This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/323830343a353830633a3a2f33322d313238203d3e20323638313033.roa File: 323830343a353830633a3a2f33322d313238203d3e20323638313033.roa (raw, json) Hash identifier: WYrkryoMxRx73LuI6ghC64zxGV5kQ31F9851ikwJ0Sk= Subject key identifier: CD:E5:93:7B:3C:F8:AF:75:90:F1:14:3E:4F:1C:30:6A:86:E9:6E:F5 Certificate issuer: /CN=7E49C2675FEFF5C47686EF21CF272D21EF1096B5 Certificate serial: 44A2015A06A39A94D4748AE535C6892CD5512F6E Authority key identifier: 7E:49:C2:67:5F:EF:F5:C4:76:86:EF:21:CF:27:2D:21:EF:10:96:B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E49C2675FEFF5C47686EF21CF272D21EF1096B5.cer Subject info access: rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/323830343a353830633a3a2f33322d313238203d3e20323638313033.roa Signing time: Thu 04 Dec 2025 15:15:18 +0000 ROA not before: Thu 04 Dec 2025 15:10:18 +0000 ROA not after: Thu 03 Dec 2026 15:15:18 +0000 asID: 268103 IP address blocks: 2804:580c::/32 maxlen: 128 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 44:a2:01:5a:06:a3:9a:94:d4:74:8a:e5:35:c6:89:2c:d5:51:2f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E49C2675FEFF5C47686EF21CF272D21EF1096B5 Validity Not Before: Dec 4 15:10:18 2025 GMT Not After : Dec 3 15:15:18 2026 GMT Subject: CN=CDE5937B3CF8AF7590F1143E4F1C306A86E96EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:89:6c:ac:c1:8c:72:3a:e8:a7:08:90:8f: 0c:ed:ce:fa:94:4d:1b:50:48:a4:26:df:e1:0a:ba: 91:bb:b9:a9:13:f6:1d:8c:fa:b0:2b:e3:7a:a6:05: 88:7e:1c:f4:70:cc:58:08:ee:d2:43:b1:42:ad:7d: 8d:9e:f5:f6:fb:ae:20:f7:86:40:cb:6d:9d:20:d9: f5:89:12:46:25:9e:73:07:1b:08:b4:ed:d5:6d:b3: 5e:ac:d8:f0:b8:c0:55:f2:83:7c:c2:05:a4:76:05: 80:9b:c9:1b:1e:c1:0d:ab:4d:d8:b3:45:a6:b8:15: 32:cc:ab:81:ec:7e:5a:32:3f:1d:65:f1:de:e9:d3: 32:70:41:10:91:23:eb:49:11:43:cc:cb:a6:23:0c: 51:88:c9:59:10:81:cd:92:45:8e:3f:c5:b4:e0:74: 37:37:8a:76:bd:86:b7:b9:2b:af:71:d8:de:fe:95: e8:15:ef:45:95:57:43:c9:9b:fc:17:9d:ca:6e:91: 28:28:1d:40:ad:89:f9:60:dd:d2:35:28:74:8f:90: c4:2f:b9:3f:42:43:fd:a3:ed:06:f0:f7:37:9b:d6: 71:9a:90:27:fb:a6:7c:3f:53:5b:dc:b2:f2:32:04: 09:27:5d:40:3a:6b:ef:ba:82:21:2a:96:ee:3b:ee: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:93:7B:3C:F8:AF:75:90:F1:14:3E:4F:1C:30:6A:86:E9:6E:F5 X509v3 Authority Key Identifier: keyid:7E:49:C2:67:5F:EF:F5:C4:76:86:EF:21:CF:27:2D:21:EF:10:96:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/7E49C2675FEFF5C47686EF21CF272D21EF1096B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E49C2675FEFF5C47686EF21CF272D21EF1096B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/323830343a353830633a3a2f33322d313238203d3e20323638313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:580c::/32 