This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/323830343a336438343a3a2f33322d313238203d3e20323636353336.roa File: 323830343a336438343a3a2f33322d313238203d3e20323636353336.roa (raw, json) Hash identifier: 3+Vcp9+KbSc+CbeDpwEMUPExHyjcdFyKoqQ2cpwGm24= Subject key identifier: D9:84:14:A9:A4:61:0B:7B:C5:46:1E:85:F0:6D:24:CA:BF:5D:C7:34 Certificate issuer: /CN=30749C5E57A887A5B2B8370496E94AA79DC8B198 Certificate serial: 444D2F1C9066ADCE77A7D42A8C7C7C74A2303A40 Authority key identifier: 30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer Subject info access: rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/323830343a336438343a3a2f33322d313238203d3e20323636353336.roa Signing time: Fri 21 Nov 2025 11:21:07 +0000 ROA not before: Fri 21 Nov 2025 11:16:07 +0000 ROA not after: Fri 20 Nov 2026 11:21:07 +0000 asID: 266536 IP address blocks: 2804:3d84::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.crl rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 16:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4d:2f:1c:90:66:ad:ce:77:a7:d4:2a:8c:7c:7c:74:a2:30:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30749C5E57A887A5B2B8370496E94AA79DC8B198 Validity Not Before: Nov 21 11:16:07 2025 GMT Not After : Nov 20 11:21:07 2026 GMT Subject: CN=D98414A9A4610B7BC5461E85F06D24CABF5DC734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:d5:ac:fc:cd:ce:08:d5:db:34:a3:96:0a: 13:f3:23:24:f0:9a:cc:6c:76:67:4e:96:82:3c:1f: b9:1d:5c:f8:e9:5b:34:b1:2b:9d:53:3e:0f:bb:3b: 75:e2:dd:21:bb:05:5b:3d:36:a4:5a:c3:f5:3b:e6: 87:c3:12:69:e1:34:35:a9:d8:56:97:bf:5c:f8:56: b8:2a:80:6b:fc:2e:c7:d9:b4:07:c6:f0:a5:66:6f: c2:f4:3f:90:58:cf:b7:81:81:cd:8a:02:b0:9c:a4: b0:f3:2a:04:99:69:b4:02:71:02:e0:08:f5:3a:d5: 54:9e:01:55:c0:d9:4f:5c:a7:c8:69:5f:8d:be:f5: 0c:d6:da:e1:3c:e1:30:80:d0:52:cf:58:c1:33:6a: 76:f9:e3:f4:c9:04:b5:ff:bb:12:b9:57:8c:b6:46: d9:2e:4e:0c:53:46:58:14:78:ba:b6:e4:68:02:15: c0:c8:1e:a1:5d:e0:74:47:e9:b2:03:bc:6d:28:89: 3d:9e:0c:88:77:c3:bc:ec:91:1e:d2:f9:0b:34:d2: b1:c8:c3:ef:19:d7:f3:ce:37:44:1d:c1:35:a1:e3: 05:76:60:5e:a9:ec:a1:82:c8:c0:b1:e4:50:2b:f3: 76:6f:21:7b:84:1b:95:d4:f9:65:de:40:e8:1f:b5: bb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:84:14:A9:A4:61:0B:7B:C5:46:1E:85:F0:6D:24:CA:BF:5D:C7:34 X509v3 Authority Key Identifier: keyid:30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/323830343a336438343a3a2f33322d313238203d3e20323636353336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3d84::/32 Signature Algorithm: sha256WithRSAEncryption 3a:8e:de:49:4c:36:14:1e:9a:59:a1:0e:c1:9d:84:31:ca:4b: 