This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa File: 323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (raw, json) Hash identifier: qs+i4/FHT6E8OpWubLPRLNoqjZKQ0j2e6KGbpWPi0hA= Subject key identifier: 1D:A2:6B:F5:1F:63:1C:77:63:7A:AD:A5:D3:AD:E1:F3:AC:AC:67:A0 Certificate issuer: /CN=2A2D171F50E53E6487FE9AC612997F616E111F59 Certificate serial: 5C2F37D586EB9F76DA2BD666E4BA7C0B826BE6DB Authority key identifier: 2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa Signing time: Mon 10 Nov 2025 19:10:43 +0000 ROA not before: Mon 10 Nov 2025 19:05:43 +0000 ROA not after: Mon 09 Nov 2026 19:10:43 +0000 asID: 271484 IP address blocks: 2804:7c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 14:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2f:37:d5:86:eb:9f:76:da:2b:d6:66:e4:ba:7c:0b:82:6b:e6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2D171F50E53E6487FE9AC612997F616E111F59 Validity Not Before: Nov 10 19:05:43 2025 GMT Not After : Nov 9 19:10:43 2026 GMT Subject: CN=1DA26BF51F631C77637AADA5D3ADE1F3ACAC67A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:42:cd:c6:dd:d0:aa:eb:74:12:10:de:ea:e6: e1:25:4d:da:f5:d3:9e:4a:a2:c2:77:df:72:86:15: 2b:e2:06:01:a9:ff:04:6d:a3:33:32:12:e8:2e:02: 05:9d:46:16:d9:e7:3a:af:4d:67:b6:b4:35:f0:ac: 01:86:d7:f1:05:69:e9:b2:5b:bf:67:e0:4b:1f:47: e0:09:60:9e:d7:dd:cf:db:af:50:bd:2b:44:3b:95: 10:87:c7:da:65:23:0c:a5:12:0e:3f:00:7d:91:5b: 64:2c:7c:bb:a6:fc:2a:e3:cb:3e:1c:20:89:50:b4: e2:ae:ed:9c:2d:68:53:da:12:71:c6:f1:24:14:66: 4f:df:0a:97:d6:56:df:00:9e:01:7f:94:22:1b:e6: 9c:a7:19:1a:07:4b:9d:71:6e:31:2e:84:02:4f:dd: 10:49:4e:61:e0:88:27:4d:e1:66:de:ee:bf:97:44: 89:80:f6:7d:1e:a2:06:ad:58:4a:95:31:cd:76:df: 15:a3:6b:8c:bf:52:1d:40:ae:a7:ab:3c:d8:27:aa: 9b:23:af:95:b2:93:8d:1d:b4:d7:78:cf:84:0d:3c: 04:50:b5:8b:21:a2:d3:5b:f5:ca:58:9b:87:95:32: d1:86:77:43:1e:c3:01:66:d7:a3:3b:4f:5b:b6:24: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A2:6B:F5:1F:63:1C:77:63:7A:AD:A5:D3:AD:E1:F3:AC:AC:67:A0 X509v3 Authority Key Identifier: keyid:2A:2D:17:1F:50:E5:3E:64:87:FE:9A:C6:12:99:7F:61:6E:11:1F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/2A2D171F50E53E6487FE9AC612997F616E111F59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2D171F50E53E6487FE9AC612997F616E111F59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7c40::/32 Signature Algorithm: sha256WithRSAEncryption 25:2e:1b:c7:c7:35:94:39:cf:a9:8a:65:2d:bd:ee:b3:dc:21: 