This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa File: 323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa (raw, json) Hash identifier: CTrjt+MHVes/7+fU+pnEibCKZ96Of1bNIcCxdBSqe9Q= Subject key identifier: 36:56:D4:79:EF:CE:DD:C0:E2:F0:98:36:4F:89:44:A8:60:70:B5:A3 Certificate issuer: /CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E Certificate serial: 60F09CE087F957FFF073F3E636D8783E6F669B22 Authority key identifier: C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa Signing time: Sun 23 Nov 2025 03:03:57 +0000 ROA not before: Sun 23 Nov 2025 02:58:57 +0000 ROA not after: Sun 22 Nov 2026 03:03:57 +0000 asID: 272677 IP address blocks: 2804:86f4:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 18:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f0:9c:e0:87:f9:57:ff:f0:73:f3:e6:36:d8:78:3e:6f:66:9b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E Validity Not Before: Nov 23 02:58:57 2025 GMT Not After : Nov 22 03:03:57 2026 GMT Subject: CN=3656D479EFCEDDC0E2F098364F8944A86070B5A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:c6:e1:00:ee:be:09:d1:4b:89:2d:e6:eb: 87:54:d9:19:07:bc:e7:17:35:2b:d3:32:bc:f6:d5: 3a:a9:c4:d2:95:6e:a3:cb:9b:ca:05:e0:08:19:45: 03:87:7b:aa:88:cd:f1:b9:00:36:44:6a:83:bd:83: bf:c8:25:1c:00:af:71:38:0e:b2:c4:d0:61:76:1d: 4f:e2:ca:ce:2f:ed:55:57:3f:fa:a4:a9:ab:4a:60: 8d:ae:91:20:41:b4:e1:e2:73:50:33:3b:e8:d1:77: e3:d9:59:ce:8e:68:8f:72:52:41:f5:95:a7:35:ff: 5b:88:38:1b:33:c7:a5:9b:33:3a:29:b3:d5:9f:b0: 1d:31:48:3f:f1:15:51:7c:62:2e:53:c2:f1:c1:1f: 4f:8b:9b:95:33:8b:32:a3:42:65:1a:a8:fe:2c:f3: fd:14:fc:ac:8e:84:0e:0a:8c:75:83:e4:48:fc:54: 5d:a2:43:0f:27:aa:bd:aa:da:6e:7e:ae:ab:f9:dd: 47:1e:0d:55:68:de:ad:3f:4d:67:17:b4:44:22:4c: 6b:72:40:c9:cb:d3:f5:fd:41:22:c4:33:98:4a:c6: 97:b1:8e:db:ff:60:e9:11:e0:dd:fd:68:9f:cb:7c: 9a:a3:77:2a:c2:5a:15:a4:fc:6a:74:e0:4a:48:35: 55:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:56:D4:79:EF:CE:DD:C0:E2:F0:98:36:4F:89:44:A8:60:70:B5:A3 X509v3 Authority Key Identifier: keyid:C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:86f4:4000::/34 Signature Algorithm: sha256WithRSAEncryption 74:74:b3:a6:28:8f:e2:84:9a:c7:15:f2:b3:a3:11:89:93:f2: 59:3a:26:98:fc:fa:f5:21:4b:42:59:b6:e4:29:4d:80:3d:0d: 64:7f:6a:5b:e5:bc:0a:33:d8:3b:c5:16:97:13:9d:01:bc:a8: 00:ed:30:10:0a:1d:b9:c8:ad:af:a1:77:9c:c0:49:a7:24:c3: c7:8d:8e:fb:ca:b6:e5:cc:5b:38:b9:a6:ad:4b:e8:bb:de:4a: 5d:cd:19:4f:b6:33:92:a6:10:32:dd:80:9b:94:3b:43:56:af: 11:a1:1d:c1:fb:bb:39:bd:ae:36:a8:cb:21:ea:9e:58:39:6a: ed:61:b0:35:0a:89:1b:2a:7e:31:b8:38:23:e1:4d:92:0a:5a: f2:c5:f1:b0:59:48:70:01:04:5d:fe:88:d8:87:f4:9d:75:d6: c3:8b:6c:ed:0f:1b:4a:70:4a:e8:af:cb:cb:e0:9f:c1:ca:82: 76:04:67:ea:6f:f3:11:c0:fa:3a:fb:d7:ca:a1:1a:cd:f4:0c: 69:8b:74:29:cf:f2:da:86:94:72:10:10:7d:4a:e4:e9:80:21: 15:44:94:73:bb:e3:ee:aa:73:52:f0:16:d0:51:b2:c6:56:9d: 84:ee:b3:cc:85:7c:b2:4e:be:5b:97:8a:e7:8e:5a:f1:4d:88: 15:5a:33:21 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUYPCc4If5V//wc/PmNth4Pm9mmyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlFN0E0NkFFRTU2OTVERUIwMTVGRjQ1QkE2MDIzMjNB OTNBQTUwRTAeFw0yNTExMjMwMjU4NTdaFw0yNjExMjIwMzAzNTdaMDMxMTAvBgNV BAMTKDM2NTZENDc5RUZDRUREQzBFMkYwOTgzNjRGODk0NEE4NjA3MEI1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsMbhAO6+CdFLiS3m64dU2RkH vOcXNSvTMrz21TqpxNKVbqPLm8oF4AgZRQOHe6qIzfG5ADZEaoO9g7/IJRwAr3E4 DrLE0GF2HU/iys4v7VVXP/qkqatKYI2ukSBBtOHic1AzO+jRd+PZWc6OaI9yUkH1 lac1/1uIOBszx6WbMzops9WfsB0xSD/xFVF8Yi5TwvHBH0+Lm5UzizKjQmUaqP4s 8/0U/KyOhA4KjHWD5Ej8VF2iQw8nqr2q2m5+rqv53UceDVVo3q0/TWcXtEQiTGty QMnL0/X9QSLEM5hKxpexjtv/YOkR4N39aJ/LfJqjdyrCWhWk/Gp04EpINVUtAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUNlbUee/O3cDi8Jg2T4lEqGBwtaMwHwYDVR0j BBgwFoAUyeekau5Wld6wFf9FumAjI6k6pQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK UlQvMC9DOUU3QTQ2QUVFNTY5NURFQjAxNUZGNDVCQTYwMjMyM0E5M0FBNTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RTdBNDZBRUU1Njk1REVC MDE1RkY0NUJBNjAyMzIzQTkzQUE1MEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzAv MzIzODMwMzQzYTM4MzY2NjM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjM2MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhvRAMA0GCSqGSIb3DQEBCwUA A4IBAQB0dLOmKI/ihJrHFfKzoxGJk/JZOiaY/Pr1IUtCWbbkKU2APQ1kf2pb5bwK M9g7xRaXE50BvKgA7TAQCh25yK2voXecwEmnJMPHjY77yrblzFs4uaatS+i73kpd zRlPtjOSphAy3YCblDtDVq8RoR3B+7s5va42qMsh6p5YOWrtYbA1CokbKn4xuDgj 4U2SClryxfGwWUhwAQRd/ojYh/SdddbDi2ztDxtKcEror8vL4J/ByoJ2BGfqb/MR wPo6+9fKoRrN9Axpi3Qpz/LahpRyEBB9SuTpgCEVRJRzu+PuqnNS8BbQUbLGVp2E 7rPMhXyyTr5bl4rnjlrxTYgVWjMh -----END CERTIFICATE-----Generated at Mon Dec 8 09:31:39 2025 by rpki-client