This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/323830343a393663383a3a2f33322d313238203d3e20323734333539.roa File: 323830343a393663383a3a2f33322d313238203d3e20323734333539.roa (raw, json) Hash identifier: Ytqo8wa3MR5Sf7KXr1wl+CjQS/odKyL/1MiNLCin5fk= Subject key identifier: A0:22:A8:23:5D:75:80:57:47:4D:DF:C6:69:2C:73:87:AD:86:4C:64 Certificate issuer: /CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F Certificate serial: 575522994C6CDC46BB52997AE0F6245D81A7445C Authority key identifier: 3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/323830343a393663383a3a2f33322d313238203d3e20323734333539.roa Signing time: Mon 24 Nov 2025 18:29:43 +0000 ROA not before: Mon 24 Nov 2025 18:24:43 +0000 ROA not after: Mon 23 Nov 2026 18:29:43 +0000 asID: 274359 IP address blocks: 2804:96c8::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:55:22:99:4c:6c:dc:46:bb:52:99:7a:e0:f6:24:5d:81:a7:44:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F Validity Not Before: Nov 24 18:24:43 2025 GMT Not After : Nov 23 18:29:43 2026 GMT Subject: CN=A022A8235D758057474DDFC6692C7387AD864C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:14:e3:b5:88:5e:1b:7e:4f:ff:e8:bf:5a: 04:39:92:bb:fa:ae:df:1b:be:2d:1d:3b:5f:3f:96: 66:d3:b2:ee:9f:e0:8e:58:8e:68:f3:7b:82:e9:1a: 95:7e:2d:c9:b6:61:84:a4:f2:f2:32:e1:3d:6c:80: c6:f5:cb:4c:46:48:a8:43:6f:af:69:7e:4b:14:1f: 80:8d:ce:17:76:54:60:83:5a:e8:49:7f:50:81:d0: b2:23:8f:c2:25:65:30:60:64:9d:13:2c:21:c0:4b: 67:a7:9f:0f:bb:25:d1:e5:a9:ae:8f:bc:64:2d:3c: 20:02:c5:cc:de:ae:48:42:be:18:e4:7e:e0:ea:19: 00:38:67:47:72:8c:fa:ff:b0:b5:81:3f:a5:68:14: 6a:17:5f:5a:9f:c9:29:38:d9:81:d9:8f:ae:d8:ee: b3:34:0b:3c:68:ce:e2:b1:29:8a:ea:89:f0:99:d8: 49:d4:64:ef:2b:fe:6a:02:1b:8f:b9:6f:04:a0:c7: 62:42:f3:6d:f5:4b:8d:4d:7c:55:c6:ef:73:c0:1f: dd:af:3b:66:a9:e2:0c:16:79:b2:c5:5a:62:3e:19: aa:cd:e4:62:3f:19:df:a4:5c:1d:2c:58:82:29:33: d3:9a:69:31:dc:db:d5:6e:5b:db:a3:6f:ac:fe:01: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:22:A8:23:5D:75:80:57:47:4D:DF:C6:69:2C:73:87:AD:86:4C:64 X509v3 Authority Key Identifier: keyid:3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/323830343a393663383a3a2f33322d313238203d3e20323734333539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:96c8::/32 Signature Algorithm: sha256WithRSAEncryption 9d:3b:02:0d:c9:08:0f:9c:a7:fd:59:96:6f:7f:f3:e9:13:cc: e2:89:6d:ce:00:a4:c7:d7:9f:c0:64:53:3d:50:fe:25:57:1b: 