This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/323830343a6538633a3a2f33322d313238203d3e203532353631.roa File: 323830343a6538633a3a2f33322d313238203d3e203532353631.roa (raw, json) Hash identifier: Yw8VRLlrkk2fyMM+nbIJACzvRGfnfFODvlWJkSSAP3o= Subject key identifier: A8:7D:8A:4B:91:43:34:FE:0F:D2:5E:8B:75:7F:D1:B6:7B:EC:16:C7 Certificate issuer: /CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03 Certificate serial: 09DDF5432DABAAA66CC995A50DF7260C034CDC1C Authority key identifier: 8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer Subject info access: rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/323830343a6538633a3a2f33322d313238203d3e203532353631.roa Signing time: Thu 20 Nov 2025 22:56:46 +0000 ROA not before: Thu 20 Nov 2025 22:51:46 +0000 ROA not after: Thu 19 Nov 2026 22:56:46 +0000 asID: 52561 IP address blocks: 2804:e8c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 21:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:dd:f5:43:2d:ab:aa:a6:6c:c9:95:a5:0d:f7:26:0c:03:4c:dc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03 Validity Not Before: Nov 20 22:51:46 2025 GMT Not After : Nov 19 22:56:46 2026 GMT Subject: CN=A87D8A4B914334FE0FD25E8B757FD1B67BEC16C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:69:e4:8c:71:f9:d4:cb:1e:bb:b0:48:dd: 3a:e8:8c:5c:09:86:31:52:36:59:a2:31:28:e5:df: 1e:27:8c:59:3a:5f:56:88:34:85:0e:ab:0d:2d:39: 86:02:f3:f8:4f:5d:c9:6b:51:54:64:bd:1f:ce:7d: e5:43:78:90:a3:43:d5:44:4b:14:c4:39:7f:2d:65: ce:15:b1:c2:79:94:f0:bb:41:87:1e:d7:ce:ff:c6: 1f:4f:75:3e:53:55:0b:c8:80:71:ce:6e:75:e9:fa: a9:09:4b:12:bd:04:21:4e:ef:47:d1:46:7b:3a:90: 02:a9:7e:d4:fb:e5:1d:d4:cf:ca:35:5c:ca:5c:6e: e4:42:3a:26:09:37:0f:6a:92:6e:ab:50:2c:2b:92: 0f:cd:11:56:4e:6b:d1:df:fd:23:f9:3a:ec:8e:7f: 2b:4b:72:26:3f:58:98:fc:6a:56:07:eb:7e:19:7c: 22:8f:3a:c4:e4:f7:61:17:8e:45:b3:62:a7:fe:05: ed:ac:51:3b:1a:ec:eb:1f:6f:be:8a:63:1c:2b:86: 42:d0:28:44:b5:cf:23:7c:2e:ab:68:ba:89:21:43: e5:81:15:57:70:04:f6:46:20:95:d5:83:09:cc:7f: 6b:da:95:6e:b5:0e:cc:e2:0b:33:a2:9a:13:6a:e0: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7D:8A:4B:91:43:34:FE:0F:D2:5E:8B:75:7F:D1:B6:7B:EC:16:C7 X509v3 Authority Key Identifier: keyid:8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/323830343a6538633a3a2f33322d313238203d3e203532353631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:e8c::/32 Signature Algorithm: sha256WithRSAEncryption 32:6a:76:c7:1d:8f:cf:ea:e7:65:35:77:a4:d8:e0:53:3f:a6: 