This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33342d3334203d3e20323638363738.roa File: 323830343a353465633a3a2f33342d3334203d3e20323638363738.roa (raw, json) Hash identifier: TuGlDaoQn8Pw8uUa55LY7JTr4yuuL478nmmPdu+cxBQ= Subject key identifier: B1:C2:6E:95:0D:3C:FA:BE:EC:09:AC:31:05:8C:A7:70:96:27:8A:15 Certificate issuer: /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478 Certificate serial: 4F991DD8F9918CDAF99538F171D3639C8B022177 Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer Subject info access: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33342d3334203d3e20323638363738.roa Signing time: Tue 16 Dec 2025 21:00:43 +0000 ROA not before: Tue 16 Dec 2025 20:55:43 +0000 ROA not after: Tue 15 Dec 2026 21:00:43 +0000 asID: 268678 IP address blocks: 2804:54ec::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Dec 2025 21:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:99:1d:d8:f9:91:8c:da:f9:95:38:f1:71:d3:63:9c:8b:02:21:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478 Validity Not Before: Dec 16 20:55:43 2025 GMT Not After : Dec 15 21:00:43 2026 GMT Subject: CN=B1C26E950D3CFABEEC09AC31058CA77096278A15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:02:f3:5a:00:2b:b9:cd:7f:08:7e:01:44: 96:6f:85:21:fd:4c:11:1b:79:33:37:5b:aa:0c:cb: ca:82:0b:9a:f1:a9:b7:85:9f:f2:8d:fd:2f:f0:36: bd:5d:00:f0:b6:89:60:0a:be:8a:ea:f2:51:db:80: a8:d9:da:e0:3f:9e:1c:be:ec:9d:1d:aa:30:a8:c7: 17:43:e9:b2:90:b6:82:22:88:85:5f:4a:1c:4e:9e: f5:b5:17:f1:a1:e8:b7:72:21:ee:ae:c9:d4:0d:bc: fb:c5:39:e8:20:8a:97:b0:ea:ee:f6:6e:26:41:6d: 16:44:37:9d:fb:a0:1c:76:7c:e9:e4:42:da:f5:31: 8c:b4:e1:b4:52:e5:ce:0e:24:f2:1a:42:dc:22:2f: 09:b1:be:0d:c7:e7:86:08:9f:2b:8e:a5:fb:3b:2d: f7:62:c2:f4:5d:0d:d4:fe:f6:be:8a:f1:b0:5f:a0: 85:f8:e3:3e:55:91:cc:6f:36:2f:8d:90:bc:16:89: 0b:8f:77:ea:f8:ee:63:7b:01:d8:5d:d1:29:60:5b: 5c:7c:08:15:9b:98:af:9c:0c:37:f2:e0:68:b8:a0: 59:5a:63:af:38:01:4d:65:15:d8:47:51:d7:20:45: 07:75:81:22:c5:5d:7e:cc:62:d9:e2:16:b2:b0:a8: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C2:6E:95:0D:3C:FA:BE:EC:09:AC:31:05:8C:A7:70:96:27:8A:15 X509v3 Authority Key Identifier: keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a3a2f33342d3334203d3e20323638363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:54ec::/34 Signature Algorithm: sha256WithRSAEncryption 25:82:d4:e9:9c:64:c7:87:29:1f:88:60:2b:f1:0d:75:b1:70: e5:4b:b6:59:d5:35:b7:c0:0b:11:f6:f1:a3:f5:08:cf:4d:dc: b4:89:54:e3:d3:8e:4e:f0:ab:ce:98:bc:47:c1:94:f3:75:29: 8f:de:1f:6f:1f:08:c4:8a:a1:76:4f:e5:04:82:9d:4b:c7:23: e9:a7:dd:bc:7a:5f:40:dd:37:9d:fd:f6:b9:ca:f5:44:2f:00: c5:71:64:73:3d:7f:6f:9d:76:a2:5f:da:89:a2:16:75:01:ed: 92:90:df:b8:18:d9:53:02:00:3a:29:37:b8:d4:10:c9:87:98: 9d:af:9d:59:89:bd:ca:e5:3f:d1:5d:f4:e3:92:e6:18:6b:59: ce:11:10:36:4e:f1:65:19:8a:8e:c0:8f:ab:8d:ca:4e:88:e2: 34:5f:f0:d5:67:07:16:0c:04:23:aa:a2:4a:08:85:37:06:b3: 92:79:19:72:d7:c9:52:7d:d3:e6:09:72:71:40:99:6a:a2:9a: b0:ee:d9:fe:85:da:72:49:e1:df:f1:83:1c:d7:0d:aa:3e:63: 67:e7:ed:7d:a1:56:ce:91:27:35:e1:a6:a7:73:c2:14:53:8a: 53:f8:71:d9:14:a5:ff:3c:f8:a2:8b:98:3b:d6:0d:20:7d:ac: b9:49:bf:6b -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUT5kd2PmRjNr5lTjxcdNjnIsCIXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyMUNGNDBGM0M1RkVBMzVFQUMyRjRDQ0VCRDI3QUU0 REFDMjQ3ODAeFw0yNTEyMTYyMDU1NDNaFw0yNjEyMTUyMTAwNDNaMDMxMTAvBgNV BAMTKEIxQzI2RTk1MEQzQ0ZBQkVFQzA5QUMzMTA1OENBNzcwOTYyNzhBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCraALzWgAruc1/CH4BRJZvhSH9 TBEbeTM3W6oMy8qCC5rxqbeFn/KN/S/wNr1dAPC2iWAKvorq8lHbgKjZ2uA/nhy+ 7J0dqjCoxxdD6bKQtoIiiIVfShxOnvW1F/Gh6LdyIe6uydQNvPvFOeggipew6u72 biZBbRZEN537oBx2fOnkQtr1MYy04bRS5c4OJPIaQtwiLwmxvg3H54YInyuOpfs7 LfdiwvRdDdT+9r6K8bBfoIX44z5VkcxvNi+NkLwWiQuPd+r47mN7Adhd0SlgW1x8 CBWbmK+cDDfy4Gi4oFlaY684AU1lFdhHUdcgRQd1gSLFXX7MYtniFrKwqGUhAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUscJulQ08+r7sCawxBYyncJYnihUwHwYDVR0j BBgwFoAU+yHPQPPF/qNerC9Mzr0nrk2sJHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy VHovMC9GQjIxQ0Y0MEYzQzVGRUEzNUVBQzJGNENDRUJEMjdBRTREQUMyNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMjFDRjQwRjNDNUZFQTM1 RUFDMkY0Q0NFQkQyN0FFNERBQzI0NzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv MzIzODMwMzQzYTM1MzQ2NTYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4 MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYGKARU7AAwDQYJKoZIhvcNAQELBQADggEBACWC1Omc ZMeHKR+IYCvxDXWxcOVLtlnVNbfACxH28aP1CM9N3LSJVOPTjk7wq86YvEfBlPN1 KY/eH28fCMSKoXZP5QSCnUvHI+mn3bx6X0DdN5399rnK9UQvAMVxZHM9f2+ddqJf 2omiFnUB7ZKQ37gY2VMCADopN7jUEMmHmJ2vnVmJvcrlP9Fd9OOS5hhrWc4REDZO 8WUZio7Aj6uNyk6I4jRf8NVnBxYMBCOqokoIhTcGs5J5GXLXyVJ90+YJcnFAmWqi mrDu2f6F2nJJ4d/xgxzXDao+Y2fn7X2hVs6RJzXhpqdzwhRTilP4cdkUpf88+KKL mDvWDSB9rLlJv2s= -----END CERTIFICATE-----Generated at Tue Dec 16 23:38:41 2025 by rpki-client