71:24:c2:57:ef:c3:9e:e6:97:35:b5:7e:1f:43:22:80:5d:54: 8b:af:72:6c:61:13:1b:de:fd:7e:3d:1a:f0:23:64:7f:01:3c: e3:82:8e:5d:e2:8c:ba:ba:1d:d6:df:c4:ca:de:01:6c:2c:6c: b0:25:e0:40:a0:f8:61:5e:df:e7:8f:90:3f:8e:ac:0a:fd:90: f9:e3:65:b3:77:0f:e8:7a:f6:df:a4:17:11:88:c7:d2:5e:f5: 3a:6f:03:fc:d3:ac:f3:7f:e3:0c:26:5f:b2:ba:44:56:e2:a7: 52:01:2b:af:fa:bd:d0:7e:35:37:a3:be:62:21:b2:30:00:8a: 0f:ef:d3:34:53:21:b6:9f:b9:bd:85:c3:02:7d:0a:7f:52:eb: 98:f9:28:4f:28:4b:6b:db:7a:2c:c5:80:5e:45:5e:5a:38:c3: c1:4a:5e:8c:f7:07:c1:bf:e5:9d:1f:b7:fe:e0:d1:47:98:50: 4d:17:a4:26:12:7a:33:bd:22:a5:c6:88:d3:f0:77:2e:f3:42: b4:c7:56:92:c4:80:10:e7:d1:9a:de:15:3c:49:54:e4:46:8a: e3:f7:e3:5d:13:e2:5e:35:7b:1d:5c:6e:1f:ea:c2:57:a3:0c: b4:ad:85:c0 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUXC831Ybrn3baK9Zm5Lp8C4Jr5tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRDE3MUY1MEU1M0U2NDg3RkU5QUM2MTI5OTdGNjE2 RTExMUY1OTAeFw0yNTExMTAxOTA1NDNaFw0yNjExMDkxOTEwNDNaMDMxMTAvBgNV BAMTKDFEQTI2QkY1MUY2MzFDNzc2MzdBQURBNUQzQURFMUYzQUNBQzY3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbQs3G3dCq63QSEN7q5uElTdr1 055KosJ333KGFSviBgGp/wRtozMyEuguAgWdRhbZ5zqvTWe2tDXwrAGG1/EFaemy W79n4EsfR+AJYJ7X3c/br1C9K0Q7lRCHx9plIwylEg4/AH2RW2QsfLum/Crjyz4c IIlQtOKu7ZwtaFPaEnHG8SQUZk/fCpfWVt8AngF/lCIb5pynGRoHS51xbjEuhAJP 3RBJTmHgiCdN4Wbe7r+XRImA9n0eogatWEqVMc123xWja4y/Uh1ArqerPNgnqpsj r5Wyk40dtNd4z4QNPARQtYshotNb9cpYm4eVMtGGd0MewwFm16M7T1u2JHVlAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUHaJr9R9jHHdjeq2l063h86ysZ6AwHwYDVR0j BBgwFoAUKi0XH1DlPmSH/prGEpl/YW4RH1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv azQvMC8yQTJEMTcxRjUwRTUzRTY0ODdGRTlBQzYxMjk5N0Y2MTZFMTExRjU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMkQxNzFGNTBFNTNFNjQ4 N0ZFOUFDNjEyOTk3RjYxNkUxMTFGNTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv MzIzODMwMzQzYTM3NjMzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx MzQzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAR8QDANBgkqhkiG9w0BAQsFAAOCAQEAJS4bx8c1 lDnPqYplLb3us9whcSTCV+/DnuaXNbV+H0MigF1Ui69ybGETG979fj0a8CNkfwE8 44KOXeKMurod1t/Eyt4BbCxssCXgQKD4YV7f54+QP46sCv2Q+eNls3cP6Hr236QX EYjH0l71Om8D/NOs83/jDCZfsrpEVuKnUgErr/q90H41N6O+YiGyMACKD+/TNFMh tp+5vYXDAn0Kf1LrmPkoTyhLa9t6LMWAXkVeWjjDwUpejPcHwb/lnR+3/uDRR5hQ TRekJhJ6M70ipcaI0/B3LvNCtMdWksSAEOfRmt4VPElU5EaK4/fjXRPiXjV7HVxu H+rCV6MMtK2FwA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:43:39 2025 by rpki-client