This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa File: 323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa (raw, json) Hash identifier: l8pc+9/csxsdQSbw7tiUlRE/8XdcAhgJ7RxAZpfKLnE= Subject key identifier: 9D:1E:94:CF:3F:90:1D:92:9B:6D:AF:BE:7B:3E:DF:65:73:79:5C:02 Certificate issuer: /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478 Certificate serial: 49E6D93D9C11DA65CF1C907FA36CDD4E060EAB25 Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer Subject info access: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa Signing time: Tue 16 Dec 2025 21:00:41 +0000 ROA not before: Tue 16 Dec 2025 20:55:41 +0000 ROA not after: Tue 15 Dec 2026 21:00:41 +0000 asID: 268678 IP address blocks: 2804:54ec:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Dec 2025 21:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e6:d9:3d:9c:11:da:65:cf:1c:90:7f:a3:6c:dd:4e:06:0e:ab:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478 Validity Not Before: Dec 16 20:55:41 2025 GMT Not After : Dec 15 21:00:41 2026 GMT Subject: CN=9D1E94CF3F901D929B6DAFBE7B3EDF6573795C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:6a:42:51:ff:7b:cb:e8:f1:37:65:2a:79: 87:26:be:23:e6:28:2f:ab:6a:d9:ac:b5:b0:6e:19: c7:a4:06:d4:f5:8c:a8:4b:2f:75:bc:b4:73:e7:e1: f7:4b:fe:cb:08:78:23:e2:1a:a9:c9:fd:4a:6b:74: f9:68:39:ab:7d:f1:f5:94:11:f3:30:ce:80:b7:6e: 44:ed:d9:d4:80:39:75:00:d9:d9:6d:1e:25:50:b0: 2c:40:a4:c3:76:7e:d2:1c:5f:04:ea:a8:8b:16:e8: b4:39:77:2a:4b:82:32:18:5a:40:a9:c2:81:d5:83: 15:69:16:54:c5:0a:0c:9c:c8:c7:d9:af:fe:d9:26: f0:87:e4:8e:4d:9d:79:93:3c:c1:f3:2c:17:e1:10: 2d:f9:4a:6c:ad:13:ab:50:eb:67:d0:93:8e:3a:87: 31:8b:ae:f6:1c:3a:90:26:b0:8b:da:f5:35:e8:46: 6d:be:bb:88:b3:61:54:70:4a:95:72:74:c3:b3:e4: 15:ed:c3:ca:a8:61:3a:cc:28:4a:4b:35:d8:56:82: 1d:66:23:3b:9e:f6:15:fe:f5:36:23:db:c7:29:ee: a3:bc:e4:e9:cf:01:33:77:b3:e9:0a:09:d5:d0:ff: 61:70:36:8c:0b:a9:56:ea:1f:72:97:4a:cf:c7:17: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1E:94:CF:3F:90:1D:92:9B:6D:AF:BE:7B:3E:DF:65:73:79:5C:02 X509v3 Authority Key Identifier: keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:54ec:c000::/34 Signature Algorithm: sha256WithRSAEncryption 4d:41:a2:31:c1:4e:8e:02:28:8c:54:6f:3d:cf:db:ab:c4:88: fc:5a:72:13:56:6a:89:c4:0f:7b:35:c1:b5:7a:8b:c8:54:eb: d7:17:cb:a9:b6:52:fd:c3:cd:eb:62:dd:9e:14:b8:7c:a1:0a: b6:93:27:69:04:35:79:5a:1f:32:2b:65:c6:63:c2:88:74:c7: c1:30:f2:17:00:a9:9e:2f:11:43:df:f7:59:33:17:97:9d:49: e2:52:fa:09:85:8f:1a:2c:d3:52:82:84:30:05:d7:04:48:eb: 5a:f1:c8:10:81:4a:3b:52:51:9f:ee:69:c8:d2:69:f4:1c:e0: a2:1f:f5:39:3b:66:90:68:1d:08:79:f1:a8:d7:ba:23:0b:0b: 4c:15:b4:6b:eb:9b:78:18:19:a3:e7:86:2b:a7:09:79:fd:90: 7b:35:a8:0f:a6:72:66:e8:b8:2f:07:ce:e3:23:29:e7:1f:93: e0:a8:ae:9c:a0:53:04:a8:0d:2a:f4:c5:ad:30:a1:68:67:5d: 77:ad:e9:c2:00:13:8e:2d:ab:31:95:d6:50:a0:c8:25:c2:d4: b7:17:5c:bb:25:43:75:eb:04:dc:31:9b:3a:81:36:9c:05:ac: 48:18:8c:35:a6:0e:d9:0e:26:25:84:88:5f:c5:3b:38:44:0b: 7c:7c:c0:38 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUSebZPZwR2mXPHJB/o2zdTgYOqyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyMUNGNDBGM0M1RkVBMzVFQUMyRjRDQ0VCRDI3QUU0 REFDMjQ3ODAeFw0yNTEyMTYyMDU1NDFaFw0yNjEyMTUyMTAwNDFaMDMxMTAvBgNV BAMTKDlEMUU5NENGM0Y5MDFEOTI5QjZEQUZCRTdCM0VERjY1NzM3OTVDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKYGpCUf97y+jxN2UqeYcmviPm KC+ratmstbBuGcekBtT1jKhLL3W8tHPn4fdL/ssIeCPiGqnJ/UprdPloOat98fWU EfMwzoC3bkTt2dSAOXUA2dltHiVQsCxApMN2ftIcXwTqqIsW6LQ5dypLgjIYWkCp woHVgxVpFlTFCgycyMfZr/7ZJvCH5I5NnXmTPMHzLBfhEC35SmytE6tQ62fQk446 hzGLrvYcOpAmsIva9TXoRm2+u4izYVRwSpVydMOz5BXtw8qoYTrMKEpLNdhWgh1m Izue9hX+9TYj28cp7qO85OnPATN3s+kKCdXQ/2FwNowLqVbqH3KXSs/HFyF3AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUnR6Uzz+QHZKbba++ez7fZXN5XAIwHwYDVR0j BBgwFoAU+yHPQPPF/qNerC9Mzr0nrk2sJHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy VHovMC9GQjIxQ0Y0MEYzQzVGRUEzNUVBQzJGNENDRUJEMjdBRTREQUMyNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMjFDRjQwRjNDNUZFQTM1 RUFDMkY0Q0NFQkQyN0FFNERBQzI0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv MzIzODMwMzQzYTM1MzQ2NTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVOzAMA0GCSqGSIb3DQEBCwUA A4IBAQBNQaIxwU6OAiiMVG89z9urxIj8WnITVmqJxA97NcG1eovIVOvXF8uptlL9 w83rYt2eFLh8oQq2kydpBDV5Wh8yK2XGY8KIdMfBMPIXAKmeLxFD3/dZMxeXnUni UvoJhY8aLNNSgoQwBdcESOta8cgQgUo7UlGf7mnI0mn0HOCiH/U5O2aQaB0IefGo 17ojCwtMFbRr65t4GBmj54Yrpwl5/ZB7NagPpnJm6LgvB87jIynnH5PgqK6coFME qA0q9MWtMKFoZ113renCABOOLasxldZQoMglwtS3F1y7JUN16wTcMZs6gTacBaxI GIw1pg7ZDiYlhIhfxTs4RAt8fMA4 -----END CERTIFICATE-----Generated at Tue Dec 16 23:39:43 2025 by rpki-client