This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a653030303a3a2f33362d3336203d3e20323633303539.roa File: 323830343a3933343a653030303a3a2f33362d3336203d3e20323633303539.roa (raw, json) Hash identifier: y2rG4oW5R/gfFDFwjBU43G8+XKz63KKGPxkjOuRHaaU= Subject key identifier: 48:E9:6E:20:A6:6E:F5:CB:A6:F3:F9:2A:6F:D9:24:9B:D3:18:EE:ED Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 7F6D10DFF5CC8B58FF78B033FF1530EBAFB3FC75 Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a653030303a3a2f33362d3336203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:34 +0000 ROA not before: Mon 10 Nov 2025 18:33:34 +0000 ROA not after: Mon 09 Nov 2026 18:38:34 +0000 asID: 263059 IP address blocks: 2804:934:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6d:10:df:f5:cc:8b:58:ff:78:b0:33:ff:15:30:eb:af:b3:fc:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:34 2025 GMT Not After : Nov 9 18:38:34 2026 GMT Subject: CN=48E96E20A66EF5CBA6F3F92A6FD9249BD318EEED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:d6:66:32:37:ef:5e:a4:b4:73:ab:fb:eb: 2c:21:98:7c:ec:52:f6:e3:7d:ea:03:82:a5:ea:cd: 56:60:f2:d5:19:86:be:3e:1e:68:25:42:7f:e2:8d: 8a:d2:86:b4:9c:cb:88:b3:7d:b4:0e:f6:8c:31:d1: b6:80:ea:b3:01:bc:36:ff:52:9b:21:61:85:ec:6e: f6:26:52:ad:48:52:21:a6:84:4a:83:2f:6d:ca:c2: 82:c7:09:f1:db:0f:a9:3a:e5:07:f2:d0:3f:20:8f: 46:96:d8:41:fa:3b:da:bb:d3:82:67:27:69:a5:68: ae:1c:e0:c8:67:bd:ae:99:71:de:1c:c3:14:06:c3: 22:0e:98:59:96:24:aa:c7:c9:97:ee:c5:e7:cc:b3: a5:0d:82:f5:1e:33:46:4e:6e:eb:60:bf:d0:fb:5d: ef:5f:73:2d:4f:01:8c:56:3d:e4:e4:04:26:07:88: 09:07:f0:3c:ac:78:f7:ad:0e:30:94:80:b4:47:28: 4c:b0:32:cd:c0:f5:10:c3:28:c2:04:4d:5d:c1:2c: 08:f1:d6:3a:e5:86:36:3f:66:fd:af:4b:a8:98:cf: 9a:b8:64:fc:7d:31:ca:1b:2d:af:b3:12:33:a1:a4: cc:f8:93:ca:ba:b1:95:7c:bf:79:6e:36:a1:b4:0b: 48:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E9:6E:20:A6:6E:F5:CB:A6:F3:F9:2A:6F:D9:24:9B:D3:18:EE:ED X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a653030303a3a2f33362d3336203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:934:e000::/36 Signature Algorithm: sha256WithRSAEncryption 70:23:d3:58:c8:d6:e8:e6:63:ba:55:56:38:37:f9:f9:34:a8: 49:70:19:4e:32:0c:4c:08:55:47:d2:b7:97:a1:9b:79:5e:d0: b3:cd:34:b0:ac:1e:77:de:ad:19:0e:38:28:4b:54:a3:df:1a: f0:b7:a9:fe:94:10:c8:32:0e:60:0c:8f:8c:2d:fc:99:08:11: cc:66:7e:f0:c0:4f:65:52:b2:75:cb:67:8a:a5:71:87:93:c8: a1:43:32:1c:82:38:5d:ad:94:f7:1d:c4:32:0f:3d:59:d4:e2: 01:7b:a8:2a:79:26:ae:ad:b7:c9:d0:ca:5f:4b:cf:d7:48:4b: 2b:9b:bc:9f:3b:e0:61:f1:91:32:78:6f:75:51:91:94:38:64: 16:ba:91:78:85:a8:11:d1:cd:05:bc:2c:6c:ec:97:bc:fe:9e: 96:4b:b3:30:63:f2:1d:62:8a:83:9e:92:ca:8a:1a:d5:8c:b3: d3:6a:9d:9b:72:88:f9:2c:7f:dd:9b:c7:87:52:c8:88:d5:29: e4:a8:e7:09:bc:1e:c1:8b:9e:db:02:ef:b0:d3:0f:3b:af:cd: 65:05:37:a5:a9:0d:f1:7d:ff:7c:d8:83:aa:be:ab:cf:c9:a0: a3:3a:d1:a8:eb:9a:cc:b6:92:ba:ae:ab:8b:df:38:61:50:98: 23:19:67:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf20Q3/XMi1j/eLAz/xUw66+z/HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzRaFw0yNjExMDkxODM4MzRaMDMxMTAvBgNV BAMTKDQ4RTk2RTIwQTY2RUY1Q0JBNkYzRjkyQTZGRDkyNDlCRDMxOEVFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQd9ZmMjfvXqS0c6v76ywhmHzs UvbjfeoDgqXqzVZg8tUZhr4+HmglQn/ijYrShrScy4izfbQO9owx0baA6rMBvDb/ UpshYYXsbvYmUq1IUiGmhEqDL23KwoLHCfHbD6k65Qfy0D8gj0aW2EH6O9q704Jn J2mlaK4c4Mhnva6Zcd4cwxQGwyIOmFmWJKrHyZfuxefMs6UNgvUeM0ZObutgv9D7 Xe9fcy1PAYxWPeTkBCYHiAkH8DysePetDjCUgLRHKEywMs3A9RDDKMIETV3BLAjx 1jrlhjY/Zv2vS6iYz5q4ZPx9McobLa+zEjOhpMz4k8q6sZV8v3luNqG0C0hjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSOluIKZu9cum8/kqb9kkm9MY7u0wHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzIzODMwMzQzYTM5MzMzNDNhNjUzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl MjAzMjM2MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAk04DANBgkqhkiG9w0BAQsFAAOC AQEAcCPTWMjW6OZjulVWODf5+TSoSXAZTjIMTAhVR9K3l6GbeV7Qs800sKwed96t GQ44KEtUo98a8Lep/pQQyDIOYAyPjC38mQgRzGZ+8MBPZVKydctniqVxh5PIoUMy HII4Xa2U9x3EMg89WdTiAXuoKnkmrq23ydDKX0vP10hLK5u8nzvgYfGRMnhvdVGR lDhkFrqReIWoEdHNBbwsbOyXvP6elkuzMGPyHWKKg56Syooa1Yyz02qdm3KI+Sx/ 3ZvHh1LIiNUp5KjnCbwewYue2wLvsNMPO6/NZQU3pakN8X3/fNiDqr6rz8mgozrR qOuazLaSuq6ri984YVCYIxlnng== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:15 2025 by rpki-client