This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa File: 323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa (raw, json) Hash identifier: dS3PLqe6ITWbpuOrqJldTUo0U6uZBZvgZH8J2gnV+L4= Subject key identifier: 52:08:79:91:05:35:F9:4B:CC:B6:4D:12:23:55:88:37:FE:D4:BE:2C Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 6276496EBCDCE20EB0FA292731879716C36A7AAB Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:37 +0000 ROA not before: Mon 10 Nov 2025 18:33:37 +0000 ROA not after: Mon 09 Nov 2026 18:38:37 +0000 asID: 263059 IP address blocks: 2804:934:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:76:49:6e:bc:dc:e2:0e:b0:fa:29:27:31:87:97:16:c3:6a:7a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:37 2025 GMT Not After : Nov 9 18:38:37 2026 GMT Subject: CN=520879910535F94BCCB64D1223558837FED4BE2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7a:59:af:0a:f4:4c:54:2c:51:f5:4c:d8:47: 9c:2f:3f:cf:0e:af:00:45:c9:bc:50:0b:0d:59:0a: 8a:29:78:fa:1a:2e:7f:f5:0f:48:fa:83:1f:52:f8: c8:bb:10:6d:16:72:12:dc:7d:9a:97:78:80:e3:5c: 0f:fe:d0:0b:b8:b4:b9:7e:a8:05:4f:0b:59:c2:3d: 1d:10:d6:d8:98:89:a3:58:1b:5a:48:41:05:94:83: 90:60:ef:3b:3e:55:5b:15:96:e0:bb:12:6e:6c:02: fd:13:3c:0c:0d:5c:89:09:bd:26:c9:82:13:5a:78: 40:15:08:5e:8c:61:d2:18:b3:6c:c9:63:8a:76:cd: 26:fa:b5:06:22:89:93:31:46:5b:23:c4:ee:45:f8: d7:f9:8f:bc:78:b2:2d:5d:6a:d0:0b:f7:8f:0c:9c: f2:be:64:b9:47:ef:87:f0:62:df:54:0b:5a:e2:cf: c4:b7:52:75:a6:36:a2:2e:69:37:f1:b9:dc:78:de: bd:91:b2:58:49:36:9f:30:a2:27:41:af:4f:1e:7b: b6:7d:b0:6d:b3:4b:bc:a4:92:e4:45:ea:14:c8:52: c2:97:5d:f0:24:a6:4a:63:1c:8d:5d:0f:fe:ae:7b: b6:d5:1e:6f:7e:77:64:17:84:7c:6c:65:0a:b3:da: 29:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:08:79:91:05:35:F9:4B:CC:B6:4D:12:23:55:88:37:FE:D4:BE:2C X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:934:d000::/36 Signature Algorithm: sha256WithRSAEncryption c6:67:f3:31:0f:bb:da:1b:dc:57:8a:bc:97:00:d5:b7:b8:98: 97:68:52:2d:0e:a1:24:cd:eb:c7:a9:05:4b:54:81:41:55:b9: aa:52:e4:41:15:4c:f9:82:a4:da:44:85:6d:c4:d0:30:3f:78: eb:7a:50:8a:b4:1e:8d:bb:6b:7f:67:ae:1b:11:9a:3a:6f:a1: 0c:b0:94:13:ba:36:b5:04:e7:19:6f:85:44:2f:8d:30:a0:61: 61:b2:c7:be:67:7e:9a:90:1a:f2:22:e6:e3:99:8b:c8:9e:26: 27:7e:29:c0:ef:a9:6c:ea:c5:95:1d:26:47:dc:0e:1a:83:38: 7f:ca:94:7f:19:79:8e:c4:ca:da:4e:ef:73:39:73:b6:5e:1b: 9f:66:44:e5:96:62:13:e7:8a:ee:b3:55:a9:3b:92:d3:2b:42: c9:e9:68:17:04:1e:1a:f6:8d:c4:a2:8c:62:77:88:75:63:c4: 15:12:79:19:3d:3c:55:0a:f3:ed:f7:4a:56:f9:7b:ba:eb:58: ef:e5:3e:81:23:09:4c:c8:e1:fd:a0:3a:a7:a2:31:bc:83:c1: ab:2c:c5:08:7a:5f:12:5f:b4:77:c3:c2:ef:e8:4f:9a:5e:97: 66:59:e8:93:58:92:3b:c0:6d:f5:3e:54:35:7b:09:00:7d:dd: fb:82:e8:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYnZJbrzc4g6w+iknMYeXFsNqeqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzdaFw0yNjExMDkxODM4MzdaMDMxMTAvBgNV BAMTKDUyMDg3OTkxMDUzNUY5NEJDQ0I2NEQxMjIzNTU4ODM3RkVENEJFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEelmvCvRMVCxR9UzYR5wvP88O rwBFybxQCw1ZCoopePoaLn/1D0j6gx9S+Mi7EG0WchLcfZqXeIDjXA/+0Au4tLl+ qAVPC1nCPR0Q1tiYiaNYG1pIQQWUg5Bg7zs+VVsVluC7Em5sAv0TPAwNXIkJvSbJ ghNaeEAVCF6MYdIYs2zJY4p2zSb6tQYiiZMxRlsjxO5F+Nf5j7x4si1datAL948M nPK+ZLlH74fwYt9UC1riz8S3UnWmNqIuaTfxudx43r2RslhJNp8woidBr08ee7Z9 sG2zS7ykkuRF6hTIUsKXXfAkpkpjHI1dD/6ue7bVHm9+d2QXhHxsZQqz2ik5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUgh5kQU1+UvMtk0SI1WIN/7UviwwHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzIzODMwMzQzYTM5MzMzNDNhNjQzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl MjAzMjM2MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAk00DANBgkqhkiG9w0BAQsFAAOC AQEAxmfzMQ+72hvcV4q8lwDVt7iYl2hSLQ6hJM3rx6kFS1SBQVW5qlLkQRVM+YKk 2kSFbcTQMD9463pQirQejbtrf2euGxGaOm+hDLCUE7o2tQTnGW+FRC+NMKBhYbLH vmd+mpAa8iLm45mLyJ4mJ34pwO+pbOrFlR0mR9wOGoM4f8qUfxl5jsTK2k7vczlz tl4bn2ZE5ZZiE+eK7rNVqTuS0ytCyeloFwQeGvaNxKKMYneIdWPEFRJ5GT08VQrz 7fdKVvl7uutY7+U+gSMJTMjh/aA6p6IxvIPBqyzFCHpfEl+0d8PC7+hPml6XZlno k1iSO8Bt9T5UNXsJAH3d+4Lo+g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:07 2025 by rpki-client