90:0f:de:0f:3d:e7:86:6b:73:56:65:ec:1b:26:ae:c7:57:0f: b1:c6:10:13:2c:fe:97:c3:6d:37:af:f2:91:56:10:eb:80:44: 7e:a9:46:41:d9:92:02:e1:93:57:20:ee:7a:5f:7d:ad:79:62: 8c:6c:07:1f:6e:49:5f:76:ac:72:f2:8a:60:9a:0f:e9:44:51: 62:ba:3b:50:a4:29:2d:c2:1e:cc:68:1e:ba:9a:7d:2a:1a:25: 8c:9b:c6:20:41:71:32:79:67:b8:73:66:0e:b2:ee:99:c7:34: b4:17:c4:97:83:8c:74:25:73:94:f7:0c:ba:81:93:ca:45:f2: 2b:c0:6c:9a:e3:36:27:36:47:e0:c1:cd:64:7b:d8:a9:a4:b2: c7:a6:86:3a:97:42:b8:ea:14:bf:bc:12:95:5f:35:9f:73:fa: 6a:4b:be:e4:47:f2:ae:89:b9:1f:b7:d8:1c:d8:d5:b8:e4:04: 5c:97:f9:a2:a2:d2:43:a3:f4:a2:5e:c2:c6:b7:26:eb:ab:c0: 95:b5:ca:7e:7a:7f:17:85:4c:22:f6:3a:ba:ff:46:49:39:24: 7c:1a:28:7f:af:9f:1f:1c:89:cc:dd:56:9b:25:7e:3b:cc:fe: 8f:95:06:cb -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIURE0vHJBmrc53p9QqjHx8dKIwOkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDlDNUU1N0E4ODdBNUIyQjgzNzA0OTZFOTRBQTc5 REM4QjE5ODAeFw0yNTExMjExMTE2MDdaFw0yNjExMjAxMTIxMDdaMDMxMTAvBgNV BAMTKEQ5ODQxNEE5QTQ2MTBCN0JDNTQ2MUU4NUYwNkQyNENBQkY1REM3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RNWs/M3OCNXbNKOWChPzIyTw msxsdmdOloI8H7kdXPjpWzSxK51TPg+7O3Xi3SG7BVs9NqRaw/U75ofDEmnhNDWp 2FaXv1z4VrgqgGv8LsfZtAfG8KVmb8L0P5BYz7eBgc2KArCcpLDzKgSZabQCcQLg CPU61VSeAVXA2U9cp8hpX42+9QzW2uE84TCA0FLPWMEzanb54/TJBLX/uxK5V4y2 RtkuTgxTRlgUeLq25GgCFcDIHqFd4HRH6bIDvG0oiT2eDIh3w7zskR7S+Qs00rHI w+8Z1/PON0QdwTWh4wV2YF6p7KGCyMCx5FAr83ZvIXuEG5XU+WXeQOgftbthAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU2YQUqaRhC3vFRh6F8G0kyr9dxzQwHwYDVR0j BBgwFoAUMHScXleoh6WyuDcElulKp53IsZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUdGODV1SEZBOFZXQlNyWUxvSlFZcnVmcTlVV0FyaU1wV2tFOXVubm0y Z0ovMC8zMDc0OUM1RTU3QTg4N0E1QjJCODM3MDQ5NkU5NEFBNzlEQzhCMTk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNzQ5QzVFNTdBODg3QTVC MkI4MzcwNDk2RTk0QUE3OURDOEIxOTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVHRjg1dUhGQThWV0JTcllMb0pRWXJ1ZnE5VVdBcmlNcFdrRTl1bm5tMmdKLzAv MzIzODMwMzQzYTMzNjQzODM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzYzNTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBD2EMA0GCSqGSIb3DQEBCwUAA4IBAQA6jt5J TDYUHppZoQ7BnYQxykuQD94PPeeGa3NWZewbJq7HVw+xxhATLP6Xw203r/KRVhDr gER+qUZB2ZIC4ZNXIO56X32teWKMbAcfbklfdqxy8opgmg/pRFFiujtQpCktwh7M aB66mn0qGiWMm8YgQXEyeWe4c2YOsu6ZxzS0F8SXg4x0JXOU9wy6gZPKRfIrwGya 4zYnNkfgwc1ke9ippLLHpoY6l0K46hS/vBKVXzWfc/pqS77kR/Kuibkft9gc2NW4 5ARcl/miotJDo/SiXsLGtybrq8CVtcp+en8XhUwi9jq6/0ZJOSR8Gih/r58fHInM 3VabJX47zP6PlQbL -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:03 2025 by rpki-client