This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/323830343a6161383a3a2f33322d313238203d3e203532393033.roa File: 323830343a6161383a3a2f33322d313238203d3e203532393033.roa (raw, json) Hash identifier: JFLMhL+dK5DQlsxE/wPNHbPgo0R3J7/zNOp2ZaVabJs= Subject key identifier: 5F:6D:10:36:53:B1:2F:9E:8D:FF:F6:AC:D5:43:8D:21:A2:50:E4:17 Certificate issuer: /CN=8F3C4AF1B958317B34B3D4DCE850A479E946E6A4 Certificate serial: 2E4508CCA9DF9E5951737262789E3DB4DF0C101F Authority key identifier: 8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/323830343a6161383a3a2f33322d313238203d3e203532393033.roa Signing time: Mon 10 Nov 2025 11:47:13 +0000 ROA not before: Mon 10 Nov 2025 11:42:13 +0000 ROA not after: Mon 09 Nov 2026 11:47:13 +0000 asID: 52903 IP address blocks: 2804:aa8::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 03:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:45:08:cc:a9:df:9e:59:51:73:72:62:78:9e:3d:b4:df:0c:10:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F3C4AF1B958317B34B3D4DCE850A479E946E6A4 Validity Not Before: Nov 10 11:42:13 2025 GMT Not After : Nov 9 11:47:13 2026 GMT Subject: CN=5F6D103653B12F9E8DFFF6ACD5438D21A250E417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:7b:7c:5a:10:0d:4c:c0:40:7d:0e:a9:a9: 75:56:0e:33:53:bd:4d:7e:46:00:3e:bf:ca:10:14: 82:f1:b9:88:c5:3f:f2:62:03:1e:a2:2a:b6:0a:c7: 3c:13:85:10:9a:91:1a:f2:09:c9:a7:6b:32:ea:ec: 5a:6d:fb:1c:9c:93:bc:c7:45:4b:af:f2:29:61:92: 72:8d:57:32:0e:06:bc:85:8f:67:4b:be:64:51:7b: 82:d6:41:e4:42:17:6b:33:51:04:e7:57:1e:80:91: 0c:0d:44:d3:2f:ef:b6:19:e6:94:a6:b0:e0:ae:5f: 6e:2e:b6:46:76:ed:83:03:91:b3:a1:9a:c6:5a:4b: 63:bd:da:9f:2a:2c:e5:1d:41:75:cf:4c:f8:cb:19: de:99:af:d0:65:08:3c:df:95:8c:82:ae:b1:81:6b: 05:4a:22:4a:d6:c4:eb:c3:8b:23:47:c4:8b:41:f6: bb:53:ec:6e:f6:ef:4f:f6:53:8f:9a:4e:bf:f4:3d: 5b:f9:36:c6:ac:72:61:45:36:38:57:4b:e9:f5:1f: a8:b2:4c:92:ac:bf:96:d3:71:fd:59:98:45:8d:80: 8b:5c:18:d1:4e:72:be:a2:24:e6:ab:10:ed:83:9a: ff:0e:21:ab:a2:2f:b9:d6:02:3c:9b:3c:05:ac:3b: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6D:10:36:53:B1:2F:9E:8D:FF:F6:AC:D5:43:8D:21:A2:50:E4:17 X509v3 Authority Key Identifier: keyid:8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/323830343a6161383a3a2f33322d313238203d3e203532393033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:aa8::/32 Signature Algorithm: sha256WithRSAEncryption 98:11:65:58:b0:d0:b9:09:da:e6:6b:77:cd:47:bf:47:e4:ac: 60:3c:1e:26:fc:4e:e8:25:a5:69:b1:fb:b2:30:ab:7a:bc:8a: 