This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3438203d3e20323635393238.roa File: 323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (raw, json) Hash identifier: EPTeILSpUwx//rkN07V6V1ZSH6ltq+EpjJVmDoqMOUM= Subject key identifier: 2E:99:35:EE:A7:4B:B1:D7:77:4D:2C:69:F9:B7:E2:29:C5:E5:0E:30 Certificate issuer: /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Certificate serial: 425EBF4E2ED3A26F0F18CED2F9691AC9498A2879 Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject info access: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3438203d3e20323635393238.roa Signing time: Thu 20 Nov 2025 20:20:47 +0000 ROA not before: Thu 20 Nov 2025 20:15:47 +0000 ROA not after: Thu 19 Nov 2026 20:20:47 +0000 asID: 265928 IP address blocks: 2804:4004::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 14:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5e:bf:4e:2e:d3:a2:6f:0f:18:ce:d2:f9:69:1a:c9:49:8a:28:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Validity Not Before: Nov 20 20:15:47 2025 GMT Not After : Nov 19 20:20:47 2026 GMT Subject: CN=2E9935EEA74BB1D7774D2C69F9B7E229C5E50E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3e:88:e6:80:a9:56:dc:db:0e:d6:f4:40:5a: ae:02:94:4b:08:73:6f:3b:dd:62:f6:8e:12:b3:36: 3c:11:2e:70:de:fe:99:53:c8:21:b6:d3:fe:3d:a9: f0:af:3b:e8:2d:d5:6c:14:09:40:c1:4f:90:1a:62: f3:fa:a8:b7:d6:0e:c5:81:a1:29:fe:de:d4:27:3b: fd:34:c2:48:44:bd:66:c7:4a:b4:7d:91:87:79:35: 90:c7:bb:7c:29:12:b6:04:57:47:20:11:b7:9f:08: bf:51:61:ed:63:a2:ca:f9:f5:e7:89:06:84:01:83: dd:d5:81:73:8c:37:df:42:a2:f2:09:44:8b:2c:b4: 12:57:98:58:49:78:ce:50:15:31:35:09:85:0f:a9: 8a:d9:22:e1:06:24:33:6e:88:8f:12:6e:2b:e1:f7: 32:af:51:43:70:d5:51:c1:a1:d4:b9:79:02:02:b1: 91:aa:ba:b7:39:21:4e:fe:12:2a:36:e1:c9:3b:42: 62:87:5b:81:12:44:32:8c:6c:d4:8b:90:8b:9a:b8: 02:bc:c7:30:16:63:a0:41:4c:7e:ce:5d:cc:4a:0c: cd:ad:0b:83:5d:e1:dd:38:e8:a9:2a:f2:85:6f:70: c3:33:56:27:29:16:3d:fe:32:15:d3:e7:a1:1e:d2: 85:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:99:35:EE:A7:4B:B1:D7:77:4D:2C:69:F9:B7:E2:29:C5:E5:0E:30 X509v3 Authority Key Identifier: keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3438203d3e20323635393238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4004::/32 Signature Algorithm: sha256WithRSAEncryption c2:98:67:99:7d:31:74:56:9e:77:f4:1d:cb:fa:30:fd:67:29: a3:0a:70:8b:4d:84:ac:5b:a0:8b:1a:49:ad:2a:f7:71:7a:27: 20:a1:1e:5d:c9:2f:78:a3:01:62:cd:30:c6:a2:b3:a0:52:26: 70:4e:9f:0a:50:76:a4:fd:9e:76:f1:da:e3:cd:05:cf:4b:a2: ad:3e:69:8a:a7:e3:8e:d7:28:c4:8b:71:c8:d0:80:25:e9:0b: 62:be:a9:a4:cb:67:3b:0b:2b:a1:96:98:2c:42:bc:78:f7:66: 25:04:f9:5c:f8:8f:7f:9c:80:00:72:c6:53:43:92:4a:bf:40: 08:ee:d4:0b:94:61:6c:30:03:64:fd:3c:15:e6:a7:dc:de:f0: 2e:3a:cf:f6:fb:d9:2c:dd:a3:ff:5b:d9:75:fe:81:21:31:47: 8b:48:89:1e:98:13:e8:e5:54:ff:6a:f3:65:19:f9:7a:6c:c5: 9a:a4:47:e8:6a:a5:46:83:9d:88:af:21:7d:78:4b:ac:27:64: d6:67:95:90:20:20:0b:39:21:e9:c7:be:05:2d:7e:fe:75:ae: a4:3f:4d:7d:ef:1b:aa:32:f9:88:9d:18:ad:ac:05:f4:fb:74: 92:d0:6e:1d:19:bd:32:dc:31:aa:a1:b9:7e:f2:6e:c6:40:70: 06:b1:78:a9 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUQl6/Ti7Tom8PGM7S+WkayUmKKHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENTlGNEI1NkJCNTRGQzMxQ0Q5QkYxQzdGREREQTE5 RDNCMDM2OTAeFw0yNTExMjAyMDE1NDdaFw0yNjExMTkyMDIwNDdaMDMxMTAvBgNV BAMTKDJFOTkzNUVFQTc0QkIxRDc3NzREMkM2OUY5QjdFMjI5QzVFNTBFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqPojmgKlW3NsO1vRAWq4ClEsI c2873WL2jhKzNjwRLnDe/plTyCG20/49qfCvO+gt1WwUCUDBT5AaYvP6qLfWDsWB oSn+3tQnO/00wkhEvWbHSrR9kYd5NZDHu3wpErYEV0cgEbefCL9RYe1josr59eeJ BoQBg93VgXOMN99CovIJRIsstBJXmFhJeM5QFTE1CYUPqYrZIuEGJDNuiI8Sbivh 9zKvUUNw1VHBodS5eQICsZGqurc5IU7+Eio24ck7QmKHW4ESRDKMbNSLkIuauAK8 xzAWY6BBTH7OXcxKDM2tC4Nd4d046Kkq8oVvcMMzVicpFj3+MhXT56Ee0oWFAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQULpk17qdLsdd3TSxp+bfiKcXlDjAwHwYDVR0j BBgwFoAUuNWfS1a7VPwxzZvxx/3doZ07A2kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNa SmkvMC9COEQ1OUY0QjU2QkI1NEZDMzFDRDlCRjFDN0ZERERBMTlEM0IwMzY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RDU5RjRCNTZCQjU0RkMz MUNEOUJGMUM3RkREREExOUQzQjAzNjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZIWkJGa1lKUmpjSHQ4QmFKd2pXRzlwd1VUWkRLNXBHejRRSlRxWkZTWkppLzAv MzIzODMwMzQzYTM0MzAzMDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1 MzkzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARABDANBgkqhkiG9w0BAQsFAAOCAQEAwphnmX0x dFaed/Qdy/ow/Wcpowpwi02ErFugixpJrSr3cXonIKEeXckveKMBYs0wxqKzoFIm cE6fClB2pP2edvHa480Fz0uirT5piqfjjtcoxItxyNCAJekLYr6ppMtnOwsroZaY LEK8ePdmJQT5XPiPf5yAAHLGU0OSSr9ACO7UC5RhbDADZP08Fean3N7wLjrP9vvZ LN2j/1vZdf6BITFHi0iJHpgT6OVU/2rzZRn5emzFmqRH6GqlRoOdiK8hfXhLrCdk 1meVkCAgCzkh6ce+BS1+/nWupD9Nfe8bqjL5iJ0YrawF9Pt0ktBuHRm9MtwxqqG5 fvJuxkBwBrF4qQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:44 2025 by rpki-client