This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830343a316635653a3a2f33322d3438203d3e203631363236.roa File: 323830343a316635653a3a2f33322d3438203d3e203631363236.roa (raw, json) Hash identifier: QMEJztZ58DrWYob/8PoxTCeDXYAPe/EjSlT01zcppe8= Subject key identifier: 97:08:F3:56:23:74:A5:5C:85:9C:49:65:F4:80:73:1B:C7:B4:D3:87 Certificate issuer: /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3 Certificate serial: 671E06EC3F30CC41A26D0E7656DEAD1E8E672E1E Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer Subject info access: rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830343a316635653a3a2f33322d3438203d3e203631363236.roa Signing time: Thu 06 Nov 2025 16:20:46 +0000 ROA not before: Thu 06 Nov 2025 16:15:46 +0000 ROA not after: Thu 05 Nov 2026 16:20:46 +0000 asID: 61626 IP address blocks: 2804:1f5e::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 18:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1e:06:ec:3f:30:cc:41:a2:6d:0e:76:56:de:ad:1e:8e:67:2e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3 Validity Not Before: Nov 6 16:15:46 2025 GMT Not After : Nov 5 16:20:46 2026 GMT Subject: CN=9708F3562374A55C859C4965F480731BC7B4D387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:23:64:1d:d9:78:03:fe:06:bd:96:f8:22: 56:81:e2:68:bd:de:6b:8e:60:c3:2d:94:4e:cb:02: 2c:cf:23:1d:d0:93:cb:44:80:dd:d2:ed:26:64:11: 05:63:84:27:3c:88:1c:4a:1e:89:3f:07:87:f2:96: 06:d9:df:78:4e:f1:15:aa:ce:bc:13:62:77:d2:94: c1:42:6d:e4:88:26:a6:2a:d4:b4:10:ac:fd:90:cd: 7a:62:f3:2d:03:a8:67:ae:7b:2a:83:ff:e3:cd:64: d6:30:68:7c:a9:1c:45:fd:7b:c3:72:51:a6:2d:5b: 7e:ac:0e:2c:75:2a:dd:19:fb:6d:5c:74:bb:44:3a: 79:39:f8:1c:8b:26:08:8d:72:ad:32:07:5d:b4:8e: 62:ba:f6:86:a2:f5:7f:ee:82:15:ba:30:89:b7:c1: 1a:cf:4c:28:e7:e6:83:0a:56:60:ea:04:eb:b2:82: 0e:04:4a:f5:5c:31:31:c5:30:f1:8b:68:2f:dd:fe: fe:b9:0c:67:25:d2:98:b1:17:54:d4:c7:a1:ca:6b: 20:47:40:7b:2e:73:73:11:34:26:4d:9b:80:e0:97: c4:89:c6:25:03:dc:97:9d:2b:a8:cd:11:56:e0:0a: 9b:e3:53:e5:68:8f:b3:c4:d8:cf:90:a6:11:bc:f9: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:08:F3:56:23:74:A5:5C:85:9C:49:65:F4:80:73:1B:C7:B4:D3:87 X509v3 Authority Key Identifier: keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830343a316635653a3a2f33322d3438203d3e203631363236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1f5e::/32 Signature Algorithm: sha256WithRSAEncryption 49:6e:2f:ed:8d:94:3f:c2:b4:0c:7a:e4:2c:df:83:44:2f:ad: 7c:e7:1f:48:18:fe:2e:d4:b4:c6:b9:96:9e:28:bd:8e:bf:54: d0:9f:02:45:ba:3d:d5:34:ac:f4:f5:a3:9e:fa:3f:c7:9f:4c: ec:88:b8:7e:e3:74:ce:e4:92:62:13:01:64:fb:b7:06:a1:6d: 29:83:e4:cd:68:48:78:73:36:0b:fe:c2:eb:5b:79:b0:1c:28: 8e:d2:75:8f:04:7a:ec:0d:5f:0e:75:56:34:a2:e3:83:a7:ea: 2f:85:b2:bc:8b:f4:1a:8b:0a:d0:c8:53:52:b4:c6:6e:33:ca: c2:0b:65:56:47:14:bb:ef:fd:21:05:22:7f:ad:4b:87:91:55: 4c:3d:7d:6c:bc:d6:5d:73:37:46:c2:89:cb:c6:81:c6:0f:79: 45:02:b3:14:ba:0a:2a:a9:a6:8c:6c:b7:26:58:e4:cc:80:fb: 7a:07:83:1a:ec:42:bf:4f:fc:83:72:0b:15:ef:ce:25:d1:ff: 57:de:16:84:1c:a7:6b:a5:46:80:9d:cb:42:2f:e1:53:8c:36: bc:02:f3:d7:33:fe:5b:15:87:54:90:54:94:9c:30:ac:8d:3e: 0c:5e:25:31:26:3f:08:30:ef:4d:d0:22:86:c3:f1:ab:75:13: 8e:01:03:49 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUZx4G7D8wzEGibQ52Vt6tHo5nLh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2ODdCREZEM0U4RUJBQ0U3RUUxRUE4NEY3RkMxQkIy NzhCM0NDMzAeFw0yNTExMDYxNjE1NDZaFw0yNjExMDUxNjIwNDZaMDMxMTAvBgNV BAMTKDk3MDhGMzU2MjM3NEE1NUM4NTlDNDk2NUY0ODA3MzFCQzdCNEQzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uyNkHdl4A/4GvZb4IlaB4mi9 3muOYMMtlE7LAizPIx3Qk8tEgN3S7SZkEQVjhCc8iBxKHok/B4fylgbZ33hO8RWq zrwTYnfSlMFCbeSIJqYq1LQQrP2QzXpi8y0DqGeueyqD/+PNZNYwaHypHEX9e8Ny UaYtW36sDix1Kt0Z+21cdLtEOnk5+ByLJgiNcq0yB120jmK69oai9X/ughW6MIm3 wRrPTCjn5oMKVmDqBOuygg4ESvVcMTHFMPGLaC/d/v65DGcl0pixF1TUx6HKayBH QHsuc3MRNCZNm4Dgl8SJxiUD3JedK6jNEVbgCpvjU+Voj7PE2M+QphG8+UfzAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUlwjzViN0pVyFnEll9IBzG8e004cwHwYDVR0j BBgwFoAUzmh739Po66zn7h6oT3/BuyeLPMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNm5jRzlzMmd1cFg4c0VMa25Yam9UMjYyOFhYVmFtRlJxZ21CYU5YRW1V WVEvMC9DRTY4N0JERkQzRThFQkFDRTdFRTFFQTg0RjdGQzFCQjI3OEIzQ0MzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNjg3QkRGRDNFOEVCQUNF N0VFMUVBODRGN0ZDMUJCMjc4QjNDQzMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZuY0c5czJndXBYOHNFTGtuWGpvVDI2MjhYWFZhbUZScWdtQmFOWEVtVVlRLzAv MzIzODMwMzQzYTMxNjYzNTY1M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM2 MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEH14wDQYJKoZIhvcNAQELBQADggEBAEluL+2NlD/C tAx65Czfg0QvrXznH0gY/i7UtMa5lp4ovY6/VNCfAkW6PdU0rPT1o576P8efTOyI uH7jdM7kkmITAWT7twahbSmD5M1oSHhzNgv+wutbebAcKI7SdY8EeuwNXw51VjSi 44On6i+FsryL9BqLCtDIU1K0xm4zysILZVZHFLvv/SEFIn+tS4eRVUw9fWy81l1z N0bCicvGgcYPeUUCsxS6CiqppoxstyZY5MyA+3oHgxrsQr9P/INyCxXvziXR/1fe FoQcp2ulRoCdy0Iv4VOMNrwC89cz/lsVh1SQVJScMKyNPgxeJTEmPwgw703QIobD 8at1E44BA0k= -----END CERTIFICATE-----Generated at Sun Dec 7 05:56:50 2025 by rpki-client