22:f9:12:a4:eb:eb:a6:25:cc:62:de:6c:29:2c:36:cf:b1:5f: 69:fd:e7:ca:8e:e4:ed:ac:ce:ca:62:15:72:b2:2b:61:f1:14: d9:f9:80:1d:e1:8b:94:8f:b0:a4:ad:e3:96:20:e7:9f:a1:a2: 5f:a5:0e:7a:10:e1:b4:6a:51:0f:3d:67:45:84:ce:4d:62:b7: 8d:5a:5c:ba:93:e8:ed:1f:19:18:57:c5:00:f7:bd:14:ff:a0: 86:cd:11:f3:fa:d4:2a:c1:12:29:1e:de:d1:b0:37:1a:f6:79: 0c:63:7d:b6:c1:6b:96:9e:be:e0:e1:5f:ab:e0:7b:1c:90:20: 3e:17:b5:35:01:42:9d:ad:00:d4:04:cb:c2:32:a1:11:48:87: d9:e1:d5:72:34:6b:f4:3d:e6:36:58:45:4c:30:a4:a0:a1:d2: 4e:46:f5:37:46:fb:79:69:0e:54:bd:6d:8b:c1:18:a3:37:81: 9d:21:37:83:dd:f4:e0:6b:81:14:23:3d:1e:ca:c0:81:91:6e: 61:22:86:59:59:2c:df:63:92:65:0a:aa:28:70:40:71:b2:82: 51:4f:17:23 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUV1UimUxs3Ea7Upl64PYkXYGnRFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E5RUNFMDFDQUI5QzMwNDg0MjIyNUYyNTU0Q0Y4NEY3 OTEwRjgzRjAeFw0yNTExMjQxODI0NDNaFw0yNjExMjMxODI5NDNaMDMxMTAvBgNV BAMTKEEwMjJBODIzNUQ3NTgwNTc0NzREREZDNjY5MkM3Mzg3QUQ4NjRDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDxTjtYheG35P/+i/WgQ5krv6 rt8bvi0dO18/lmbTsu6f4I5Yjmjze4LpGpV+Lcm2YYSk8vIy4T1sgMb1y0xGSKhD b69pfksUH4CNzhd2VGCDWuhJf1CB0LIjj8IlZTBgZJ0TLCHAS2ennw+7JdHlqa6P vGQtPCACxczerkhCvhjkfuDqGQA4Z0dyjPr/sLWBP6VoFGoXX1qfySk42YHZj67Y 7rM0CzxozuKxKYrqifCZ2EnUZO8r/moCG4+5bwSgx2JC8231S41NfFXG73PAH92v O2ap4gwWebLFWmI+GarN5GI/Gd+kXB0sWIIpM9OaaTHc29VuW9ujb6z+AbyNAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUoCKoI111gFdHTd/GaSxzh62GTGQwHwYDVR0j BBgwFoAUOp7OAcq5wwSEIiXyVUz4T3kQ+D8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1Jt WWEvMC8zQTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBOUVDRTAxQ0FCOUMzMDQ4 NDIyMjVGMjU1NENGODRGNzkxMEY4M0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRiVXpLZW1maks4NFI1TWkyWDNUSDlYdGRNTHBQZFdnNUdpd3duaEtSbVlhLzAv MzIzODMwMzQzYTM5MzY2MzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzQzMzM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBJbIMA0GCSqGSIb3DQEBCwUAA4IBAQCdOwIN yQgPnKf9WZZvf/PpE8ziiW3OAKTH15/AZFM9UP4lVxsi+RKk6+umJcxi3mwpLDbP sV9p/efKjuTtrM7KYhVysith8RTZ+YAd4YuUj7CkreOWIOefoaJfpQ56EOG0alEP PWdFhM5NYreNWly6k+jtHxkYV8UA970U/6CGzRHz+tQqwRIpHt7RsDca9nkMY322 wWuWnr7g4V+r4HsckCA+F7U1AUKdrQDUBMvCMqERSIfZ4dVyNGv0PeY2WEVMMKSg odJORvU3Rvt5aQ5UvW2LwRijN4GdITeD3fTga4EUIz0eysCBkW5hIoZZWSzfY5Jl CqoocEBxsoJRTxcj -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:33 2025 by rpki-client