This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a3a2f33322d313238203d3e20323636313531.roa File: 323830343a336237383a3a2f33322d313238203d3e20323636313531.roa (raw, json) Hash identifier: QLb7skkEmJQF17WGWiLpN5j3LMyzuGsNwQnP4qVNzRQ= Subject key identifier: 43:BB:4D:DD:CA:89:78:19:30:FB:FE:10:FA:2D:54:10:0A:63:D3:68 Certificate issuer: /CN=43AAB70BF5D486443B357EA3923B581F0075D23A Certificate serial: 6CD67435D65F25FBE21DF82CA15C268F6FD0686E Authority key identifier: 43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a3a2f33322d313238203d3e20323636313531.roa Signing time: Fri 28 Nov 2025 00:26:07 +0000 ROA not before: Fri 28 Nov 2025 00:21:07 +0000 ROA not after: Fri 27 Nov 2026 00:26:07 +0000 asID: 266151 IP address blocks: 2804:3b78::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d6:74:35:d6:5f:25:fb:e2:1d:f8:2c:a1:5c:26:8f:6f:d0:68:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AAB70BF5D486443B357EA3923B581F0075D23A Validity Not Before: Nov 28 00:21:07 2025 GMT Not After : Nov 27 00:26:07 2026 GMT Subject: CN=43BB4DDDCA89781930FBFE10FA2D54100A63D368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:72:ce:94:8e:18:74:98:40:40:6a:80:b3: 1b:f9:5b:3f:ee:47:71:1e:c1:d6:a5:b3:54:0c:8b: 80:38:84:95:00:a7:cf:dd:e7:ca:c4:ce:49:b9:fa: a4:e3:24:09:e5:aa:cb:70:5c:95:4e:a2:9a:ca:ca: 57:89:1a:ba:81:28:06:b1:21:b4:f4:5c:e4:93:63: 09:46:d3:30:14:33:2f:34:4c:47:c2:83:52:19:27: 3b:ac:6a:56:35:c2:ec:46:29:61:b4:5d:84:61:49: 20:c4:8d:aa:db:53:0f:69:7b:3c:46:50:66:95:ac: 41:a6:5f:ea:a2:8c:48:87:4c:1b:28:d6:42:94:f3: 1f:ee:f1:e2:da:c0:33:7d:8b:36:67:fe:fc:b5:9b: a8:9a:8a:fe:8b:f3:ae:f2:f5:11:e0:77:91:87:45: f0:d0:de:c7:34:4a:c7:be:27:93:a9:9f:aa:da:aa: 31:df:42:d7:fa:48:27:ae:47:0c:72:d6:2c:a4:86: b2:5a:0f:dc:fd:f3:76:0b:d3:1a:bb:66:72:24:4a: b2:62:bc:24:26:61:31:58:72:3e:fb:00:8e:ce:b3: 39:82:42:20:d4:f1:d7:f2:ed:ab:e8:7e:98:5b:7a: b6:7c:9b:eb:23:0e:ee:bd:2e:68:25:da:95:2a:8a: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BB:4D:DD:CA:89:78:19:30:FB:FE:10:FA:2D:54:10:0A:63:D3:68 X509v3 Authority Key Identifier: keyid:43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a3a2f33322d313238203d3e20323636313531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3b78::/32 Signature Algorithm: sha256WithRSAEncryption 81:33:3c:30:d2:d1:c3:53:6b:07:d9:35:d1:19:7e:0f:fc:9b: ba:d1:53:56:0d:09:0a:fa:a6:63:26:89:6d:3c:6f:30:4f:37: bf:31:53:fe:39:cc:4c:c6:c7:0d:4f:6a:75:17:03:52:a3:14: af:a3:a5:fc:11:9a:6c:24:f4:d0:98:1e:a9:4b:96:de:d1:04: ec:c4:84:03:49:7b:c9:ce:d5:29:1a:53:19:e0:21:43:b3:f8: 0b:6e:91:c4:9c:f9:75:8c:7b:41:5b:22:7c:08:9d:7f:76:76: b6:e7:ba:d1:c2:f2:09:39:01:13:a4:19:b1:10:a2:e7:88:df: 04:be:27:32:c2:25:08:14:b7:c9:b9:bd:84:f5:cd:b4:14:88: b9:61:9c:2a:29:8b:ac:43:0f:b0:f7:e1:f0:0c:4f:50:a2:40: d9:c3:20:3d:e7:0e:2f:b7:e6:c9:a7:12:6a:0c:81:a0:c9:fc: 3c:18:8d:07:55:76:35:f8:33:85:a8:79:10:69:ec:36:de:89: 67:05:1d:6d:30:b6:ce:c7:e9:fb:84:6e:75:d5:9b:7f:18:ce: b5:2e:b9:d6:94:fc:2b:5f:8e:5b:1d:06:88:2f:43:90:c1:35: 8b:af:ca:f8:92:a0:b1:47:b6:a5:aa:1b:ce:e1:22:87:d9:49: 7f:f8:7d:f6 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUbNZ0NdZfJfviHfgsoVwmj2/QaG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBQUI3MEJGNUQ0ODY0NDNCMzU3RUEzOTIzQjU4MUYw MDc1RDIzQTAeFw0yNTExMjgwMDIxMDdaFw0yNjExMjcwMDI2MDdaMDMxMTAvBgNV BAMTKDQzQkI0REREQ0E4OTc4MTkzMEZCRkUxMEZBMkQ1NDEwMEE2M0QzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtv3LOlI4YdJhAQGqAsxv5Wz/u R3Eewdals1QMi4A4hJUAp8/d58rEzkm5+qTjJAnlqstwXJVOoprKyleJGrqBKAax IbT0XOSTYwlG0zAUMy80TEfCg1IZJzusalY1wuxGKWG0XYRhSSDEjarbUw9pezxG UGaVrEGmX+qijEiHTBso1kKU8x/u8eLawDN9izZn/vy1m6iaiv6L867y9RHgd5GH RfDQ3sc0Sse+J5Opn6raqjHfQtf6SCeuRwxy1iykhrJaD9z983YL0xq7ZnIkSrJi vCQmYTFYcj77AI7OszmCQiDU8dfy7avofphberZ8m+sjDu69Lmgl2pUqivhZAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUQ7tN3cqJeBkw+/4Q+i1UEApj02gwHwYDVR0j BBgwFoAUQ6q3C/XUhkQ7NX6jkjtYHwB10jowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEtLbmNTc1Fmb2s0c0pwZEhOd1hZdmhENmFqYkhDQ3F5djNlNG5GV242 S2EvMC80M0FBQjcwQkY1RDQ4NjQ0M0IzNTdFQTM5MjNCNTgxRjAwNzVEMjNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQUFCNzBCRjVENDg2NDQz QjM1N0VBMzkyM0I1ODFGMDA3NUQyM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRLS25jU3NRZm9rNHNKcGRITndYWXZoRDZhamJIQ0NxeXYzZTRuRlduNkthLzAv MzIzODMwMzQzYTMzNjIzNzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzYzMTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBDt4MA0GCSqGSIb3DQEBCwUAA4IBAQCBMzww 0tHDU2sH2TXRGX4P/Ju60VNWDQkK+qZjJoltPG8wTze/MVP+OcxMxscNT2p1FwNS oxSvo6X8EZpsJPTQmB6pS5be0QTsxIQDSXvJztUpGlMZ4CFDs/gLbpHEnPl1jHtB WyJ8CJ1/dna257rRwvIJOQETpBmxEKLniN8EvicywiUIFLfJub2E9c20FIi5YZwq KYusQw+w9+HwDE9QokDZwyA95w4vt+bJpxJqDIGgyfw8GI0HVXY1+DOFqHkQaew2 3olnBR1tMLbOx+n7hG511Zt/GM61LrnWlPwrX45bHQaIL0OQwTWLr8r4kqCxR7al qhvO4SKH2Ul/+H32 -----END CERTIFICATE-----Generated at Sat Dec 6 22:32:08 2025 by rpki-client