This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/323830343a333633303a3a2f33322d3438203d3e20323636333332.roa File: 323830343a333633303a3a2f33322d3438203d3e20323636333332.roa (raw, json) Hash identifier: BUQ5psFC+ALI+sFDNT+facg6CxsCsYFOSpYTDb4QQ08= Subject key identifier: 6D:69:3A:9E:88:63:DD:9A:4B:9F:38:C9:4D:81:90:1D:83:E1:04:DE Certificate issuer: /CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B Certificate serial: 4102EE2953A3EBEC426D272C9C27EE1D355CE99D Authority key identifier: 14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/323830343a333633303a3a2f33322d3438203d3e20323636333332.roa Signing time: Mon 24 Nov 2025 16:21:05 +0000 ROA not before: Mon 24 Nov 2025 16:16:05 +0000 ROA not after: Mon 23 Nov 2026 16:21:05 +0000 asID: 266332 IP address blocks: 2804:3630::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.crl rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:02:ee:29:53:a3:eb:ec:42:6d:27:2c:9c:27:ee:1d:35:5c:e9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B Validity Not Before: Nov 24 16:16:05 2025 GMT Not After : Nov 23 16:21:05 2026 GMT Subject: CN=6D693A9E8863DD9A4B9F38C94D81901D83E104DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5e:82:4f:5d:90:78:b8:8d:2e:06:33:62:06: 37:7a:fc:6b:84:f9:a5:17:2f:b4:db:f8:18:e2:05: bf:5c:c0:2b:99:4b:b9:86:01:47:d4:07:35:45:e0: 04:32:78:57:51:3e:16:29:7d:e9:99:e2:13:19:4b: 2f:a4:86:04:d3:6b:5e:74:cd:3c:61:7e:59:1b:61: 75:b6:ad:6f:9e:cf:7a:9f:0f:6e:6d:1f:01:42:95: e6:d4:b6:ed:24:4d:05:b4:bd:84:b2:ee:f4:07:ab: 2b:e2:e8:a9:4d:16:f9:46:06:54:5c:6a:b3:7f:1e: 1a:73:f9:53:0e:8c:c0:44:8e:c4:da:54:03:88:6e: 2a:fb:7e:ad:31:89:7e:39:e3:10:cd:47:af:e6:0d: a5:cb:ec:69:bd:52:d7:31:d8:a6:a4:dd:34:b2:a6: 8c:ad:64:aa:4a:3d:76:c8:a6:64:d6:88:c3:00:be: 3c:9f:fe:f7:0b:92:56:c1:20:b3:30:3f:1f:c6:fd: 1c:89:a6:ed:ae:ad:a6:d1:a9:76:18:86:87:08:75: 80:71:6f:94:62:0b:28:81:d3:2a:20:90:58:95:f3: 2e:f7:07:d2:4c:49:7d:37:66:3e:f0:0f:90:05:98: f5:3c:09:c3:7c:34:7c:4b:2c:40:bc:1f:4d:0e:47: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:69:3A:9E:88:63:DD:9A:4B:9F:38:C9:4D:81:90:1D:83:E1:04:DE X509v3 Authority Key Identifier: keyid:14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/323830343a333633303a3a2f33322d3438203d3e20323636333332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3630::/32 Signature Algorithm: sha256WithRSAEncryption 1d:7a:ad:57:f1:aa:2b:74:9c:9d:2b:b2:67:96:19:28:c8:b9: 53:9e:d2:80:98:e8:47:71:86:a3:a2:60:55:1c:91:c6:0b:52: