This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa File: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (raw, json) Hash identifier: 17+u0HNFwo8Q2gdhCBAuIkj02jj+cd6wojbAGTJYvRE= Subject key identifier: 7E:4E:08:EC:93:D2:5E:14:83:2C:0A:86:0D:5A:4A:2A:5A:8D:64:A2 Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Certificate serial: 03977F65D049797D7012B7A17DD61B4D229ABCF2 Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa Signing time: Wed 26 Nov 2025 10:02:49 +0000 ROA not before: Wed 26 Nov 2025 09:57:49 +0000 ROA not after: Wed 25 Nov 2026 10:02:49 +0000 asID: 268878 IP address blocks: 2804:5bf0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 02:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:97:7f:65:d0:49:79:7d:70:12:b7:a1:7d:d6:1b:4d:22:9a:bc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Validity Not Before: Nov 26 09:57:49 2025 GMT Not After : Nov 25 10:02:49 2026 GMT Subject: CN=7E4E08EC93D25E14832C0A860D5A4A2A5A8D64A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:af:4a:6f:5f:10:7f:29:a7:d4:ae:41:c1:05: a6:12:c3:8c:5a:db:00:16:eb:dc:24:f1:8a:18:95: 18:7d:68:3f:bf:3f:69:15:24:e7:d1:60:5b:ae:3a: be:6c:41:d0:fb:93:dd:83:3f:2d:11:33:22:9c:15: 66:4e:59:74:60:a3:60:e7:b0:f7:41:3a:e1:e2:33: 25:bc:c3:90:06:80:41:34:2b:fb:d9:cf:69:3b:a5: ac:76:41:b8:54:58:f4:f6:1e:bc:4d:93:44:85:36: 40:ee:c8:b7:d9:3c:54:90:64:e2:cd:3e:87:38:78: 0a:0c:7b:2d:32:15:2a:e7:62:83:76:ce:f4:a1:5b: 24:81:89:02:23:8c:87:3c:d0:c2:b6:05:86:78:9e: 3a:25:ec:1f:6f:23:b2:e1:95:44:6a:b3:1e:e3:02: 37:cf:dd:a0:03:1c:ca:e0:2c:5b:4a:53:2a:4c:36: ba:c7:ad:ed:32:f2:5b:70:4f:81:06:2a:a4:e2:85: 25:85:01:e9:c4:d1:64:89:16:46:46:92:3a:4e:68: f5:8b:c5:a3:d3:4f:44:7e:6a:cf:61:13:f2:00:5d: 87:4c:d2:c7:b9:47:ff:62:60:02:14:40:fb:b9:8b: 19:90:cf:c7:41:a4:e0:99:be:5b:8e:1d:c2:8e:d1: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4E:08:EC:93:D2:5E:14:83:2C:0A:86:0D:5A:4A:2A:5A:8D:64:A2 X509v3 Authority Key Identifier: keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d313238203d3e20323638383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5bf0::/32 Signature Algorithm: sha256WithRSAEncryption 24:27:5d:da:e1:1b:67:f5:ae:1a:29:ca:8c:c9:03:80:4c:e0: cb:53:55:16:a1:8a:0b:84:66:dd:b8:6f:4a:c2:98:b1:c3:17: 76:8f:5d:68:93:3e:2c:ab:9d:3c:bb:c3:79:ee:58:1d:08:03: a5:72:38:da:bf:cd:d5:39:d0:9c:9e:72:20:78:7f:25:b5:2f: de:ff:20:7c:41:65:c3:24:99:03:2e:34:e2:4b:6b:c5:62:53: f7:bb:37:e6:d4:a2:3f:97:43:f9:92:fd:ac:f9:b9:86:22:3a: 9c:43:87:ca:5a:ad:42:41:0e:54:6a:2d:ee:81:e9:e6:30:25: ab:8b:6a:b1:79:fc:70:86:92:1a:59:b9:1c:71:3e:0a:5e:29: 1b:bd:19:db:99:19:c8:e8:c7:ee:45:42:52:fb:92:61:04:6c: cb:5c:ad:f6:7d:ad:59:de:9a:33:cc:40:b0:78:f6:cd:94:94: c2:8c:06:ec:b1:12:c9:19:48:d8:0d:0d:11:d7:45:cd:c1:5c: 26:d8:b6:8f:5b:6f:12:bc:59:22:0b:70:14:8d:9a:b4:93:db: bb:52:6b:23:2f:17:c9:1c:c4:47:a0:e4:b1:ba:cb:23:b2:b9: 0c:6a:8f:05:c9:12:28:11:bc:52:4d:d7:97:f3:cc:e2:c8:28: 21:2e:59:90 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUA5d/ZdBJeX1wErehfdYbTSKavPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3 RkFCNzgyMDAeFw0yNTExMjYwOTU3NDlaFw0yNjExMjUxMDAyNDlaMDMxMTAvBgNV BAMTKDdFNEUwOEVDOTNEMjVFMTQ4MzJDMEE4NjBENUE0QTJBNUE4RDY0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzr0pvXxB/KafUrkHBBaYSw4xa 2wAW69wk8YoYlRh9aD+/P2kVJOfRYFuuOr5sQdD7k92DPy0RMyKcFWZOWXRgo2Dn sPdBOuHiMyW8w5AGgEE0K/vZz2k7pax2QbhUWPT2HrxNk0SFNkDuyLfZPFSQZOLN Poc4eAoMey0yFSrnYoN2zvShWySBiQIjjIc80MK2BYZ4njol7B9vI7LhlURqsx7j AjfP3aADHMrgLFtKUypMNrrHre0y8ltwT4EGKqTihSWFAenE0WSJFkZGkjpOaPWL xaPTT0R+as9hE/IAXYdM0se5R/9iYAIUQPu5ixmQz8dBpOCZvluOHcKO0Qv5AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUfk4I7JPSXhSDLAqGDVpKKlqNZKIwHwYDVR0j BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv MzIzODMwMzQzYTM1NjI2NjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzgzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBFvwMA0GCSqGSIb3DQEBCwUAA4IBAQAkJ13a 4Rtn9a4aKcqMyQOATODLU1UWoYoLhGbduG9Kwpixwxd2j11okz4sq508u8N57lgd CAOlcjjav83VOdCcnnIgeH8ltS/e/yB8QWXDJJkDLjTiS2vFYlP3uzfm1KI/l0P5 kv2s+bmGIjqcQ4fKWq1CQQ5Uai3ugenmMCWri2qxefxwhpIaWbkccT4KXikbvRnb mRnI6MfuRUJS+5JhBGzLXK32fa1Z3pozzECwePbNlJTCjAbssRLJGUjYDQ0R10XN wVwm2LaPW28SvFkiC3AUjZq0k9u7UmsjLxfJHMRHoOSxussjsrkMao8FyRIoEbxS TdeX88ziyCghLlmQ -----END CERTIFICATE-----Generated at Sat Dec 6 12:19:36 2025 by rpki-client