This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa File: 323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa (raw, json) Hash identifier: mPcgWOQP3Yfaj4II6jjlLcd9TZ991tq6OUlMO7aXDKs= Subject key identifier: 79:A9:BC:DA:BD:0E:D9:8F:E9:BA:94:E1:79:76:A2:12:DD:1A:20:AE Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Certificate serial: 574AEDB2097F7BC06FCD5148DE88D1E74FF5A4ED Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa Signing time: Wed 26 Nov 2025 10:02:49 +0000 ROA not before: Wed 26 Nov 2025 09:57:49 +0000 ROA not after: Wed 25 Nov 2026 10:02:49 +0000 asID: 268878 IP address blocks: 2804:5bf0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 02:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4a:ed:b2:09:7f:7b:c0:6f:cd:51:48:de:88:d1:e7:4f:f5:a4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Validity Not Before: Nov 26 09:57:49 2025 GMT Not After : Nov 25 10:02:49 2026 GMT Subject: CN=79A9BCDABD0ED98FE9BA94E17976A212DD1A20AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:4b:ac:e9:44:30:7c:a3:47:bb:4b:cb:b7: 8a:2b:8a:cd:6f:3d:04:7c:9a:8c:bc:a2:78:44:42: 4c:5e:74:e9:5a:61:34:a3:77:8b:e5:20:9e:6d:5a: 77:93:bf:6a:3f:9f:45:bb:ef:6e:a0:de:16:e8:24: 6f:47:14:1f:41:7a:d0:46:8f:5c:6b:eb:85:ec:07: 99:5e:8d:4e:13:31:96:24:75:19:65:3b:fd:7c:36: 26:f5:92:b6:59:a9:f5:f5:49:39:6e:94:f1:0a:f7: 22:d4:ed:38:42:f8:e3:f3:e5:2b:30:37:d5:08:f3: 81:3a:47:27:40:68:4b:62:27:b5:4a:15:8b:3d:f3: 61:53:66:52:68:3f:8c:10:ef:75:e1:72:4f:f9:b2: 86:54:a1:42:43:33:81:77:f8:80:df:04:ed:c5:5b: f7:53:70:a7:39:5b:b5:aa:46:18:83:b8:44:89:56: 78:d7:c1:00:a7:53:12:58:80:47:32:1c:20:06:c8: 3b:0f:3e:82:1f:5f:96:b9:f5:fc:e7:e3:fc:08:38: 5d:18:78:fc:9c:1c:62:4a:3c:1e:09:a2:68:f4:b1: f6:7f:1c:c6:2a:bb:52:7e:fb:24:53:a8:bb:de:85: 2a:f7:04:21:7b:48:50:01:4d:0f:7b:63:f2:f5:81: fc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:BC:DA:BD:0E:D9:8F:E9:BA:94:E1:79:76:A2:12:DD:1A:20:AE X509v3 Authority Key Identifier: keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5bf0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 63:11:79:8e:9b:25:29:22:0f:15:ca:03:95:67:a8:61:26:60: eb:7d:23:d3:ef:c6:78:05:56:79:68:5f:48:ac:11:67:ce:58: 6f:7f:39:04:a8:4f:c1:01:63:aa:8f:9e:6c:e0:27:05:66:9b: 80:4d:49:b5:cc:12:bc:a5:0d:a2:90:9f:31:fa:f9:ad:d8:90: 6a:aa:b5:fc:5c:48:0b:cf:17:dd:f6:05:81:fe:29:33:99:7b: 21:53:bc:4b:7f:de:fc:c4:60:6d:7b:23:69:6f:08:67:a2:dd: 72:0a:c1:c2:ed:d6:31:85:4b:b9:4f:e9:5e:3c:c4:ee:d1:2d: c5:63:bb:70:2a:06:1b:fe:7c:a8:95:7a:a0:52:97:dd:08:70: a5:0a:09:c9:1d:54:4d:bb:81:23:e1:d1:8a:82:67:33:5c:c1: 02:ff:c0:b7:8a:b5:2c:66:6e:e6:02:a6:47:c3:13:41:af:00: ce:67:43:af:83:04:40:22:73:02:09:38:33:8d:56:cb:29:f0: 25:d6:35:3a:a6:16:f7:4a:87:50:66:fe:e3:81:31:4f:ce:be: f3:48:89:07:69:3d:2f:bd:0b:b4:2c:53:d2:68:2a:a4:2d:e5: 7e:d4:3d:a6:aa:1f:a6:60:00:e1:54:4d:d6:c8:8e:a2:c9:96: de:05:a1:0e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUV0rtsgl/e8BvzVFI3ojR50/1pO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3 RkFCNzgyMDAeFw0yNTExMjYwOTU3NDlaFw0yNjExMjUxMDAyNDlaMDMxMTAvBgNV BAMTKDc5QTlCQ0RBQkQwRUQ5OEZFOUJBOTRFMTc5NzZBMjEyREQxQTIwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirkus6UQwfKNHu0vLt4oris1v PQR8moy8onhEQkxedOlaYTSjd4vlIJ5tWneTv2o/n0W7726g3hboJG9HFB9BetBG j1xr64XsB5lejU4TMZYkdRllO/18Nib1krZZqfX1STlulPEK9yLU7ThC+OPz5Ssw N9UI84E6RydAaEtiJ7VKFYs982FTZlJoP4wQ73Xhck/5soZUoUJDM4F3+IDfBO3F W/dTcKc5W7WqRhiDuESJVnjXwQCnUxJYgEcyHCAGyDsPPoIfX5a59fzn4/wIOF0Y ePycHGJKPB4Jomj0sfZ/HMYqu1J++yRTqLvehSr3BCF7SFABTQ97Y/L1gfxZAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUeam82r0O2Y/pupTheXaiEt0aIK4wHwYDVR0j BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv MzIzODMwMzQzYTM1NjI2NjMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzODM4MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEW/CAMA0GCSqGSIb3DQEBCwUA A4IBAQBjEXmOmyUpIg8VygOVZ6hhJmDrfSPT78Z4BVZ5aF9IrBFnzlhvfzkEqE/B AWOqj55s4CcFZpuATUm1zBK8pQ2ikJ8x+vmt2JBqqrX8XEgLzxfd9gWB/ikzmXsh U7xLf978xGBteyNpbwhnot1yCsHC7dYxhUu5T+lePMTu0S3FY7twKgYb/nyolXqg UpfdCHClCgnJHVRNu4Ej4dGKgmczXMEC/8C3irUsZm7mAqZHwxNBrwDOZ0OvgwRA InMCCTgzjVbLKfAl1jU6phb3SodQZv7jgTFPzr7zSIkHaT0vvQu0LFPSaCqkLeV+ 1D2mqh+mYADhVE3WyI6iyZbeBaEO -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:38 2025 by rpki-client