This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa File: 323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa (raw, json) Hash identifier: ZPKCUReI1+pX9MAG6Gu3m1xHLIVTZy46ymrrGyAqcvs= Subject key identifier: 95:D1:66:BB:B5:50:3C:99:B6:70:A7:90:58:D9:B9:8C:5D:BD:C2:66 Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 2DC1E7A8F3A135F0AA9BF9404F7D1B546DBFFAF4 Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:36 +0000 ROA not before: Mon 10 Nov 2025 18:33:36 +0000 ROA not after: Mon 09 Nov 2026 18:38:36 +0000 asID: 263059 IP address blocks: 2804:934:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c1:e7:a8:f3:a1:35:f0:aa:9b:f9:40:4f:7d:1b:54:6d:bf:fa:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:36 2025 GMT Not After : Nov 9 18:38:36 2026 GMT Subject: CN=95D166BBB5503C99B670A79058D9B98C5DBDC266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:fc:58:4f:5e:5e:89:eb:e1:82:e3:40:26: ad:e2:72:6c:2e:32:b6:10:9b:55:e5:b6:72:92:0b: cf:10:25:a0:d6:24:93:6d:d4:75:49:ed:2a:01:98: d6:f0:be:58:3a:7d:c3:75:50:f4:aa:a2:c8:c0:20: 70:3d:42:4c:4d:5d:ee:b4:01:28:a5:2f:4c:7e:b0: 81:54:ea:f3:e1:a2:4d:5c:82:3c:93:88:e4:97:f9: 57:d1:65:12:a4:c5:66:ec:19:1e:73:9e:e6:42:2a: 92:55:4d:a0:a0:5e:47:13:99:90:16:75:e8:41:93: d7:23:1b:cb:92:6c:0a:7e:fe:d5:46:61:0a:84:4b: d8:e9:86:ee:fd:34:da:46:b2:4e:af:0f:3c:88:40: 7a:fd:42:2e:fb:40:bc:6b:fb:f7:28:ff:e6:8c:2b: 72:e9:d7:6f:63:7b:29:18:5c:50:b8:b9:b4:55:99: f5:99:c0:8f:50:ed:fa:17:ff:47:89:26:2b:ac:5c: 26:21:2a:c0:98:36:23:f1:c9:c3:c5:d7:07:e8:ce: 1a:62:41:76:98:33:9b:0a:5c:c7:b0:5e:93:40:d7: 84:e0:13:d1:31:44:b5:6c:18:32:9d:53:5b:9b:4d: 6a:70:7f:8d:f4:9f:87:60:7d:da:72:c5:50:2a:e8: a7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D1:66:BB:B5:50:3C:99:B6:70:A7:90:58:D9:B9:8C:5D:BD:C2:66 X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:934:b000::/36 Signature Algorithm: sha256WithRSAEncryption 8c:6e:ee:4c:af:6f:76:4b:4a:80:0f:f5:1e:f9:30:db:bd:0b: 7e:0a:06:82:3a:df:9f:96:5f:bd:70:4f:5d:0c:95:7f:bb:9b: bb:9b:ff:63:96:2b:7b:fa:c7:64:c4:f1:41:05:f2:67:e3:2e: 5c:1e:66:d3:39:cd:8a:c8:33:78:8c:2e:23:52:22:3c:71:b8: 5a:aa:74:38:79:18:23:17:bb:72:b6:51:f9:f0:36:55:f8:93: e7:5a:d8:b6:77:81:1d:15:84:32:67:f8:59:34:d7:cf:56:b7: 1a:42:fb:d8:8e:10:77:69:f4:b2:b8:ce:1d:9c:e7:06:f1:3d: 62:f6:94:a5:d6:a2:78:15:7a:36:f4:2c:58:84:92:44:11:e7: 7d:4e:18:c3:0b:95:ed:92:c2:e5:69:1f:41:27:d8:4b:37:81: 83:60:32:7f:86:f7:49:f7:0b:57:48:47:f1:5a:69:bb:8c:df: c1:2c:5d:28:4d:3a:99:f3:f3:23:3a:e2:d1:10:12:05:55:42: 5c:12:d6:e3:bb:dd:98:c7:b9:d3:35:73:15:83:ff:fb:ba:d6: e3:7d:60:12:2a:75:70:e3:f3:09:76:8e:91:62:0c:6c:83:b9: e8:8a:18:c5:d0:88:25:26:1d:df:df:30:73:4a:17:48:c0:75: 4a:b9:98:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULcHnqPOhNfCqm/lAT30bVG2/+vQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzZaFw0yNjExMDkxODM4MzZaMDMxMTAvBgNV BAMTKDk1RDE2NkJCQjU1MDNDOTlCNjcwQTc5MDU4RDlCOThDNURCREMyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7P/xYT15eievhguNAJq3icmwu MrYQm1XltnKSC88QJaDWJJNt1HVJ7SoBmNbwvlg6fcN1UPSqosjAIHA9QkxNXe60 ASilL0x+sIFU6vPhok1cgjyTiOSX+VfRZRKkxWbsGR5znuZCKpJVTaCgXkcTmZAW dehBk9cjG8uSbAp+/tVGYQqES9jphu79NNpGsk6vDzyIQHr9Qi77QLxr+/co/+aM K3Lp129jeykYXFC4ubRVmfWZwI9Q7foX/0eJJiusXCYhKsCYNiPxycPF1wfozhpi QXaYM5sKXMewXpNA14TgE9ExRLVsGDKdU1ubTWpwf430n4dgfdpyxVAq6KdlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUldFmu7VQPJm2cKeQWNm5jF29wmYwHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzIzODMwMzQzYTM5MzMzNDNhNjIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl MjAzMjM2MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAk0sDANBgkqhkiG9w0BAQsFAAOC AQEAjG7uTK9vdktKgA/1Hvkw270LfgoGgjrfn5ZfvXBPXQyVf7ubu5v/Y5Yre/rH ZMTxQQXyZ+MuXB5m0znNisgzeIwuI1IiPHG4Wqp0OHkYIxe7crZR+fA2VfiT51rY tneBHRWEMmf4WTTXz1a3GkL72I4Qd2n0srjOHZznBvE9YvaUpdaieBV6NvQsWISS RBHnfU4YwwuV7ZLC5WkfQSfYSzeBg2Ayf4b3SfcLV0hH8Vppu4zfwSxdKE06mfPz Izri0RASBVVCXBLW47vdmMe50zVzFYP/+7rW431gEip1cOPzCXaOkWIMbIO56IoY xdCIJSYd398wc0oXSMB1SrmYlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:00 2025 by rpki-client