This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa File: 323830343a353465633a3a2f33322d3332203d3e20323638363738.roa (raw, json) Hash identifier: ahB7L7Ph7rR9uCzozHRJDrJ1/Xmo9qEHQmUSOUnFZcg= Subject key identifier: D7:94:4B:CA:B4:74:D9:8A:5D:18:E0:6D:12:CE:A4:AE:C9:6A:53:A9 Certificate issuer: /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478 Certificate serial: 3CB3BBDCAE2FE097471D0150D502817E3311E917 Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer Subject info access: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa Signing time: Tue 16 Dec 2025 21:00:43 +0000 ROA not before: Tue 16 Dec 2025 20:55:43 +0000 ROA not after: Tue 15 Dec 2026 21:00:43 +0000 asID: 268678 IP address blocks: 2804:54ec::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Dec 2025 21:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b3:bb:dc:ae:2f:e0:97:47:1d:01:50:d5:02:81:7e:33:11:e9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478 Validity Not Before: Dec 16 20:55:43 2025 GMT Not After : Dec 15 21:00:43 2026 GMT Subject: CN=D7944BCAB474D98A5D18E06D12CEA4AEC96A53A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:70:fb:c5:a6:a9:4e:c2:a9:ce:1d:ad:11: ad:8c:5f:38:62:8b:83:4d:00:25:30:d9:e6:23:37: 10:57:8c:ba:2a:fc:5a:88:95:55:18:f9:92:7e:cb: 74:c9:a0:6e:f7:73:20:e8:76:4b:96:96:c3:c2:4f: 55:0a:b2:1c:b4:a8:1b:09:1d:41:48:11:bc:61:34: 9d:3a:75:a6:88:96:cd:94:36:20:8d:b4:96:1d:93: 6c:78:07:99:80:52:05:8b:3c:df:1b:fa:b2:9c:6f: 1a:14:9f:5a:97:06:7e:71:c4:78:09:2f:52:f7:6d: e0:39:7c:b0:1f:fd:49:ed:32:9a:7e:a3:34:73:85: 0f:db:e6:7f:b3:5d:c3:c3:ff:85:9e:28:7f:0f:4b: 0a:36:af:df:24:78:a1:eb:21:f6:77:7e:2d:2e:3c: b0:72:0b:f4:bc:61:66:19:cc:98:bf:cf:fa:de:4d: 27:11:22:b9:98:50:9d:4b:63:25:32:f0:aa:86:e6: 4f:2f:43:13:5b:3b:59:2b:f1:c1:b9:af:12:12:36: 5b:e3:98:af:23:4f:b9:62:32:58:c4:0d:91:c0:a7: 04:47:07:46:39:24:d6:61:50:3e:95:a4:4d:54:9e: d1:77:a7:46:e4:6c:4e:25:df:7d:e7:0b:5c:c7:35: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:94:4B:CA:B4:74:D9:8A:5D:18:E0:6D:12:CE:A4:AE:C9:6A:53:A9 X509v3 Authority Key Identifier: keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:54ec::/32 Signature Algorithm: sha256WithRSAEncryption 9e:14:b7:e9:c8:8a:a5:db:07:05:e6:e9:56:e5:6a:28:7b:45: 93:d8:9c:18:18:88:06:48:ca:64:2a:d7:c8:dd:c7:c4:55:33: c8:9e:09:50:90:97:ed:93:f2:5c:0b:39:79:34:ad:13:6c:a3: 74:1f:21:6c:e1:3b:e0:56:aa:69:c9:7e:8b:c7:54:59:61:e2: 45:e1:f2:7b:18:2b:65:dc:14:e2:00:6a:c9:48:ba:8a:9c:52: 77:38:20:2c:b1:64:26:49:72:56:21:9f:5e:aa:66:14:c3:8b: 10:23:dc:1e:ad:cc:90:f1:92:4c:47:fd:0d:59:7f:c8:a0:40: fa:34:1e:bc:40:35:08:a7:3b:4c:33:bb:9d:2e:4f:16:19:f7: fd:3a:4f:9b:93:df:59:98:b5:4d:2a:55:38:2d:14:27:48:a1: 45:a0:e3:6b:80:09:31:15:84:4e:9a:20:80:8b:6d:9d:6f:fa: d6:04:d6:71:8d:60:de:5f:a3:73:9d:89:bd:bd:ca:a0:e0:cf: 8c:cc:54:3c:0d:8d:b3:05:c0:65:e3:4c:8f:03:75:1f:d7:56: bb:b9:79:a6:67:1c:e0:09:3b:a7:17:b0:d6:5d:a5:3e:eb:1d: 8a:08:44:41:ae:39:67:ce:fe:93:7c:a0:1d:c2:1a:94:50:eb: 7a:4f:df:77 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUPLO73K4v4JdHHQFQ1QKBfjMR6RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyMUNGNDBGM0M1RkVBMzVFQUMyRjRDQ0VCRDI3QUU0 REFDMjQ3ODAeFw0yNTEyMTYyMDU1NDNaFw0yNjEyMTUyMTAwNDNaMDMxMTAvBgNV BAMTKEQ3OTQ0QkNBQjQ3NEQ5OEE1RDE4RTA2RDEyQ0VBNEFFQzk2QTUzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WHD7xaapTsKpzh2tEa2MXzhi i4NNACUw2eYjNxBXjLoq/FqIlVUY+ZJ+y3TJoG73cyDodkuWlsPCT1UKshy0qBsJ HUFIEbxhNJ06daaIls2UNiCNtJYdk2x4B5mAUgWLPN8b+rKcbxoUn1qXBn5xxHgJ L1L3beA5fLAf/UntMpp+ozRzhQ/b5n+zXcPD/4WeKH8PSwo2r98keKHrIfZ3fi0u PLByC/S8YWYZzJi/z/reTScRIrmYUJ1LYyUy8KqG5k8vQxNbO1kr8cG5rxISNlvj mK8jT7liMljEDZHApwRHB0Y5JNZhUD6VpE1UntF3p0bkbE4l333nC1zHNbKfAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU15RLyrR02YpdGOBtEs6krslqU6kwHwYDVR0j BBgwFoAU+yHPQPPF/qNerC9Mzr0nrk2sJHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy VHovMC9GQjIxQ0Y0MEYzQzVGRUEzNUVBQzJGNENDRUJEMjdBRTREQUMyNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMjFDRjQwRjNDNUZFQTM1 RUFDMkY0Q0NFQkQyN0FFNERBQzI0NzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv MzIzODMwMzQzYTM1MzQ2NTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4 MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARU7DANBgkqhkiG9w0BAQsFAAOCAQEAnhS36ciK pdsHBebpVuVqKHtFk9icGBiIBkjKZCrXyN3HxFUzyJ4JUJCX7ZPyXAs5eTStE2yj dB8hbOE74Faqacl+i8dUWWHiReHyexgrZdwU4gBqyUi6ipxSdzggLLFkJklyViGf XqpmFMOLECPcHq3MkPGSTEf9DVl/yKBA+jQevEA1CKc7TDO7nS5PFhn3/TpPm5Pf WZi1TSpVOC0UJ0ihRaDja4AJMRWETpoggIttnW/61gTWcY1g3l+jc52Jvb3KoODP jMxUPA2NswXAZeNMjwN1H9dWu7l5pmcc4Ak7pxew1l2lPusdighEQa45Z87+k3yg HcIalFDrek/fdw== -----END CERTIFICATE-----Generated at Tue Dec 16 23:39:45 2025 by rpki-client