17:98:1e:a2:8b:56:f2:01:d5:a3:5f:4c:65:f3:f4:0b:ae:69: bf:06:a9:c0:15:e4:f9:fc:ce:91:14:ce:6f:34:3a:df:73:06: b7:ff:45:be:3e:a5:4c:a3:bd:59:8a:f8:8c:18:c9:4b:d8:a7: e5:a3:8c:92:dc:15:6a:58:61:0a:c9:58:2e:31:6d:f2:c5:62: e9:88:23:3a:12:ba:62:17:00:92:e0:b8:de:85:8f:5f:88:f9: be:cf:c2:73:4a:4b:2c:32:04:d0:0d:e6:fd:dd:07:85:b5:31: 85:3c:85:5b:22:9f:ec:a9:86:59:39:5c:d9:95:9e:23:a3:94: 88:85:24:95:cd:14:c6:b3:d4:09:e5:59:13:f2:7f:82:ee:a7: 88:75:1d:4e:e5:56:14:50:43:fc:f3:70:89:5f:cf:af:75:c4: 5e:8e:be:63:98:9e:a4:ae:53:00:50:42:88:02:14:1b:d1:50: 72:95:07:4d:a3:f1:42:8c:f3:24:15:43:c0:ac:d5:5f:ee:ef: b9:56:d1:85:b1:f3:16:ec:88:57:4f:af:32:8e:51:ea:30:b2: 22:14:04:ff -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIULkUIzKnfnllRc3JieJ49tN8MEB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYzQzRBRjFCOTU4MzE3QjM0QjNENERDRTg1MEE0NzlF OTQ2RTZBNDAeFw0yNTExMTAxMTQyMTNaFw0yNjExMDkxMTQ3MTNaMDMxMTAvBgNV BAMTKDVGNkQxMDM2NTNCMTJGOUU4REZGRjZBQ0Q1NDM4RDIxQTI1MEU0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkg3t8WhANTMBAfQ6pqXVWDjNT vU1+RgA+v8oQFILxuYjFP/JiAx6iKrYKxzwThRCakRryCcmnazLq7Fpt+xyck7zH RUuv8ilhknKNVzIOBryFj2dLvmRRe4LWQeRCF2szUQTnVx6AkQwNRNMv77YZ5pSm sOCuX24utkZ27YMDkbOhmsZaS2O92p8qLOUdQXXPTPjLGd6Zr9BlCDzflYyCrrGB awVKIkrWxOvDiyNHxItB9rtT7G7270/2U4+aTr/0PVv5NsascmFFNjhXS+n1H6iy TJKsv5bTcf1ZmEWNgItcGNFOcr6iJOarEO2Dmv8OIauiL7nWAjybPAWsO6wNAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUX20QNlOxL56N//as1UONIaJQ5BcwHwYDVR0j BBgwFoAUjzxK8blYMXs0s9Tc6FCkeelG5qQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEE1ZDk3cG9zWEwyOUNidVN0dlZ2M1hBQ2ZSMmM3clhiZERUQ1hpQ0VS cVgvMC84RjNDNEFGMUI5NTgzMTdCMzRCM0Q0RENFODUwQTQ3OUU5NDZFNkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGM0M0QUYxQjk1ODMxN0Iz NEIzRDREQ0U4NTBBNDc5RTk0NkU2QTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRBNWQ5N3Bvc1hMMjlDYnVTdHZWdjNYQUNmUjJjN3JYYmREVENYaUNFUnFYLzAv MzIzODMwMzQzYTYxNjEzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM5 MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgECqgwDQYJKoZIhvcNAQELBQADggEBAJgRZViw0LkJ 2uZrd81Hv0fkrGA8Hib8TuglpWmx+7Iwq3q8iheYHqKLVvIB1aNfTGXz9Auuab8G qcAV5Pn8zpEUzm80Ot9zBrf/Rb4+pUyjvVmK+IwYyUvYp+WjjJLcFWpYYQrJWC4x bfLFYumIIzoSumIXAJLguN6Fj1+I+b7PwnNKSywyBNAN5v3dB4W1MYU8hVsin+yp hlk5XNmVniOjlIiFJJXNFMaz1AnlWRPyf4Lup4h1HU7lVhRQQ/zzcIlfz691xF6O vmOYnqSuUwBQQogCFBvRUHKVB02j8UKM8yQVQ8Cs1V/u77lW0YWx8xbsiFdPrzKO UeowsiIUBP8= -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:47 2025 by rpki-client