This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a3a2f33322d3438203d3e20323632383636.roa File: 323830343a356562383a3a2f33322d3438203d3e20323632383636.roa (raw, json) Hash identifier: 5E0Ifwta81LchCt92H2rxh4tPOU70g5Au1TMHbfMgYU= Subject key identifier: B2:89:CB:EB:15:FE:05:92:85:26:61:B3:A2:28:02:01:3F:36:DE:1B Certificate issuer: /CN=A812952D65CD2E97C19E7D7A7880F72BC1E0F338 Certificate serial: 0A854A113F9AE36FF929165C792FB983623568CA Authority key identifier: A8:12:95:2D:65:CD:2E:97:C1:9E:7D:7A:78:80:F7:2B:C1:E0:F3:38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer Subject info access: rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a3a2f33322d3438203d3e20323632383636.roa Signing time: Wed 03 Dec 2025 11:22:44 +0000 ROA not before: Wed 03 Dec 2025 11:17:44 +0000 ROA not after: Wed 02 Dec 2026 11:22:44 +0000 asID: 262866 IP address blocks: 2804:5eb8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:85:4a:11:3f:9a:e3:6f:f9:29:16:5c:79:2f:b9:83:62:35:68:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A812952D65CD2E97C19E7D7A7880F72BC1E0F338 Validity Not Before: Dec 3 11:17:44 2025 GMT Not After : Dec 2 11:22:44 2026 GMT Subject: CN=B289CBEB15FE0592852661B3A22802013F36DE1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:b3:17:8d:26:6e:55:b7:ef:ad:ad:58:63: f0:dc:f5:1d:ce:e4:4e:3e:4a:8c:66:25:de:a8:e3: 0a:6f:76:54:86:55:aa:95:6b:6b:fe:d8:7e:9d:e7: 76:d1:3d:f1:a7:ce:fd:6e:fe:3f:fd:c0:5f:4c:39: f7:9a:94:9d:07:82:cd:08:12:e5:f5:b9:d1:bb:6f: b6:7f:e5:4e:97:ee:ff:c9:bd:c1:9c:ad:83:08:cd: 25:87:fe:49:d9:61:ad:7a:fd:53:97:d8:4d:29:fe: 55:65:e0:c0:95:3a:39:a6:dc:7f:ad:7b:5c:90:48: 69:47:ff:94:b4:51:bf:00:30:de:a1:b5:bf:16:86: d6:ec:6b:36:28:6f:ae:67:ff:a8:6a:b7:33:9c:15: 0f:4c:8b:df:62:cb:dc:8c:ee:63:61:d6:ba:88:e9: bf:24:bc:44:20:d1:bb:33:2f:40:7e:13:da:f5:11: 1f:ef:58:83:86:8d:71:22:5b:ab:7a:36:84:31:80: 8a:b5:ca:e2:49:94:8d:df:c3:75:89:9f:cc:a3:77: c6:13:68:35:06:e5:19:ab:13:d4:9e:b4:07:3b:71: bc:75:a1:2d:01:26:22:3f:54:80:b5:9c:5f:74:62: 21:c6:7b:9d:03:01:37:31:80:3c:2a:da:8f:29:7e: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:89:CB:EB:15:FE:05:92:85:26:61:B3:A2:28:02:01:3F:36:DE:1B X509v3 Authority Key Identifier: keyid:A8:12:95:2D:65:CD:2E:97:C1:9E:7D:7A:78:80:F7:2B:C1:E0:F3:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/323830343a356562383a3a2f33322d3438203d3e20323632383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5eb8::/32 Signature Algorithm: sha256WithRSAEncryption 26:b8:d7:60:bf:9e:9e:c3:8e:41:de:53:f9:4f:b8:b4:bf:28: 