This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa File: 323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa (raw, json) Hash identifier: kyQ5ZZE2Q8hj74q+Sn1Iji0GD/Dl6oZIlg/VQviERv4= Subject key identifier: DD:F3:34:7C:0D:37:DB:74:FD:91:32:FD:71:EB:FB:D8:4D:E2:E7:61 Certificate issuer: /CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Certificate serial: 6055F3F900C0ADFFD3B1C1B39124BCBC3EFCDC4C Authority key identifier: BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa Signing time: Mon 10 Nov 2025 18:38:37 +0000 ROA not before: Mon 10 Nov 2025 18:33:37 +0000 ROA not after: Mon 09 Nov 2026 18:38:37 +0000 asID: 263059 IP address blocks: 2804:934:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:55:f3:f9:00:c0:ad:ff:d3:b1:c1:b3:91:24:bc:bc:3e:fc:dc:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0 Validity Not Before: Nov 10 18:33:37 2025 GMT Not After : Nov 9 18:38:37 2026 GMT Subject: CN=DDF3347C0D37DB74FD9132FD71EBFBD84DE2E761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:66:2e:a5:eb:ac:bb:9a:24:00:52:b6:12: ab:9f:b6:ea:73:6b:23:bd:b3:3c:fb:e5:62:b3:3b: e8:fb:50:06:52:77:0a:af:8e:73:2a:c5:51:49:de: 1e:b4:85:9d:2c:af:29:62:64:f9:68:91:48:bf:80: 2e:8a:56:1f:ef:49:70:03:9e:f7:dd:9f:bf:8c:eb: c0:98:05:c4:84:b7:33:f4:39:b1:2f:de:40:52:cb: 9c:9f:27:57:33:8b:9b:38:f2:fe:34:57:72:b3:74: 19:3e:a1:bd:74:80:16:86:4e:22:62:f5:1b:4e:83: cc:00:2f:94:a6:4d:53:d0:b0:91:9a:cb:f4:8a:65: 15:94:95:12:70:c3:97:5f:d2:81:c1:99:af:3c:16: ed:70:9f:09:36:2e:1d:85:2c:ec:87:a0:23:c1:16: b0:f8:38:f9:37:38:7e:57:17:16:bf:8b:a0:9a:75: 36:2f:ad:a0:b5:3c:0f:34:ef:e7:fb:0e:57:ac:78: 1e:3d:4a:93:ff:c0:d6:bc:4a:ce:0f:34:2f:2b:02: d4:97:2d:7e:50:46:bd:dc:e8:3a:4a:97:c3:1b:c4: 96:eb:ec:b2:3f:0c:e2:3a:fd:5f:e9:3a:d5:bf:7a: 23:ce:a4:aa:00:11:aa:57:22:c5:2f:58:f3:d9:3a: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F3:34:7C:0D:37:DB:74:FD:91:32:FD:71:EB:FB:D8:4D:E2:E7:61 X509v3 Authority Key Identifier: keyid:BF:59:D9:C0:FC:8C:C6:09:D1:BF:17:F9:78:30:58:5E:FB:7D:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF59D9C0FC8CC609D1BF17F97830585EFB7D39F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:934:f000::/36 Signature Algorithm: sha256WithRSAEncryption d5:af:a4:cd:e4:0b:c6:70:71:20:6c:fa:7e:c9:bd:dd:2a:6a: 7b:14:23:11:6e:eb:37:1f:9d:bc:0f:e4:d7:55:6b:ff:ca:bd: 44:16:f1:bf:d1:bb:a8:bd:fe:37:bd:eb:69:21:d1:2b:17:cf: 96:cb:eb:9b:4a:e6:fb:c5:f8:ff:47:59:1e:14:9e:a3:3f:70: d6:d3:7c:90:d7:e9:1a:88:fd:53:84:45:50:0a:b3:af:46:96: 53:91:59:34:03:d5:04:25:f6:f2:78:19:4c:c4:7a:6a:33:ce: ad:24:27:53:2c:f9:d9:cb:9d:d0:e4:c8:c4:5f:2c:6c:47:35: 8b:00:67:e9:2a:de:52:9d:e3:d1:6c:49:e2:7d:fd:c4:fc:6e: a3:ae:d5:ee:3e:26:98:c6:f7:a8:48:08:ad:3c:49:1f:e3:b8: d7:c0:07:ad:75:8f:05:86:32:bd:9e:8e:54:08:f6:03:d2:c5: 5f:32:75:b3:e1:79:77:ec:39:8f:5e:27:88:6b:42:52:aa:bf: 80:af:1e:2d:8c:65:e0:d6:4e:41:a5:c1:a3:f9:bc:34:e4:eb: 33:6f:59:17:8c:5d:84:c1:62:fa:69:91:10:eb:ac:7d:a0:3d: 09:5a:fb:34:2a:0a:ee:23:52:91:1c:76:27:c1:1a:00:6d:be: ac:3c:dc:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYFXz+QDArf/TscGzkSS8vD783EwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY1OUQ5QzBGQzhDQzYwOUQxQkYxN0Y5NzgzMDU4NUVG QjdEMzlGMDAeFw0yNTExMTAxODMzMzdaFw0yNjExMDkxODM4MzdaMDMxMTAvBgNV BAMTKERERjMzNDdDMEQzN0RCNzRGRDkxMzJGRDcxRUJGQkQ4NERFMkU3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJY2Yupeusu5okAFK2Equftupz ayO9szz75WKzO+j7UAZSdwqvjnMqxVFJ3h60hZ0sryliZPlokUi/gC6KVh/vSXAD nvfdn7+M68CYBcSEtzP0ObEv3kBSy5yfJ1czi5s48v40V3KzdBk+ob10gBaGTiJi 9RtOg8wAL5SmTVPQsJGay/SKZRWUlRJww5df0oHBma88Fu1wnwk2Lh2FLOyHoCPB FrD4OPk3OH5XFxa/i6CadTYvraC1PA807+f7DleseB49SpP/wNa8Ss4PNC8rAtSX LX5QRr3c6DpKl8MbxJbr7LI/DOI6/V/pOtW/eiPOpKoAEapXIsUvWPPZOhChAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3fM0fA0323T9kTL9cev72E3i52EwHwYDVR0j BBgwFoAUv1nZwPyMxgnRvxf5eDBYXvt9OfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u NnQvMC9CRjU5RDlDMEZDOENDNjA5RDFCRjE3Rjk3ODMwNTg1RUZCN0QzOUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNTlEOUMwRkM4Q0M2MDlE MUJGMTdGOTc4MzA1ODVFRkI3RDM5RjAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv MzIzODMwMzQzYTM5MzMzNDNhNjYzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl MjAzMjM2MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAk08DANBgkqhkiG9w0BAQsFAAOC AQEA1a+kzeQLxnBxIGz6fsm93SpqexQjEW7rNx+dvA/k11Vr/8q9RBbxv9G7qL3+ N73raSHRKxfPlsvrm0rm+8X4/0dZHhSeoz9w1tN8kNfpGoj9U4RFUAqzr0aWU5FZ NAPVBCX28ngZTMR6ajPOrSQnUyz52cud0OTIxF8sbEc1iwBn6SreUp3j0WxJ4n39 xPxuo67V7j4mmMb3qEgIrTxJH+O418AHrXWPBYYyvZ6OVAj2A9LFXzJ1s+F5d+w5 j14niGtCUqq/gK8eLYxl4NZOQaXBo/m8NOTrM29ZF4xdhMFi+mmREOusfaA9CVr7 NCoK7iNSkRx2J8EaAG2+rDzcPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:40 2025 by rpki-client