This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa File: 323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (raw, json) Hash identifier: LpZUFdp5QtcnhG/XEq0FRx2E8yWn4lVSq4AvIB5A+RQ= Subject key identifier: 99:C2:D8:86:B5:B5:54:11:A5:06:B8:3B:9A:36:70:24:52:8D:FD:47 Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Certificate serial: 09CCA8346E48780226B76411525424E72FE579 Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa Signing time: Wed 26 Nov 2025 10:02:50 +0000 ROA not before: Wed 26 Nov 2025 09:57:50 +0000 ROA not after: Wed 25 Nov 2026 10:02:50 +0000 asID: 268878 IP address blocks: 2804:5bf0::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 02:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cc:a8:34:6e:48:78:02:26:b7:64:11:52:54:24:e7:2f:e5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Validity Not Before: Nov 26 09:57:50 2025 GMT Not After : Nov 25 10:02:50 2026 GMT Subject: CN=99C2D886B5B55411A506B83B9A367024528DFD47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:ea:a8:3f:1b:2a:e2:03:87:97:2f:ef:f4: 81:d7:86:c9:cc:40:b0:84:85:36:9b:73:ba:8f:37: 4f:d2:54:27:4c:34:43:ae:d6:39:9c:0b:7f:1a:ec: 8b:6b:82:4d:a2:7b:a5:17:2b:50:24:55:b8:26:78: 23:59:3c:39:52:e0:34:7f:04:f9:fe:7e:e1:32:31: 42:63:37:b9:07:49:38:a4:ee:f0:e3:f0:62:1c:5a: 1f:b7:09:22:08:ad:75:04:ab:e7:46:45:aa:55:31: eb:19:86:61:c8:83:f5:88:33:14:db:d9:b6:34:f7: 2b:c3:dd:9f:8e:e5:2a:e5:b3:4c:cb:0a:b8:b7:97: 62:15:23:55:b0:fd:81:f9:89:5d:b6:47:1b:6b:7a: 25:ea:59:16:8b:5d:e0:e0:b4:12:f7:37:bb:04:07: 22:61:06:08:77:71:67:fc:cc:a2:e8:d5:b2:3c:a2: 24:6e:9b:c1:b2:40:fa:1f:12:98:37:f8:53:e0:ad: a0:ad:de:fc:ea:3a:4e:3a:60:53:a2:c1:b7:7e:8c: b3:a7:98:c5:ef:0c:e4:e4:77:14:74:43:7e:6d:7a: 6a:e9:17:88:b9:bd:cd:7e:dd:86:bf:fb:07:3d:4a: b8:1c:91:67:71:75:8a:81:57:49:c9:21:7c:42:e1: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C2:D8:86:B5:B5:54:11:A5:06:B8:3B:9A:36:70:24:52:8D:FD:47 X509v3 Authority Key Identifier: keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5bf0::/33 Signature Algorithm: sha256WithRSAEncryption 4e:36:b6:07:ab:ed:52:77:d9:4b:39:91:6c:46:07:84:0c:c0: 40:de:cf:fd:30:0a:1e:8c:74:29:14:c3:ab:a1:21:3c:93:ef: c8:39:69:e2:3a:be:e0:b1:34:11:a5:43:dc:33:66:99:ba:ab: 81:a7:6c:32:d6:d7:5a:9d:b7:00:44:df:84:0f:ea:17:f9:27: 75:b4:a8:04:14:3c:93:aa:37:96:ee:63:6d:17:af:15:1c:00: b0:a1:56:55:53:0e:49:cc:07:bc:28:97:fc:60:33:a3:1c:d0: 43:79:b1:a6:41:c9:a3:08:29:15:23:24:41:ee:d6:33:ec:fa: be:41:68:0b:19:2a:2a:d3:75:dd:3e:b0:9d:6b:06:4f:fd:b2: 65:64:91:80:ee:03:88:5f:20:57:83:a5:b7:f1:7d:61:a1:33: a5:57:11:e3:9a:d9:6c:17:45:62:1b:2d:4b:81:83:a1:3c:d5: 32:36:39:35:be:44:51:2c:af:b9:8d:66:df:1b:38:a7:5d:39: 7c:cf:5d:e0:e8:05:2a:8e:69:26:f9:01:23:cb:b8:6e:7d:c2: 49:ee:94:3e:04:5c:4e:1e:f0:37:1b:e5:4d:f8:76:7a:70:97: 69:3b:90:9c:cf:3c:66:66:ec:19:f4:dd:2a:e5:e4:53:e5:06: 05:aa:91:2a -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgITCcyoNG5IeAImt2QRUlQk5y/leTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdG QUI3ODIwMB4XDTI1MTEyNjA5NTc1MFoXDTI2MTEyNTEwMDI1MFowMzExMC8GA1UE AxMoOTlDMkQ4ODZCNUI1NTQxMUE1MDZCODNCOUEzNjcwMjQ1MjhERkQ0NzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8o6qg/GyriA4eXL+/0gdeGycxA sISFNptzuo83T9JUJ0w0Q67WOZwLfxrsi2uCTaJ7pRcrUCRVuCZ4I1k8OVLgNH8E +f5+4TIxQmM3uQdJOKTu8OPwYhxaH7cJIgitdQSr50ZFqlUx6xmGYciD9YgzFNvZ tjT3K8Pdn47lKuWzTMsKuLeXYhUjVbD9gfmJXbZHG2t6JepZFotd4OC0Evc3uwQH ImEGCHdxZ/zMoujVsjyiJG6bwbJA+h8SmDf4U+CtoK3e/Oo6TjpgU6LBt36Ms6eY xe8M5OR3FHRDfm16aukXiLm9zX7dhr/7Bz1KuByRZ3F1ioFXSckhfELhfL0CAwEA AaOCAlEwggJNMB0GA1UdDgQWBBSZwtiGtbVUEaUGuDuaNnAkUo39RzAfBgNVHSME GDAWgBS/tZD6egTBWgfoAlk8RHLXf6t4IDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby83OUs0aWRtTG00ZWVzNTJQd1lNQUpRS1dYYmNWUVQ4NTY5M2lrUnl6c2ti by8wL0JGQjU5MEZBN0EwNEMxNUEwN0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQkZCNTkwRkE3QTA0QzE1QTA3 RTgwMjU5M0M0NDcyRDc3RkFCNzgyMC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNrYm8vMC8z MjM4MzAzNDNhMzU2MjY2MzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM2Mzgz ODM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgcoBFvwADANBgkqhkiG9w0BAQsFAAOCAQEATja2B6vt UnfZSzmRbEYHhAzAQN7P/TAKHox0KRTDq6EhPJPvyDlp4jq+4LE0EaVD3DNmmbqr gadsMtbXWp23AETfhA/qF/kndbSoBBQ8k6o3lu5jbRevFRwAsKFWVVMOScwHvCiX /GAzoxzQQ3mxpkHJowgpFSMkQe7WM+z6vkFoCxkqKtN13T6wnWsGT/2yZWSRgO4D iF8gV4Olt/F9YaEzpVcR45rZbBdFYhstS4GDoTzVMjY5Nb5EUSyvuY1m3xs4p105 fM9d4OgFKo5pJvkBI8u4bn3CSe6UPgRcTh7wNxvlTfh2enCXaTuQnM88ZmbsGfTd KuXkU+UGBaqRKg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:27 2025 by rpki-client