28:e8:90:67:71:6e:c4:c4:c2:c9:be:b4:c9:60:5f:f6:c4:e5: 4d:f6:50:b0:61:a9:df:70:0e:2e:c6:f9:84:b5:b0:5e:5a:41: a6:ab:3f:0b:57:7e:b5:9e:a4:a0:2f:9d:24:f3:25:c2:be:b2: e2:a1:03:a2:34:a2:e1:24:90:cc:e2:ee:df:fe:e3:b0:86:1e: 3d:33:87:19:f6:d0:93:dd:6b:49:c8:f3:53:e4:e3:72:ad:e8: 7f:47:9c:68:cc:08:a0:e6:1d:44:4f:ed:51:95:c5:f5:c4:b9: 7a:df:76:05:fb:d2:7e:24:4a:ea:d2:87:42:fa:e4:a5:88:14: 1c:5c:71:66:a5:7f:90:1f:7d:d7:a1:fb:28:da:fa:46:f3:96: 7e:83:22:01:47:d2:01:fc:b1:ec:81:ed:11:98:3f:4d:38:74: ba:f6:c1:4b:12:57:52:3b:a1:84:3c:fd:8d:fe:0b:2a:75:2c: 9a:e8:0e:a5:3c:4e:31:bc:7c:eb:2e:0b:4c:33:cf:08:57:77: 38:1f:6d:3c:79:3b:46:ed:db:ac:38:21:77:fd:7a:fc:c3:52: 04:c8:e1:bf:af:4f:e5:3b:86:dd:d6:dc:bf:ea:8f:51:99:e4: 71:e0:9c:40 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUCd31Qy2rqqZsyZWlDfcmDANM3BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMEE0MzVBQTcxOTY1RkQ3Nzc0ODg3QkZFMEFFMzRF NkUzOUIwMzAeFw0yNTExMjAyMjUxNDZaFw0yNjExMTkyMjU2NDZaMDMxMTAvBgNV BAMTKEE4N0Q4QTRCOTE0MzM0RkUwRkQyNUU4Qjc1N0ZEMUI2N0JFQzE2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0WnkjHH51Mseu7BI3TrojFwJ hjFSNlmiMSjl3x4njFk6X1aINIUOqw0tOYYC8/hPXclrUVRkvR/OfeVDeJCjQ9VE SxTEOX8tZc4VscJ5lPC7QYce187/xh9PdT5TVQvIgHHObnXp+qkJSxK9BCFO70fR Rns6kAKpftT75R3Uz8o1XMpcbuRCOiYJNw9qkm6rUCwrkg/NEVZOa9Hf/SP5OuyO fytLciY/WJj8alYH634ZfCKPOsTk92EXjkWzYqf+Be2sUTsa7Osfb76KYxwrhkLQ KES1zyN8LqtouokhQ+WBFVdwBPZGIJXVgwnMf2valW61DsziCzOimhNq4K/vAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUqH2KS5FDNP4P0l6LdX/RtnvsFscwHwYDVR0j BBgwFoAUj7CkNapxll/Xd0iHv+CuNObjmwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnAyZm5TV1JkMlRGb2V6am11a3NoRWFCMVN0MWVKYXNEUTVLd2NLUTZm VE0vMC84RkIwQTQzNUFBNzE5NjVGRDc3NzQ4ODdCRkUwQUUzNEU2RTM5QjAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGQjBBNDM1QUE3MTk2NUZE Nzc3NDg4N0JGRTBBRTM0RTZFMzlCMDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZwMmZuU1dSZDJURm9lemptdWtzaEVhQjFTdDFlSmFzRFE1S3djS1E2ZlRNLzAv MzIzODMwMzQzYTY1Mzg2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM1 MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEDowwDQYJKoZIhvcNAQELBQADggEBADJqdscdj8/q 52U1d6TY4FM/pijokGdxbsTEwsm+tMlgX/bE5U32ULBhqd9wDi7G+YS1sF5aQaar PwtXfrWepKAvnSTzJcK+suKhA6I0ouEkkMzi7t/+47CGHj0zhxn20JPda0nI81Pk 43Kt6H9HnGjMCKDmHURP7VGVxfXEuXrfdgX70n4kSurSh0L65KWIFBxccWalf5Af fdeh+yja+kbzln6DIgFH0gH8seyB7RGYP004dLr2wUsSV1I7oYQ8/Y3+Cyp1LJro DqU8TjG8fOsuC0wzzwhXdzgfbTx5O0bt26w4IXf9evzDUgTI4b+vT+U7ht3W3L/q j1GZ5HHgnEA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:17 2025 by rpki-client