This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa File: 323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa (raw, json) Hash identifier: cpsPGI7l6vxvLCLdkOm1O8sf8Puieh3TVysmjZPKnk0= Subject key identifier: BE:61:E3:F5:7B:0E:FA:46:24:BE:6B:B8:71:B0:9A:96:A8:4B:AD:C0 Certificate issuer: /CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB Certificate serial: 7D4D4BE95CEC19AC4AFD990881107E95C586ECF8 Authority key identifier: 89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa Signing time: Wed 26 Nov 2025 15:54:45 +0000 ROA not before: Wed 26 Nov 2025 15:49:45 +0000 ROA not after: Wed 25 Nov 2026 15:54:45 +0000 asID: 264936 IP address blocks: 2804:3034:120::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 09:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4d:4b:e9:5c:ec:19:ac:4a:fd:99:08:81:10:7e:95:c5:86:ec:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB Validity Not Before: Nov 26 15:49:45 2025 GMT Not After : Nov 25 15:54:45 2026 GMT Subject: CN=BE61E3F57B0EFA4624BE6BB871B09A96A84BADC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:5b:22:91:25:4e:5e:da:57:7d:cb:04:3e: ab:f9:b0:dc:ec:11:d2:70:31:f3:c0:ee:a3:3c:85: 16:68:fc:e3:07:28:3e:53:08:7c:ff:bf:d1:1d:c6: 2a:93:5e:7c:46:68:3b:ee:a4:56:a9:ce:5f:59:63: 81:51:d8:b9:1a:ed:10:f8:d1:c9:e3:23:4c:8a:40: 5f:e7:52:d8:92:44:f2:b4:29:78:ea:ed:1d:f2:c6: fa:79:db:80:02:29:5b:ae:b2:f1:68:35:2c:15:3b: a1:ed:47:69:20:a9:2b:e7:80:c5:5a:b8:2a:5d:ef: 8e:f1:8e:71:e4:38:8f:da:8f:44:f2:42:7c:0c:ee: 24:7a:07:a9:55:63:33:cc:06:10:fc:df:7d:fb:36: 50:4a:26:f2:5a:d6:fa:5a:fe:a5:ca:3b:bb:1c:28: 6d:81:e1:17:f8:6b:da:19:72:a5:40:38:a7:ca:9c: 2d:a8:c5:64:88:1a:97:fa:c2:3f:fc:42:7b:bf:12: b2:ee:7b:cb:8c:c4:1f:58:94:c8:86:c7:0e:e6:c9: 9d:a1:83:39:4a:77:25:bf:49:b9:ab:36:03:7d:9f: 5f:48:64:9e:87:03:7d:9c:b8:0c:1d:e5:fb:9b:33: 7e:dd:6f:4b:4c:aa:c3:e0:c7:bf:ab:9b:f1:74:40: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:61:E3:F5:7B:0E:FA:46:24:BE:6B:B8:71:B0:9A:96:A8:4B:AD:C0 X509v3 Authority Key Identifier: keyid:89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3034:120::/43 Signature Algorithm: sha256WithRSAEncryption 4c:64:86:72:cf:6d:cc:61:d8:2e:55:6b:74:45:cb:94:81:db: 00:fe:d9:61:df:c4:fb:ab:ba:08:72:d6:b1:9d:4a:d3:a2:2e: 11:a6:13:c0:af:2d:b7:80:65:72:36:39:38:c8:4e:ec:f4:2e: e0:10:0a:d6:fa:53:6d:da:60:51:37:f7:f7:23:7c:db:ad:66: f5:f9:53:64:cc:56:23:62:78:51:65:40:8e:2a:f5:cd:fc:95: d3:bc:4d:f4:cf:f9:bd:98:f3:2f:12:f3:fd:71:0c:69:5c:be: 95:6e:a0:dd:65:c0:b0:81:a7:99:34:52:ed:2e:e2:fa:d2:4c: c5:36:b2:a4:15:0f:9b:25:35:d3:82:89:63:30:0e:77:6d:75: 99:7f:df:46:7b:f4:9e:21:be:c4:5a:4c:4a:5e:71:23:c1:a8: e0:2f:b0:19:b3:93:e0:63:02:1b:62:bd:89:65:37:5b:da:a0: 71:35:ad:e2:a5:3e:00:c8:75:d9:28:1c:a7:35:44:2f:bf:b3: e8:a9:17:8c:e1:c2:3c:32:d7:2a:12:97:d3:0c:bb:84:0f:c7: 19:d7:73:03:27:a1:24:e2:fa:10:29:dd:e3:80:f7:11:fc:b2: ba:19:09:08:ee:4c:59:24:29:60:3f:a1:c8:23:3b:a7:53:69: fd:25:e4:31 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUfU1L6VzsGaxK/ZkIgRB+lcWG7PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlDMkQ3RjA3RkYxQzNCQUQ0NDE1Mjg1MjA1NzJFQjMz Qzc2M0NFQjAeFw0yNTExMjYxNTQ5NDVaFw0yNjExMjUxNTU0NDVaMDMxMTAvBgNV BAMTKEJFNjFFM0Y1N0IwRUZBNDYyNEJFNkJCODcxQjA5QTk2QTg0QkFEQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHFsikSVOXtpXfcsEPqv5sNzs EdJwMfPA7qM8hRZo/OMHKD5TCHz/v9EdxiqTXnxGaDvupFapzl9ZY4FR2Lka7RD4 0cnjI0yKQF/nUtiSRPK0KXjq7R3yxvp524ACKVuusvFoNSwVO6HtR2kgqSvngMVa uCpd747xjnHkOI/aj0TyQnwM7iR6B6lVYzPMBhD83337NlBKJvJa1vpa/qXKO7sc KG2B4Rf4a9oZcqVAOKfKnC2oxWSIGpf6wj/8Qnu/ErLue8uMxB9YlMiGxw7myZ2h gzlKdyW/SbmrNgN9n19IZJ6HA32cuAwd5fubM37db0tMqsPgx7+rm/F0QE5nAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUvmHj9XsO+kYkvmu4cbCalqhLrcAwHwYDVR0j BBgwFoAUicLX8H/xw7rUQVKFIFcuszx2POswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX UG4vMC84OUMyRDdGMDdGRjFDM0JBRDQ0MTUyODUyMDU3MkVCMzNDNzYzQ0VCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QzJEN0YwN0ZGMUMzQkFE NDQxNTI4NTIwNTcyRUIzM0M3NjNDRUIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv MzIzODMwMzQzYTMzMzAzMzM0M2EzMTMyMzAzYTNhMmYzNDMzMmQzNDMzMjAzZDNl MjAzMjM2MzQzOTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUoBDA0ASAwDQYJKoZIhvcNAQELBQAD ggEBAExkhnLPbcxh2C5Va3RFy5SB2wD+2WHfxPurughy1rGdStOiLhGmE8CvLbeA ZXI2OTjITuz0LuAQCtb6U23aYFE39/cjfNutZvX5U2TMViNieFFlQI4q9c38ldO8 TfTP+b2Y8y8S8/1xDGlcvpVuoN1lwLCBp5k0Uu0u4vrSTMU2sqQVD5slNdOCiWMw DndtdZl/30Z79J4hvsRaTEpecSPBqOAvsBmzk+BjAhtivYllN1vaoHE1reKlPgDI ddkoHKc1RC+/s+ipF4zhwjwy1yoSl9MMu4QPxxnXcwMnoSTi+hAp3eOA9xH8sroZ CQjuTFkkKWA/ocgjO6dTaf0l5DE= -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:26 2025 by rpki-client