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5hpqvanzq5MrjmH+++RMEmLx QJEpMI8KYJgDJcHsU+hYrsZ6gtTfHrDnqFQHVero/GXnO6pjUilOrXPNCxCgc81o SekrRJ+lTrqS+2y2sP+hr1w8xbr56ZVbm/9zA8RD7p5DHdWYny3vj+yvu/BPHeh7 IdfDfwy3Wlalj0bQSwDjiFgXegmhLI1zV3qokew5Khxn2ddu14+6BAroV59WpSaS t6UFtgemUflMW/AisMO7G5jI18efY+J4MMsEqvcDse3cgAuI9pgqxVjItD6qyK3H +po3kjNzQPLY3yLINQkTckd/DF0JZmOLJBmpiAWsmjNBU230C5QZe+IWkGLfAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUabCAe2QB5X2UUTqfrYW/6S40jbEwHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNKZmRrdGdDOVFHbVNMdWZrMUZ1cDF6bkNldnBpM0Fyc3Fad0xEcU5SSDRlLzAv MzIzODMwMzQzYTM4NjI2MzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz MzczNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASLzDANBgkqhkiG9w0BAQsFAAOCAQEABufPr1Ru yD+K6B7VEqOTNbScCgvf5C1H4oO/5SiJOVKqtObMWoiJ4O43vwsaM9KzjDoq7wop inOe3nnnFrvXgwXnmUggPlMwYckFHvMEiKTARNmcwIkuNsojdj3KVO+aqgDiQ8cA wxj3JHQjA1fRiren2EEV3+zMtt2be1xEg2iY/iSVcoWqWIdciFohQEJgpvO4XpYa j2a525J/z3oK/Qq4ZMfpw34B96uPLZZaOM/dcY6MU2Ag1D3oGvzgZmIMlr1cwdFJ m9qX7N2HCPDnYb1dlWhd5VlG+nhAPq4BzXQ31BvMw8RjqKsVKumDPnOBUUJbiTsG R1RGcS8u2JU6qg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:05 2025 by rpki-client