This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa File: 323830343a3933343a3a2f33322d3332203d3e20323633303539.roa (raw, json) Hash identifier: Q4+oJ5SbnMsYmnGa/eC4rIxhwKsA9XKf9nE2j0WyPuI= Subject key identifier: 5B:2C:8D:6C:08:66:2F:04:F7:54:15:0A:1F:DE:89:F5:44:6D:4C:0B Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 419B38686EF59E7A91DA1EE245BB670D7CF19734 Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:38 +0000 ROA not before: Mon 10 Nov 2025 18:33:38 +0000 ROA not after: Mon 09 Nov 2026 18:38:38 +0000 asID: 263059 IP address blocks: 2804:934::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9b:38:68:6e:f5:9e:7a:91:da:1e:e2:45:bb:67:0d:7c:f1:97:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:38 2025 GMT Not After : Nov 9 18:38:38 2026 GMT Subject: CN=5B2C8D6C08662F04F754150A1FDE89F5446D4C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:d5:86:37:37:ae:72:97:bc:77:d3:31:e1: 13:c0:a8:43:d1:7f:71:92:63:7b:d9:1b:39:63:3c: 2a:72:6e:b2:31:2a:0b:cd:5d:f4:39:45:1a:10:a6: aa:96:70:bd:c2:5b:28:96:ba:fb:fe:24:13:39:4d: d0:b9:25:3f:08:7c:b8:6c:a7:6d:ad:e9:6d:67:35: 0d:19:e8:e8:2a:ea:26:47:b3:ee:01:a5:29:e9:fe: ed:d8:52:ba:17:e8:be:a6:d8:99:5a:ad:8f:d4:4b: 59:ad:b2:d2:ba:19:ba:84:79:15:11:0b:78:95:32: 48:0b:6f:ba:6f:dd:26:12:92:5d:e9:12:0f:2a:76: b0:8c:7d:4e:42:82:d4:f4:a0:71:99:02:a0:bf:39: f7:0d:22:81:a4:34:d0:6f:fa:b2:90:d6:ef:95:d0: b2:43:a6:7a:64:eb:60:29:03:dd:8d:8a:e2:9d:13: d6:9a:47:90:99:37:38:37:d6:ac:cb:88:26:b5:b9: da:01:b0:4b:ea:44:d7:97:44:e7:9f:c4:e4:21:6a: 0e:26:f3:09:77:7b:1e:fa:f0:f5:ff:aa:47:83:6b: 69:22:ef:87:a3:79:c9:09:0c:42:b1:c3:79:c2:32: a9:81:55:0c:f0:89:05:54:11:ac:ac:26:42:eb:ee: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2C:8D:6C:08:66:2F:04:F7:54:15:0A:1F:DE:89:F5:44:6D:4C:0B X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:934::/32 Signature Algorithm: sha256WithRSAEncryption aa:00:a5:c8:27:d6:d4:c9:f2:d6:33:e2:91:42:65:da:89:5d: 41:94:42:38:a7:14:b6:03:8c:75:c7:be:69:53:ac:d2:fd:b6: ea:d0:c8:de:71:3e:69:0c:62:34:7b:6a:6a:87:5f:53:d6:7e: 9d:cc:d1:f9:98:24:10:1a:d9:f3:94:87:bd:26:a5:d8:2d:9d: fe:c0:38:8a:ae:e8:41:5d:c4:b5:5c:b6:25:7a:77:5b:ef:c8: e8:87:27:2a:6f:6a:78:68:bd:b6:da:48:4a:d4:c2:db:55:8a: 61:6b:fc:0c:35:88:c3:d1:5d:6c:6f:76:73:3a:55:31:bb:64: 6c:af:d1:e3:53:b8:1b:6c:7c:32:61:08:e0:f6:52:e4:39:74: ca:19:25:ba:ae:83:43:66:ca:d6:37:ae:91:2e:17:09:03:ec: c6:3a:22:67:4f:6f:b3:24:2d:52:98:e2:d4:d5:d4:1f:4f:b7: de:db:de:17:03:5d:5d:b4:27:73:a1:a8:6a:da:3a:38:b7:db: 17:e9:c9:0f:68:7f:0b:9a:4c:d7:b2:16:c1:b9:25:5d:ba:0d: 10:3c:3a:ab:1c:66:6e:e6:65:c9:d5:03:0f:d0:0e:d5:c3:fc: d1:8c:8d:b9:27:dc:95:8f:30:23:8b:a7:4b:1d:84:df:e7:df: a1:df:59:86 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUQZs4aG71nnqR2h7iRbtnDXzxlzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzhaFw0yNjExMDkxODM4MzhaMDMxMTAvBgNV BAMTKDVCMkM4RDZDMDg2NjJGMDRGNzU0MTUwQTFGREU4OUY1NDQ2RDRDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ONWGNzeucpe8d9Mx4RPAqEPR f3GSY3vZGzljPCpybrIxKgvNXfQ5RRoQpqqWcL3CWyiWuvv+JBM5TdC5JT8IfLhs p22t6W1nNQ0Z6Ogq6iZHs+4BpSnp/u3YUroX6L6m2JlarY/US1mtstK6GbqEeRUR C3iVMkgLb7pv3SYSkl3pEg8qdrCMfU5CgtT0oHGZAqC/OfcNIoGkNNBv+rKQ1u+V 0LJDpnpk62ApA92NiuKdE9aaR5CZNzg31qzLiCa1udoBsEvqRNeXROefxOQhag4m 8wl3ex768PX/qkeDa2ki74ejeckJDEKxw3nCMqmBVQzwiQVUEaysJkLr7qHnAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUWyyNbAhmLwT3VBUKH96J9URtTAswHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzIzODMwMzQzYTM5MzMzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzMw MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgECTQwDQYJKoZIhvcNAQELBQADggEBAKoApcgn1tTJ 8tYz4pFCZdqJXUGUQjinFLYDjHXHvmlTrNL9turQyN5xPmkMYjR7amqHX1PWfp3M 0fmYJBAa2fOUh70mpdgtnf7AOIqu6EFdxLVctiV6d1vvyOiHJypvanhovbbaSErU wttVimFr/Aw1iMPRXWxvdnM6VTG7ZGyv0eNTuBtsfDJhCOD2UuQ5dMoZJbqug0Nm ytY3rpEuFwkD7MY6ImdPb7MkLVKY4tTV1B9Pt97b3hcDXV20J3OhqGraOji32xfp yQ9ofwuaTNeyFsG5JV26DRA8OqscZm7mZcnVAw/QDtXD/NGMjbkn3JWPMCOLp0sd hN/n36HfWYY= -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:50 2025 by rpki-client