Signature Algorithm: sha256WithRSAEncryption 7d:f5:df:6d:d8:bb:3b:5a:8c:29:27:88:25:18:31:e0:38:96: 36:0a:9d:ff:78:b1:d9:22:d6:c6:e3:6f:3c:d7:14:2c:e9:fc: 98:49:eb:27:89:87:3f:73:69:bb:e7:4b:2b:d3:85:c2:12:1f: d5:50:fd:f2:27:10:63:ba:00:47:6c:ac:4d:ca:68:01:65:f7: 5e:5e:fe:a8:a1:b7:c8:0e:08:e1:f1:68:98:94:c3:f8:76:c3: 7b:40:9a:18:c7:04:f4:91:40:a5:31:85:c5:4d:22:32:46:04: 4a:b6:15:bb:0d:a5:c9:64:a9:24:87:06:28:4f:4e:2c:72:7b: ed:67:51:9e:e1:cb:b7:15:78:22:e2:bd:61:46:db:4e:f0:ad: 78:e4:89:a4:38:e4:c0:9d:70:52:d3:03:b5:75:64:94:38:d4: dd:ce:98:b3:b2:63:9c:ea:dc:9b:cc:34:ca:65:c2:56:d0:74: a1:53:13:79:9d:6a:99:47:5b:39:80:b2:02:ae:6c:8e:50:d7: a0:52:48:89:17:f3:34:38:c5:26:29:28:d5:13:d5:e1:53:48: 1c:e7:c8:07:e8:bc:2a:08:e2:95:5a:b0:59:fa:ff:52:1a:1d: ef:64:90:cf:21:c8:4c:42:4b:47:2b:00:39:3b:43:9d:ab:31: 01:8d:8a:b3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIURKIBWgajmpTUdIrlNcaJLNVRL24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0OUMyNjc1RkVGRjVDNDc2ODZFRjIxQ0YyNzJEMjFF RjEwOTZCNTAeFw0yNTEyMDQxNTEwMThaFw0yNjEyMDMxNTE1MThaMDMxMTAvBgNV BAMTKENERTU5MzdCM0NGOEFGNzU5MEYxMTQzRTRGMUMzMDZBODZFOTZFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWNolsrMGMcjropwiQjwztzvqU TRtQSKQm3+EKupG7uakT9h2M+rAr43qmBYh+HPRwzFgI7tJDsUKtfY2e9fb7riD3 hkDLbZ0g2fWJEkYlnnMHGwi07dVts16s2PC4wFXyg3zCBaR2BYCbyRsewQ2rTdiz Raa4FTLMq4HsfloyPx1l8d7p0zJwQRCRI+tJEUPMy6YjDFGIyVkQgc2SRY4/xbTg dDc3ina9hre5K69x2N7+legV70WVV0PJm/wXncpukSgoHUCtiflg3dI1KHSPkMQv uT9CQ/2j7Qbw9zeb1nGakCf7pnw/U1vcsvIyBAknXUA6a++6giEqlu477rURAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUzeWTezz4r3WQ8RQ+TxwwaobpbvUwHwYDVR0j BBgwFoAUfknCZ1/v9cR2hu8hzyctIe8QlrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVlaMmJWbmFvYXJhTlVudGtaQnVmblRpZVBNRkR3Vmt6RG9MQ0hubWdG WUIvMC83RTQ5QzI2NzVGRUZGNUM0NzY4NkVGMjFDRjI3MkQyMUVGMTA5NkI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFNDlDMjY3NUZFRkY1QzQ3 Njg2RUYyMUNGMjcyRDIxRUYxMDk2QjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVZWjJiVm5hb2FyYU5VbnRrWkJ1Zm5UaWVQTUZEd1ZrekRvTENIbm1nRllCLzAv MzIzODMwMzQzYTM1MzgzMDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzgzMTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBFgMMA0GCSqGSIb3DQEBCwUAA4IBAQB99d9t 2Ls7WowpJ4glGDHgOJY2Cp3/eLHZItbG42881xQs6fyYSesniYc/c2m750sr04XC Eh/VUP3yJxBjugBHbKxNymgBZfdeXv6oobfIDgjh8WiYlMP4dsN7QJoYxwT0kUCl MYXFTSIyRgRKthW7DaXJZKkkhwYoT04scnvtZ1Ge4cu3FXgi4r1hRttO8K145Imk OOTAnXBS0wO1dWSUONTdzpizsmOc6tybzDTKZcJW0HShUxN5nWqZR1s5gLICrmyO UNegUkiJF/M0OMUmKSjVE9XhU0gc58gH6LwqCOKVWrBZ+v9SGh3vZJDPIchMQktH KwA5O0OdqzEBjYqz -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:17 2025 by rpki-client