This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa File: 323830343a383666343a3a2f33342d3334203d3e20323732363737.roa (raw, json) Hash identifier: bZ1NhXmwC0PSRqMGRtn7dppJLOm3g3bejgqcg+ppZIM= Subject key identifier: FA:5B:28:71:37:BE:EE:B6:C0:8C:11:62:20:62:0C:4B:28:F5:EF:AA Certificate issuer: /CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E Certificate serial: 30E3E632E99E9B9148E3F8F699C5A1648EBA769D Authority key identifier: C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa Signing time: Sun 23 Nov 2025 03:03:56 +0000 ROA not before: Sun 23 Nov 2025 02:58:56 +0000 ROA not after: Sun 22 Nov 2026 03:03:56 +0000 asID: 272677 IP address blocks: 2804:86f4::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 18:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e3:e6:32:e9:9e:9b:91:48:e3:f8:f6:99:c5:a1:64:8e:ba:76:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9E7A46AEE5695DEB015FF45BA602323A93AA50E Validity Not Before: Nov 23 02:58:56 2025 GMT Not After : Nov 22 03:03:56 2026 GMT Subject: CN=FA5B287137BEEEB6C08C116220620C4B28F5EFAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:5e:7d:dc:81:cc:dc:00:0f:25:2e:ae:26: 24:11:ec:0d:c3:15:0c:e1:9f:2c:5d:eb:2b:30:76: 1d:08:33:3d:44:4a:c8:a7:e5:cf:82:ee:24:30:f8: 3d:06:6b:7b:6a:b4:92:dc:fe:86:25:35:87:8f:1c: 67:60:ec:9e:bd:52:ad:d5:a0:6f:46:41:77:14:f0: e4:24:48:14:d6:2f:a5:88:22:e7:a0:22:8f:f1:2d: 44:a5:73:e6:15:e5:f3:b9:61:16:be:af:7e:65:87: a3:dd:24:36:85:dd:59:a2:2f:45:ce:62:48:d6:ab: 10:73:1f:ce:fa:04:5b:2b:fb:60:ee:ac:4e:a8:47: c5:e1:75:05:86:ae:78:72:07:a7:ec:38:83:6c:ea: 3b:fe:2d:67:09:13:6a:64:53:e8:21:9f:48:ed:05: d6:4b:ef:c9:b9:ff:d3:0f:e7:55:95:c3:35:a8:4a: 16:e8:f2:46:11:6c:bb:2e:30:47:7b:6b:d7:5d:8d: e6:fd:a3:82:fc:d3:18:a5:c7:af:35:07:b4:3e:c0: 45:ce:0b:e2:42:ab:4d:da:da:d5:70:d5:1c:e2:fc: a1:1a:1e:fb:d8:55:a3:19:ea:0b:a1:a5:ac:4e:ab: a0:83:df:90:77:c4:aa:cb:91:48:06:2a:96:ab:10: f1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5B:28:71:37:BE:EE:B6:C0:8C:11:62:20:62:0C:4B:28:F5:EF:AA X509v3 Authority Key Identifier: keyid:C9:E7:A4:6A:EE:56:95:DE:B0:15:FF:45:BA:60:23:23:A9:3A:A5:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9E7A46AEE5695DEB015FF45BA602323A93AA50E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:86f4::/34 Signature Algorithm: sha256WithRSAEncryption 97:dc:c3:01:13:4f:40:aa:ef:89:34:f6:bc:9d:49:0d:1a:32: f0:3a:98:34:cf:77:d4:71:96:4f:21:ed:fb:70:8a:29:b8:7a: 15:ff:90:2b:40:72:12:66:fd:c0:d4:f2:3c:b3:90:39:73:96: ff:38:79:c7:57:d9:ec:5b:f8:f6:07:64:bb:f9:7f:03:b7:d5: e5:00:47:54:c0:f5:4c:e8:50:a7:f5:7b:24:ef:2a:8b:20:87: 51:b2:f2:81:e7:9f:cb:e3:8f:0c:7e:2e:5e:4b:3d:df:e4:06: dc:71:6d:75:81:b9:bb:fa:47:4c:fe:74:8d:33:05:db:28:7b: 90:c3:1e:81:60:e4:db:0f:44:23:bf:31:72:66:cc:99:77:ec: bf:fa:37:14:b9:95:cd:db:93:19:ba:88:95:a1:72:86:7d:cf: 6e:b1:1b:fc:29:8f:99:15:c3:9c:7f:04:f3:7c:61:1b:ab:fa: bd:9c:90:24:a2:45:fe:3b:a4:ae:68:f0:0d:98:d3:15:49:e2: a2:92:18:ee:be:55:48:0b:01:e1:8a:2a:98:26:ee:93:be:89: 13:d6:c5:63:3d:d4:70:99:ee:e0:c6:e6:3e:1e:8c:ca:d3:3c: e8:51:d6:1b:07:9d:78:ff:88:72:c7:f0:8b:95:d0:19:c2:3d: 49:57:54:b1 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUMOPmMumem5FI4/j2mcWhZI66dp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlFN0E0NkFFRTU2OTVERUIwMTVGRjQ1QkE2MDIzMjNB OTNBQTUwRTAeFw0yNTExMjMwMjU4NTZaFw0yNjExMjIwMzAzNTZaMDMxMTAvBgNV BAMTKEZBNUIyODcxMzdCRUVFQjZDMDhDMTE2MjIwNjIwQzRCMjhGNUVGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkUl593IHM3AAPJS6uJiQR7A3D FQzhnyxd6yswdh0IMz1ESsin5c+C7iQw+D0Ga3tqtJLc/oYlNYePHGdg7J69Uq3V oG9GQXcU8OQkSBTWL6WIIuegIo/xLUSlc+YV5fO5YRa+r35lh6PdJDaF3VmiL0XO YkjWqxBzH876BFsr+2DurE6oR8XhdQWGrnhyB6fsOINs6jv+LWcJE2pkU+ghn0jt BdZL78m5/9MP51WVwzWoShbo8kYRbLsuMEd7a9ddjeb9o4L80xilx681B7Q+wEXO C+JCq03a2tVw1Rzi/KEaHvvYVaMZ6guhpaxOq6CD35B3xKrLkUgGKparEPHdAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU+lsocTe+7rbAjBFiIGIMSyj176owHwYDVR0j BBgwFoAUyeekau5Wld6wFf9FumAjI6k6pQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK UlQvMC9DOUU3QTQ2QUVFNTY5NURFQjAxNUZGNDVCQTYwMjMyM0E5M0FBNTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RTdBNDZBRUU1Njk1REVC MDE1RkY0NUJBNjAyMzIzQTkzQUE1MEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzAv MzIzODMwMzQzYTM4MzY2NjM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMy MzYzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYGKASG9AAwDQYJKoZIhvcNAQELBQADggEBAJfcwwET T0Cq74k09rydSQ0aMvA6mDTPd9Rxlk8h7ftwiim4ehX/kCtAchJm/cDU8jyzkDlz lv84ecdX2exb+PYHZLv5fwO31eUAR1TA9UzoUKf1eyTvKosgh1Gy8oHnn8vjjwx+ Ll5LPd/kBtxxbXWBubv6R0z+dI0zBdsoe5DDHoFg5NsPRCO/MXJmzJl37L/6NxS5 lc3bkxm6iJWhcoZ9z26xG/wpj5kVw5x/BPN8YRur+r2ckCSiRf47pK5o8A2Y0xVJ 4qKSGO6+VUgLAeGKKpgm7pO+iRPWxWM91HCZ7uDG5j4ejMrTPOhR1hsHnXj/iHLH 8IuV0BnCPUlXVLE= -----END CERTIFICATE-----Generated at Mon Dec 8 09:31:10 2025 by rpki-client