This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa File: 323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa (raw, json) Hash identifier: x99zBuvWBnU9AVWdYvh6AAlitV1UXJ0iGrnTPVHMJMw= Subject key identifier: 12:9D:6E:06:89:0F:65:2C:E1:13:1E:22:D2:94:FB:A4:F4:F3:27:EB Certificate issuer: /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478 Certificate serial: 51C6D3A4F3659D16DEDC8913FDFCACBE19A561D1 Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer Subject info access: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa Signing time: Tue 16 Dec 2025 21:00:41 +0000 ROA not before: Tue 16 Dec 2025 20:55:41 +0000 ROA not after: Tue 15 Dec 2026 21:00:41 +0000 asID: 268678 IP address blocks: 2804:54ec:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Dec 2025 21:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c6:d3:a4:f3:65:9d:16:de:dc:89:13:fd:fc:ac:be:19:a5:61:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478 Validity Not Before: Dec 16 20:55:41 2025 GMT Not After : Dec 15 21:00:41 2026 GMT Subject: CN=129D6E06890F652CE1131E22D294FBA4F4F327EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:56:ae:49:b8:26:c9:2f:f3:42:79:55:da: 66:89:53:90:45:2e:56:24:b0:f0:8b:f4:ea:ff:80: 95:d9:35:97:52:d7:55:d1:d3:20:c8:87:ca:8e:11: e9:9c:74:bb:36:f6:13:b4:c1:2f:f2:61:4d:e7:42: 95:4c:47:06:d5:e0:95:3e:a9:1f:24:9a:9c:39:eb: 85:5b:b4:5e:27:99:1d:af:3d:1e:7a:c0:ca:1c:dd: 3e:57:ef:49:de:0c:2f:23:f3:79:32:f0:88:3b:f9: 41:b0:08:e7:f6:22:3e:92:e4:c3:6e:1b:62:e2:36: 9d:d0:9c:27:bc:7f:9e:7a:10:5e:91:c1:34:04:15: 26:2b:c1:95:c0:78:40:59:3f:1f:c4:a4:48:13:ce: 96:b7:cf:b0:e8:4a:e4:9f:cc:17:35:56:1e:2c:6f: 3b:57:bf:08:c0:21:70:0e:27:2a:cd:d2:7c:ad:5f: c4:d5:a8:70:a2:ec:73:1a:0a:82:d4:ac:20:7d:5f: 9e:23:6a:45:e1:e5:e9:98:73:a8:ca:a1:00:5f:a8: 69:fe:87:72:ec:87:a4:8c:5d:d7:a7:aa:3e:cd:ce: 6e:10:40:b6:f7:b1:6c:0d:95:13:83:fc:7d:9d:d1: 57:67:35:35:4f:59:2a:9a:bd:82:e3:81:b5:ea:8b: 12:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9D:6E:06:89:0F:65:2C:E1:13:1E:22:D2:94:FB:A4:F4:F3:27:EB X509v3 Authority Key Identifier: keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:54ec:8000::/34 Signature Algorithm: sha256WithRSAEncryption a1:f6:6c:d5:60:6c:e8:80:bd:f7:d4:08:07:6f:af:81:b2:16: f4:e8:e0:f7:5b:35:68:fa:31:ef:4b:ef:87:fe:7d:22:99:73: ed:86:a3:80:44:28:73:04:00:da:70:8a:52:45:96:03:58:9c: 3f:d1:aa:ff:3f:f6:c7:64:28:d9:0e:aa:8c:0d:fb:dd:49:fb: 3f:83:8e:02:32:bb:6e:ba:e7:53:97:89:69:9a:11:1c:01:3e: 19:66:53:18:c4:4d:c5:68:82:a0:b8:e7:b7:09:30:aa:e7:93: 77:74:ce:7d:b6:b0:01:96:71:c6:1b:28:be:a5:c7:fa:e8:01: 20:86:5b:71:b0:fc:6e:82:35:31:ae:61:7e:f6:45:58:be:e5: d5:02:17:f6:c0:e3:ce:23:ed:3c:1c:be:c4:d3:8a:4e:fa:2e: 19:ca:c9:bf:17:13:f6:1a:03:fd:7e:2d:24:89:1c:7c:b4:29: 87:0d:4f:ff:5e:57:f6:98:e6:bd:64:05:97:5a:9b:7d:f6:d9: 76:a3:93:95:9a:d1:8c:ac:76:d1:6c:a1:5f:6f:c2:60:2a:32: 74:2a:51:9e:7f:87:27:27:8a:67:83:01:7e:29:e5:ce:83:a6: 4b:f2:49:b5:e1:44:59:ac:7f:30:d4:04:bf:b0:83:a0:5e:0b: 49:36:9b:91 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUUcbTpPNlnRbe3IkT/fysvhmlYdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyMUNGNDBGM0M1RkVBMzVFQUMyRjRDQ0VCRDI3QUU0 REFDMjQ3ODAeFw0yNTEyMTYyMDU1NDFaFw0yNjEyMTUyMTAwNDFaMDMxMTAvBgNV BAMTKDEyOUQ2RTA2ODkwRjY1MkNFMTEzMUUyMkQyOTRGQkE0RjRGMzI3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ1VauSbgmyS/zQnlV2maJU5BF LlYksPCL9Or/gJXZNZdS11XR0yDIh8qOEemcdLs29hO0wS/yYU3nQpVMRwbV4JU+ qR8kmpw564VbtF4nmR2vPR56wMoc3T5X70neDC8j83ky8Ig7+UGwCOf2Ij6S5MNu G2LiNp3QnCe8f556EF6RwTQEFSYrwZXAeEBZPx/EpEgTzpa3z7DoSuSfzBc1Vh4s bztXvwjAIXAOJyrN0nytX8TVqHCi7HMaCoLUrCB9X54jakXh5emYc6jKoQBfqGn+ h3Lsh6SMXdenqj7Nzm4QQLb3sWwNlROD/H2d0VdnNTVPWSqavYLjgbXqixIXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUEp1uBokPZSzhEx4i0pT7pPTzJ+swHwYDVR0j BBgwFoAU+yHPQPPF/qNerC9Mzr0nrk2sJHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy VHovMC9GQjIxQ0Y0MEYzQzVGRUEzNUVBQzJGNENDRUJEMjdBRTREQUMyNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMjFDRjQwRjNDNUZFQTM1 RUFDMkY0Q0NFQkQyN0FFNERBQzI0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv MzIzODMwMzQzYTM1MzQ2NTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVOyAMA0GCSqGSIb3DQEBCwUA A4IBAQCh9mzVYGzogL331AgHb6+Bshb06OD3WzVo+jHvS++H/n0imXPthqOARChz BADacIpSRZYDWJw/0ar/P/bHZCjZDqqMDfvdSfs/g44CMrtuuudTl4lpmhEcAT4Z ZlMYxE3FaIKguOe3CTCq55N3dM59trABlnHGGyi+pcf66AEghltxsPxugjUxrmF+ 9kVYvuXVAhf2wOPOI+08HL7E04pO+i4Zysm/FxP2GgP9fi0kiRx8tCmHDU//Xlf2 mOa9ZAWXWpt99tl2o5OVmtGMrHbRbKFfb8JgKjJ0KlGef4cnJ4pngwF+KeXOg6ZL 8km14URZrH8w1AS/sIOgXgtJNpuR -----END CERTIFICATE-----Generated at Tue Dec 16 23:41:21 2025 by rpki-client