44:f3:3d:c2:4e:52:66:14:76:d7:05:7a:00:c1:b2:11:7d:21: 2b:e3:63:9d:e4:1c:22:18:68:ba:d1:28:ae:1a:26:b7:4a:5b: ff:b3:3e:99:11:0a:94:84:b4:2d:57:16:5e:49:8b:fa:b6:77: 89:d9:0a:9b:70:17:f3:a4:65:fc:19:cf:48:20:5a:22:8a:6c: 01:26:ce:6b:97:d5:4f:fe:df:8e:6f:bc:92:43:23:92:af:f6: 45:06:c3:4d:6a:5f:41:08:c0:f9:d2:13:7b:1f:fc:d9:09:77: 36:b1:88:ea:68:e3:89:86:12:55:25:33:c0:6d:c4:9d:d8:d2: 0f:4c:9d:60:78:fc:19:49:5d:6b:b9:81:ba:ee:ec:03:46:0e: f7:78:ac:05:bd:e7:34:68:64:2e:53:49:2e:da:ab:10:c4:2d: e9:7e:8a:7b:f0:17:da:c5:d4:98:4e:30:3e:d2:2f:b5:b1:f0: f2:36:6e:7f:b2:b2:84:ca:8d:bb:13:6b:e4:a8:9d:8b:9f:00: af:ca:da:42:3d:bd:eb:da:2e:01:e6:2d:bf:ca:c2:b6:53:70: ec:89:b9:0b:51:4b:9e:77:98:b4:b4:ed:f4:71:9c:1f:94:d9: 7c:78:70:4e -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUCoVKET+a42/5KRZceS+5g2I1aMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMjk1MkQ2NUNEMkU5N0MxOUU3RDdBNzg4MEY3MkJD MUUwRjMzODAeFw0yNTEyMDMxMTE3NDRaFw0yNjEyMDIxMTIyNDRaMDMxMTAvBgNV BAMTKEIyODlDQkVCMTVGRTA1OTI4NTI2NjFCM0EyMjgwMjAxM0YzNkRFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7LMXjSZuVbfvra1YY/Dc9R3O 5E4+SoxmJd6o4wpvdlSGVaqVa2v+2H6d53bRPfGnzv1u/j/9wF9MOfealJ0Hgs0I EuX1udG7b7Z/5U6X7v/JvcGcrYMIzSWH/knZYa16/VOX2E0p/lVl4MCVOjmm3H+t e1yQSGlH/5S0Ub8AMN6htb8WhtbsazYob65n/6hqtzOcFQ9Mi99iy9yM7mNh1rqI 6b8kvEQg0bszL0B+E9r1ER/vWIOGjXEiW6t6NoQxgIq1yuJJlI3fw3WJn8yjd8YT aDUG5RmrE9SetAc7cbx1oS0BJiI/VIC1nF90YiHGe50DATcxgDwq2o8pfgmPAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUsonL6xX+BZKFJmGzoigCAT823hswHwYDVR0j BBgwFoAUqBKVLWXNLpfBnn16eID3K8Hg8zgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T RWMvMC9BODEyOTUyRDY1Q0QyRTk3QzE5RTdEN0E3ODgwRjcyQkMxRTBGMzM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4MTI5NTJENjVDRDJFOTdD MTlFN0Q3QTc4ODBGNzJCQzFFMEYzMzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRzNWhMaW5WVWFzYWV1OWVvSlFQdzZEVXpaMjQyTEVCOFhwWlR1S1pOU0VjLzAv MzIzODMwMzQzYTM1NjU2MjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy MzgzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAReuDANBgkqhkiG9w0BAQsFAAOCAQEAJrjXYL+e nsOOQd5T+U+4tL8oRPM9wk5SZhR21wV6AMGyEX0hK+NjneQcIhhoutEorhomt0pb /7M+mREKlIS0LVcWXkmL+rZ3idkKm3AX86Rl/BnPSCBaIopsASbOa5fVT/7fjm+8 kkMjkq/2RQbDTWpfQQjA+dITex/82Ql3NrGI6mjjiYYSVSUzwG3EndjSD0ydYHj8 GUlda7mBuu7sA0YO93isBb3nNGhkLlNJLtqrEMQt6X6Ke/AX2sXUmE4wPtIvtbHw 8jZuf7KyhMqNuxNr5Kidi58Ar8raQj2969ouAeYtv8rCtlNw7Im5C1FLnneYtLTt 9HGcH5TZfHhwTg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:57 2025 by rpki-client