This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa File: 323830343a3933343a3a2f33362d3336203d3e20323633303539.roa (raw, json) Hash identifier: OBvBWpW+iwOuvdBPafjUVHec8fduM65JqiNzRYF1JYY= Subject key identifier: 19:38:92:B5:96:27:35:6D:8F:98:A3:5C:78:08:DD:3F:BF:28:99:48 Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 6539684182BCE0548B27D83DEB2A4DB64098ADFE Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:38 +0000 ROA not before: Mon 10 Nov 2025 18:33:38 +0000 ROA not after: Mon 09 Nov 2026 18:38:38 +0000 asID: 263059 IP address blocks: 2804:934::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:39:68:41:82:bc:e0:54:8b:27:d8:3d:eb:2a:4d:b6:40:98:ad:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:38 2025 GMT Not After : Nov 9 18:38:38 2026 GMT Subject: CN=193892B59627356D8F98A35C7808DD3FBF289948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:37:aa:ec:6e:f3:51:f7:77:27:b6:d2:d5: 48:a9:db:ed:3d:6d:0a:30:66:0f:f5:a1:89:07:bf: 97:4e:a5:b2:08:ad:1b:6a:be:90:24:48:f4:8d:81: 7d:8c:5b:34:c1:96:e2:6e:62:bc:29:b6:01:b9:fd: 94:58:d6:6b:77:e1:b6:17:e8:26:cb:ac:63:85:c8: 4b:11:32:41:8d:07:a4:ac:9f:f2:c2:0a:70:bd:13: ea:5d:d2:80:d1:1c:be:8f:d1:bf:32:61:2e:c4:74: c3:13:8a:8a:4a:95:ce:8a:b6:3f:0f:f4:50:29:10: 38:e4:16:92:c2:e1:e3:41:b2:34:a7:72:09:54:10: 6b:90:c7:b8:0a:e5:be:4c:d0:3c:dc:4e:10:e2:d3: 00:40:ae:ce:ee:a1:3e:ce:25:ec:db:59:55:74:04: f8:dc:e9:1a:1d:4f:22:a4:15:3a:4d:70:ee:cf:10: 55:1a:ab:80:75:46:41:9b:32:ac:e7:88:e2:f3:d0: 44:62:9e:cf:08:0e:a1:d9:8e:e9:1b:29:63:e2:fe: 56:c5:57:fa:64:37:21:6c:04:e0:72:53:14:da:1a: aa:b9:da:08:85:21:24:e7:a0:61:3e:a0:52:eb:3d: e2:98:9c:b7:cb:b6:cf:ff:03:3d:f0:3e:fb:28:6b: 56:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:38:92:B5:96:27:35:6D:8F:98:A3:5C:78:08:DD:3F:BF:28:99:48 X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:934::/36 Signature Algorithm: sha256WithRSAEncryption b2:5c:c1:4f:28:7a:45:87:82:32:c9:d9:8a:74:58:68:3c:66: 53:70:3a:1d:14:d8:67:d5:87:96:c0:24:1e:9c:80:60:c2:61: ca:2f:37:ac:eb:4f:3f:9c:7e:83:0f:57:9f:1e:1a:0a:85:fc: 6e:98:47:77:9f:0c:91:1d:82:9f:13:96:bf:51:18:d4:cc:4f: ee:84:ea:e2:f0:1d:af:01:7b:06:e8:74:4c:85:76:28:5d:23: 86:30:2e:15:93:22:29:f6:8e:6a:47:33:68:85:94:80:7e:11: 67:1c:a2:db:1b:ee:f3:ff:7f:e7:7f:00:6d:af:19:cb:22:32: 89:47:ef:88:e4:45:8c:a1:3b:12:bf:ff:4d:c0:ce:ae:95:27: 53:42:87:66:00:85:fb:aa:c5:6e:13:94:9d:12:d0:55:fc:8c: 23:c1:8d:ce:2d:d7:a9:ab:5c:1b:5d:02:f7:d2:87:3b:2e:ed: 84:36:0d:14:0a:af:ec:dc:b6:a4:3c:4f:70:25:0d:0d:c3:c4: e6:4a:9f:b2:4d:83:2f:cd:2b:22:55:5d:4c:6f:e4:5c:e6:9d: 54:64:35:87:04:b5:4f:3f:e8:cd:82:b2:ee:51:c5:91:58:8e: f7:59:50:89:bd:7d:c4:50:31:47:98:c3:c6:c0:9e:f6:f7:47: de:78:f2:3d -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUZTloQYK84FSLJ9g96ypNtkCYrf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzhaFw0yNjExMDkxODM4MzhaMDMxMTAvBgNV BAMTKDE5Mzg5MkI1OTYyNzM1NkQ4Rjk4QTM1Qzc4MDhERDNGQkYyODk5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9Deq7G7zUfd3J7bS1Uip2+09 bQowZg/1oYkHv5dOpbIIrRtqvpAkSPSNgX2MWzTBluJuYrwptgG5/ZRY1mt34bYX 6CbLrGOFyEsRMkGNB6Ssn/LCCnC9E+pd0oDRHL6P0b8yYS7EdMMTiopKlc6Ktj8P 9FApEDjkFpLC4eNBsjSncglUEGuQx7gK5b5M0DzcThDi0wBArs7uoT7OJezbWVV0 BPjc6RodTyKkFTpNcO7PEFUaq4B1RkGbMqzniOLz0ERins8IDqHZjukbKWPi/lbF V/pkNyFsBOByUxTaGqq52giFISTnoGE+oFLrPeKYnLfLts//Az3wPvsoa1ZBAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUGTiStZYnNW2PmKNceAjdP78omUgwHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzIzODMwMzQzYTM5MzMzNDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzYzMzMw MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwDgQCAAIwCAMGBCgECTQAMA0GCSqGSIb3DQEBCwUAA4IBAQCyXMFPKHpF h4IyydmKdFhoPGZTcDodFNhn1YeWwCQenIBgwmHKLzes608/nH6DD1efHhoKhfxu mEd3nwyRHYKfE5a/URjUzE/uhOri8B2vAXsG6HRMhXYoXSOGMC4VkyIp9o5qRzNo hZSAfhFnHKLbG+7z/3/nfwBtrxnLIjKJR++I5EWMoTsSv/9NwM6ulSdTQodmAIX7 qsVuE5SdEtBV/IwjwY3OLdepq1wbXQL30oc7Lu2ENg0UCq/s3LakPE9wJQ0Nw8Tm Sp+yTYMvzSsiVV1Mb+Rc5p1UZDWHBLVPP+jNgrLuUcWRWI73WVCJvX3EUDFHmMPG wJ7290feePI9 -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:02 2025 by rpki-client