d7:2d:80:16:ac:cb:52:c8:d2:ff:a2:6d:2a:8a:46:d3:c9:e4: bf:16:76:10:9f:71:1f:e0:e9:27:e4:90:d5:30:e1:86:08:5e: ce:12:e6:db:9f:51:f6:60:90:15:0c:46:fd:2d:29:0f:b3:78: 44:f6:b8:3f:a3:3e:74:af:53:ba:ba:15:c9:c1:6f:62:f3:0e: e8:cf:06:71:68:96:d4:d4:02:f0:13:80:b5:e7:9d:d8:9b:2d: 08:9b:ea:a1:55:03:ce:7e:e1:ba:cc:47:b4:c1:bc:75:b2:ea: c6:2d:dc:18:1f:5a:bf:65:79:05:f1:63:df:08:64:5e:01:64: 43:a5:7b:06:39:75:71:83:30:b3:23:24:7d:00:9d:98:8b:77: ba:06:2e:2a:7a:49:65:45:6b:18:32:c3:dc:85:72:db:6b:7d: 70:c0:cd:d7:59:06:5b:e4:48:4b:4e:d1:6e:a1:e0:1c:74:6e: f2:5e:6f:21:4e:b4:79:00:79:37:a2:96:95:d8:72:bb:89:ff: f6:1a:9e:b5:67:b9:b3:85:36:82:00:ac:81:a6:03:03:3d:75: 27:2e:32:96 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUQQLuKVOj6+xCbScsnCfuHTVc6Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMUNFMEMxNjQzRENGRDA2NkY2NjJDRTlFMzA3NDM3 OUE2NzMyQjAeFw0yNTExMjQxNjE2MDVaFw0yNjExMjMxNjIxMDVaMDMxMTAvBgNV BAMTKDZENjkzQTlFODg2M0REOUE0QjlGMzhDOTREODE5MDFEODNFMTA0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKXoJPXZB4uI0uBjNiBjd6/GuE +aUXL7Tb+BjiBb9cwCuZS7mGAUfUBzVF4AQyeFdRPhYpfemZ4hMZSy+khgTTa150 zTxhflkbYXW2rW+ez3qfD25tHwFClebUtu0kTQW0vYSy7vQHqyvi6KlNFvlGBlRc arN/Hhpz+VMOjMBEjsTaVAOIbir7fq0xiX454xDNR6/mDaXL7Gm9Utcx2Kak3TSy poytZKpKPXbIpmTWiMMAvjyf/vcLklbBILMwPx/G/RyJpu2urabRqXYYhocIdYBx b5RiCyiB0yogkFiV8y73B9JMSX03Zj7wD5AFmPU8CcN8NHxLLEC8H00OR0DrAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUbWk6nohj3ZpLnzjJTYGQHYPhBN4wHwYDVR0j BBgwFoAUFPHODBZD3P0Gb2Ys6eMHQ3mmcyswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2NhTXI2UWY1c1lydFFuaTdKaEM5MTNHMVpQY1Z3eXduQlRpWHdDNFZB a0gvMC8xNEYxQ0UwQzE2NDNEQ0ZEMDY2RjY2MkNFOUUzMDc0Mzc5QTY3MzJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RjFDRTBDMTY0M0RDRkQw NjZGNjYyQ0U5RTMwNzQzNzlBNjczMkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNjYU1yNlFmNXNZcnRRbmk3SmhDOTEzRzFaUGNWd3l3bkJUaVh3QzRWQWtILzAv MzIzODMwMzQzYTMzMzYzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2 MzMzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQ2MDANBgkqhkiG9w0BAQsFAAOCAQEAHXqtV/Gq K3ScnSuyZ5YZKMi5U57SgJjoR3GGo6JgVRyRxgtS1y2AFqzLUsjS/6JtKopG08nk vxZ2EJ9xH+DpJ+SQ1TDhhghezhLm259R9mCQFQxG/S0pD7N4RPa4P6M+dK9TuroV ycFvYvMO6M8GcWiW1NQC8BOAteed2JstCJvqoVUDzn7husxHtMG8dbLqxi3cGB9a v2V5BfFj3whkXgFkQ6V7Bjl1cYMwsyMkfQCdmIt3ugYuKnpJZUVrGDLD3IVy22t9 cMDN11kGW+RIS07RbqHgHHRu8l5vIU60eQB5N6KWldhyu4n/9hqetWe5s4U2ggCs gaYDAz11Jy4ylg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:06 2025 by rpki-client