This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3438203d3e20323632353530.roa File: 323830343a323865303a3a2f33322d3438203d3e20323632353530.roa (raw, json) Hash identifier: ns0aL3sCS/TVQK5LUjpK3SRKyoI8sl4Q4xywCKyPdzw= Subject key identifier: 95:C3:C2:3F:11:C5:6C:8D:5C:58:FA:0A:60:9F:76:60:27:31:BA:AD Certificate issuer: /CN=0B7C73A4042A68A85270F43141C006C63BE8A61D Certificate serial: 543AB4C2E6D134E4813A39D6937611D4F9756BCF Authority key identifier: 0B:7C:73:A4:04:2A:68:A8:52:70:F4:31:41:C0:06:C6:3B:E8:A6:1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7C73A4042A68A85270F43141C006C63BE8A61D.cer Subject info access: rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3438203d3e20323632353530.roa Signing time: Sat 08 Nov 2025 16:18:53 +0000 ROA not before: Sat 08 Nov 2025 16:13:53 +0000 ROA not after: Sat 07 Nov 2026 16:18:53 +0000 asID: 262550 IP address blocks: 2804:28e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0B7C73A4042A68A85270F43141C006C63BE8A61D.crl rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0B7C73A4042A68A85270F43141C006C63BE8A61D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7C73A4042A68A85270F43141C006C63BE8A61D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3a:b4:c2:e6:d1:34:e4:81:3a:39:d6:93:76:11:d4:f9:75:6b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B7C73A4042A68A85270F43141C006C63BE8A61D Validity Not Before: Nov 8 16:13:53 2025 GMT Not After : Nov 7 16:18:53 2026 GMT Subject: CN=95C3C23F11C56C8D5C58FA0A609F76602731BAAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:9d:17:b0:49:82:8e:55:cc:7f:03:ea:f2: 21:af:24:c1:49:34:d3:65:7f:0c:6e:ca:2d:f5:54: 0d:71:4e:67:9b:aa:20:be:de:be:d6:72:31:0f:b5: cd:d5:13:f9:16:75:74:cf:df:cc:25:9d:25:78:b9: ff:99:82:5c:78:d5:e0:d2:e0:6f:3a:74:dd:a2:49: 41:9a:c2:06:e5:61:6b:c5:f2:62:66:de:86:ac:08: d3:9f:ec:c7:ad:bc:6f:a9:ee:b4:32:31:e5:66:c8: c7:8e:4c:c3:c4:4a:7c:73:2b:99:f2:61:c5:db:0d: 6b:23:19:2e:09:7a:f3:55:f8:94:a6:17:d0:57:f2: 3e:34:46:da:1a:3f:78:0c:4d:74:ee:eb:09:0c:55: cc:1c:9d:89:79:db:48:cc:59:57:1d:c9:f1:98:b7: 6b:cd:b3:42:d1:b8:62:bf:9b:d7:4f:65:18:50:92: 19:f1:5b:3c:ad:06:9e:15:66:26:07:e0:f5:69:5c: c7:1a:70:00:6f:91:6d:aa:4d:dd:4e:ba:e2:c2:2f: ea:ae:21:25:ef:89:94:6e:c5:ec:cd:f3:d5:ac:f8: 54:85:78:c7:b4:1b:1f:db:4b:c7:d4:bc:38:9d:ac: 33:47:c1:bd:44:1e:c0:6c:a4:13:4a:09:43:97:d0: 41:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C3:C2:3F:11:C5:6C:8D:5C:58:FA:0A:60:9F:76:60:27:31:BA:AD X509v3 Authority Key Identifier: keyid:0B:7C:73:A4:04:2A:68:A8:52:70:F4:31:41:C0:06:C6:3B:E8:A6:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0B7C73A4042A68A85270F43141C006C63BE8A61D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7C73A4042A68A85270F43141C006C63BE8A61D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3438203d3e20323632353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:28e0::/32 