This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3332203d3e203532363632.roa File: 323830343a333362303a3a2f33322d3332203d3e203532363632.roa (raw, json) Hash identifier: QRWZDIrsFte1u90eK//vmavRO7BVPp0qap7nV14zkdo= Subject key identifier: CF:20:94:3E:82:9C:E1:9A:66:07:D0:6F:EC:B9:89:DA:6C:2C:31:59 Certificate issuer: /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06 Certificate serial: 7A8DB875CE49743B8A773F36E86060D3079B4516 Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3332203d3e203532363632.roa Signing time: Tue 25 Nov 2025 17:17:57 +0000 ROA not before: Tue 25 Nov 2025 17:12:57 +0000 ROA not after: Tue 24 Nov 2026 17:17:57 +0000 asID: 52662 IP address blocks: 2804:33b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8d:b8:75:ce:49:74:3b:8a:77:3f:36:e8:60:60:d3:07:9b:45:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06 Validity Not Before: Nov 25 17:12:57 2025 GMT Not After : Nov 24 17:17:57 2026 GMT Subject: CN=CF20943E829CE19A6607D06FECB989DA6C2C3159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cd:c1:c5:e1:20:b3:f7:fa:a8:04:13:b8:03: 49:f7:da:e4:73:6e:50:14:78:28:19:3b:cc:31:1e: 26:20:fd:ac:ab:f0:21:e5:dd:df:29:35:0c:0d:a8: fa:6e:cf:d1:ce:56:e6:84:86:51:86:45:b7:c4:57: 90:17:4d:b9:78:ac:0f:f6:c4:1a:1b:29:fe:49:3e: 41:b0:4a:d4:85:49:b2:cd:ca:9f:0b:25:bd:ac:81: 41:5b:da:ca:d3:3b:be:2f:c7:49:f8:a4:b5:2d:42: 5b:1a:e6:29:ef:53:96:ac:c5:c3:33:19:63:4d:9e: 98:7c:f0:dd:dc:65:f3:65:c4:95:78:8d:bc:b0:f6: a2:e8:a0:4f:ab:88:2f:7f:8a:ec:28:91:36:30:f0: 13:99:b4:ef:bd:a2:62:26:e5:ec:b3:a0:15:9f:03: c0:88:82:41:4a:1f:21:f8:7e:b1:d9:07:8d:c9:39: 80:1a:ce:ba:d8:56:a5:a7:10:85:39:2d:d3:36:20: 29:b2:12:2d:82:7e:9b:b0:53:ae:f9:f4:b9:8c:ca: 57:e0:ef:82:b9:d8:5d:b2:54:a7:44:0e:6c:0b:d9: a0:2c:37:05:ac:3b:be:6f:17:3c:06:1d:52:eb:10: 2d:15:2d:d5:bb:f5:ec:1f:1c:5d:0e:8a:68:32:31: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:20:94:3E:82:9C:E1:9A:66:07:D0:6F:EC:B9:89:DA:6C:2C:31:59 X509v3 Authority Key Identifier: keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3332203d3e203532363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:33b0::/32 Signature Algorithm: sha256WithRSAEncryption 2b:72:e1:0c:33:71:72:c7:42:d3:af:7e:ed:c3:a1:e0:bc:32: dc:75:7c:10:95:f8:55:e3:60:f8:3d:61:f5:fc:6d:5a:3f:d7: 8a:ad:84:bb:94:19:ae:95:c2:f1:d0:a2:ba:15:8c:96:e6:96: 1f:aa:30:bc:3b:c6:1d:fc:92:c7:5a:9b:dc:71:26:66:c2:54: d7:1b:07:f8:5d:55:87:5c:ce:57:dc:2c:b5:64:48:14:ca:b5: 18:4a:1b:cb:98:6c:a4:88:af:81:c4:df:28:78:d5:fc:31:23: e3:56:59:4b:41:2d:d5:35:67:3b:5e:eb:22:1d:93:ed:67:3c: df:3c:97:45:6b:57:c3:ac:a8:1e:e7:11:03:fe:d0:ba:d7:9c: 71:c2:f2:d2:54:38:ce:10:32:7a:ec:dd:95:39:b1:4c:99:c3: 8a:4b:73:01:a2:3f:e0:3f:97:a5:5d:46:44:a5:fe:4a:e6:80: 49:13:c9:6d:e8:43:fd:c3:d8:83:46:aa:cd:a0:05:61:a0:28: 5d:13:9b:c7:f5:43:86:0c:fc:d1:2d:68:f9:a5:6a:09:36:60: cc:32:00:9f:40:cf:27:00:43:cb:ac:ee:9c:23:60:f5:a7:c0: 46:af:c8:ba:ca:c0:4d:2e:6e:74:18:ff:f3:89:ed:8c:aa:77: f3:e9:31:58 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUeo24dc5JdDuKdz826GBg0webRRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5RDIxQjA3MDIxMDVENEFFRTdCMjY1QjM5NzVEMzQx NTRCMUMwNjAeFw0yNTExMjUxNzEyNTdaFw0yNjExMjQxNzE3NTdaMDMxMTAvBgNV BAMTKENGMjA5NDNFODI5Q0UxOUE2NjA3RDA2RkVDQjk4OURBNkMyQzMxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTzcHF4SCz9/qoBBO4A0n32uRz blAUeCgZO8wxHiYg/ayr8CHl3d8pNQwNqPpuz9HOVuaEhlGGRbfEV5AXTbl4rA/2 xBobKf5JPkGwStSFSbLNyp8LJb2sgUFb2srTO74vx0n4pLUtQlsa5invU5asxcMz GWNNnph88N3cZfNlxJV4jbyw9qLooE+riC9/iuwokTYw8BOZtO+9omIm5eyzoBWf A8CIgkFKHyH4frHZB43JOYAazrrYVqWnEIU5LdM2ICmyEi2CfpuwU6759LmMylfg 74K52F2yVKdEDmwL2aAsNwWsO75vFzwGHVLrEC0VLdW79ewfHF0OimgyMY3JAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUzyCUPoKc4ZpmB9Bv7LmJ2mwsMVkwHwYDVR0j BBgwFoAUyJ0hsHAhBdSu57Jls5ddNBVLHAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD RFQvMC9DODlEMjFCMDcwMjEwNUQ0QUVFN0IyNjVCMzk3NUQzNDE1NEIxQzA2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OUQyMUIwNzAyMTA1RDRB RUU3QjI2NUIzOTc1RDM0MTU0QjFDMDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv MzIzODMwMzQzYTMzMzM2MjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMjM2 MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEM7AwDQYJKoZIhvcNAQELBQADggEBACty4QwzcXLH QtOvfu3DoeC8Mtx1fBCV+FXjYPg9YfX8bVo/14qthLuUGa6VwvHQoroVjJbmlh+q MLw7xh38ksdam9xxJmbCVNcbB/hdVYdczlfcLLVkSBTKtRhKG8uYbKSIr4HE3yh4 1fwxI+NWWUtBLdU1Zzte6yIdk+1nPN88l0VrV8OsqB7nEQP+0LrXnHHC8tJUOM4Q Mnrs3ZU5sUyZw4pLcwGiP+A/l6VdRkSl/krmgEkTyW3oQ/3D2INGqs2gBWGgKF0T m8f1Q4YM/NEtaPmlagk2YMwyAJ9AzycAQ8us7pwjYPWnwEavyLrKwE0ubnQY//OJ 7Yyqd/PpMVg= -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:17 2025 by rpki-client