Signature Algorithm: sha256WithRSAEncryption 64:ff:84:20:9b:99:c0:06:1a:fb:50:71:3f:99:60:23:e8:ef: 01:9b:c4:28:70:34:ea:fc:25:54:fa:76:e6:79:c1:5b:42:9b: 4d:18:88:1c:ce:c5:84:a1:8d:b6:7f:09:dc:29:97:4d:c6:df: c9:17:af:86:3b:2f:07:df:40:56:ca:5c:36:62:3d:80:d7:9e: 58:be:84:e8:44:8c:19:5b:16:da:8b:c8:52:ab:5b:e9:e6:f9: 7e:ae:db:b2:ff:89:0d:a1:eb:a9:8b:38:02:1c:b0:73:e0:29: f0:64:09:55:23:ad:23:0a:83:5f:dd:e8:b6:78:1c:b0:07:f9: 94:a5:bd:71:f9:f4:41:62:1f:0c:c4:df:c9:46:60:f6:f4:7e: 8e:e6:15:5c:4f:37:b4:74:2b:15:8e:a1:c2:3d:15:49:0e:e0: 0a:4e:f0:5f:78:93:b7:81:7c:b7:2a:17:53:40:e9:9f:a9:ef: 77:f1:eb:5d:9d:8a:4c:90:e5:b2:19:95:8d:f5:11:5d:07:ad: 73:4c:76:27:a5:a6:8b:66:f6:be:44:3c:e6:b7:39:19:db:59: 5a:a4:33:cb:f8:86:94:78:7f:e9:c2:4a:01:72:ec:0d:8d:e7: c4:e4:83:c8:81:18:0e:7d:84:ae:36:fe:f1:8a:b3:58:e0:a8: dd:4c:c9:78 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUVDq0wubRNOSBOjnWk3YR1Pl1a88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3QzczQTQwNDJBNjhBODUyNzBGNDMxNDFDMDA2QzYz QkU4QTYxRDAeFw0yNTExMDgxNjEzNTNaFw0yNjExMDcxNjE4NTNaMDMxMTAvBgNV BAMTKDk1QzNDMjNGMTFDNTZDOEQ1QzU4RkEwQTYwOUY3NjYwMjczMUJBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yp0XsEmCjlXMfwPq8iGvJMFJ NNNlfwxuyi31VA1xTmebqiC+3r7WcjEPtc3VE/kWdXTP38wlnSV4uf+Zglx41eDS 4G86dN2iSUGawgblYWvF8mJm3oasCNOf7MetvG+p7rQyMeVmyMeOTMPESnxzK5ny YcXbDWsjGS4JevNV+JSmF9BX8j40RtoaP3gMTXTu6wkMVcwcnYl520jMWVcdyfGY t2vNs0LRuGK/m9dPZRhQkhnxWzytBp4VZiYH4PVpXMcacABvkW2qTd1OuuLCL+qu ISXviZRuxezN89Ws+FSFeMe0Gx/bS8fUvDidrDNHwb1EHsBspBNKCUOX0EFbAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUlcPCPxHFbI1cWPoKYJ92YCcxuq0wHwYDVR0j BBgwFoAUC3xzpAQqaKhScPQxQcAGxjvoph0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUVTcGZqUUZvbUpROGVGaFJRbXJBaFUxQ1M3UGVKc1hNV2tIUlRic1Vv emQvMC8wQjdDNzNBNDA0MkE2OEE4NTI3MEY0MzE0MUMwMDZDNjNCRThBNjFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCN0M3M0E0MDQyQTY4QTg1 MjcwRjQzMTQxQzAwNkM2M0JFOEE2MUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVFU3BmalFGb21KUThlRmhSUW1yQWhVMUNTN1BlSnNYTVdrSFJUYnNVb3pkLzAv MzIzODMwMzQzYTMyMzg2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy MzUzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQo4DANBgkqhkiG9w0BAQsFAAOCAQEAZP+EIJuZ wAYa+1BxP5lgI+jvAZvEKHA06vwlVPp25nnBW0KbTRiIHM7FhKGNtn8J3CmXTcbf yRevhjsvB99AVspcNmI9gNeeWL6E6ESMGVsW2ovIUqtb6eb5fq7bsv+JDaHrqYs4 Ahywc+Ap8GQJVSOtIwqDX93otngcsAf5lKW9cfn0QWIfDMTfyUZg9vR+juYVXE83 tHQrFY6hwj0VSQ7gCk7wX3iTt4F8tyoXU0Dpn6nvd/HrXZ2KTJDlshmVjfURXQet c0x2J6Wmi2b2vkQ85rc5GdtZWqQzy/iGlHh/6cJKAXLsDY3nxOSDyIEYDn2Erjb+ 8YqzWOCo3UzJeA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:26 2025 by rpki-client