This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7EpMHcvwrV9t6sSNuvoLhG7zr78Y91RF48V4qbucNHFg/0/323830343a386461633a3a2f33322d3334203d3e20323733333733.roa File: 323830343a386461633a3a2f33322d3334203d3e20323733333733.roa (raw, json) Hash identifier: bko1Zooj4nEwHeBAIrdKsKxIEOuwpIIVAVoaVGXCIfo= Subject key identifier: 76:10:86:92:AD:30:C0:BD:A7:BC:A1:B5:02:3A:A0:F7:1A:D1:D5:A1 Certificate issuer: /CN=84F94A6EA911D864F7D1C9C5266C4FF4E508BE5A Certificate serial: 24463BFE52EE6EE611DE2F15732FFE97DC25F48B Authority key identifier: 84:F9:4A:6E:A9:11:D8:64:F7:D1:C9:C5:26:6C:4F:F4:E5:08:BE:5A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84F94A6EA911D864F7D1C9C5266C4FF4E508BE5A.cer Subject info access: rsync://rpki-repo.registro.br/repo/7EpMHcvwrV9t6sSNuvoLhG7zr78Y91RF48V4qbucNHFg/0/323830343a386461633a3a2f33322d3334203d3e20323733333733.roa Signing time: Mon 17 Nov 2025 13:11:04 +0000 ROA not before: Mon 17 Nov 2025 13:06:04 +0000 ROA not after: Mon 16 Nov 2026 13:11:04 +0000 asID: 273373 IP address blocks: 2804:8dac::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7EpMHcvwrV9t6sSNuvoLhG7zr78Y91RF48V4qbucNHFg/0/84F94A6EA911D864F7D1C9C5266C4FF4E508BE5A.crl rsync://rpki-repo.registro.br/repo/7EpMHcvwrV9t6sSNuvoLhG7zr78Y91RF48V4qbucNHFg/0/84F94A6EA911D864F7D1C9C5266C4FF4E508BE5A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84F94A6EA911D864F7D1C9C5266C4FF4E508BE5A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 09 Dec 2025 11:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:46:3b:fe:52:ee:6e:e6:11:de:2f:15:73:2f:fe:97:dc:25:f4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84F94A6EA911D864F7D1C9C5266C4FF4E508BE5A Validity Not Before: Nov 17 13:06:04 2025 GMT Not After : Nov 16 13:11:04 2026 GMT Subject: CN=76108692AD30C0BDA7BCA1B5023AA0F71AD1D5A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:de:00:89:83:06:40:58:4b:55:63:03:ec: 62:b8:af:52:00:7a:37:4a:1e:81:fa:b9:c1:0f:af: 28:82:34:ff:c3:ce:ea:c8:0d:b7:19:7b:51:f0:8d: 6f:70:a0:2e:f2:d9:42:5c:4b:2d:60:79:ee:cf:0a: 71:66:a3:2e:f3:6f:72:d1:63:50:5d:dd:07:3b:d8: e8:95:8d:cd:32:c1:ff:bf:2e:71:8b:3e:1b:38:44: 7f:e8:41:73:30:00:2b:7b:96:fa:a6:dc:38:86:1e: fd:0e:8a:51:f9:f5:ff:2f:93:f5:c4:5d:0b:fd:00: 26:aa:26:72:5a:93:f8:e1:6d:fe:49:be:75:0c:82: 1d:2b:f7:7b:d3:6a:67:f7:d3:22:ce:5b:31:ac:98: f8:28:63:63:97:ac:47:5d:b3:eb:19:54:05:da:9c: ac:99:65:30:35:45:57:92:c8:ee:bb:ee:cf:c2:48: 8f:a1:dd:be:a9:b0:44:63:38:0d:2e:35:53:90:57: 97:40:d3:f3:24:7c:fa:4c:82:57:bd:66:97:99:00: 13:1a:22:47:2b:fa:65:83:c6:c0:4c:5d:25:0d:e4: 05:83:1d:05:2c:ee:19:12:b8:23:ae:b1:e1:ca:d0: 22:61:cb:ae:76:49:5d:11:0e:56:4e:64:53:a7:3c: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:10:86:92:AD:30:C0:BD:A7:BC:A1:B5:02:3A:A0:F7:1A:D1:D5:A1 X509v3 Authority Key Identifier: keyid:84:F9:4A:6E:A9:11:D8:64:F7:D1:C9:C5:26:6C:4F:F4:E5:08:BE:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7EpMHcvwrV9t6sSNuvoLhG7zr78Y91RF48V4qbucNHFg/0/84F94A6EA911D864F7D1C9C5266C4FF4E508BE5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84F94A6EA911D864F7D1C9C5266C4FF4E508BE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EpMHcvwrV9t6sSNuvoLhG7zr78Y91RF48V4qbucNHFg/0/323830343a386461633a3a2f33322d3334203d3e20323733333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8dac::/32 Signature Algorithm: sha256WithRSAEncryption 2d:78:12:66:be:16:5a:6d:66:6b:38:f9:93:de:42:82:33:69: 00:3d:2a:f1:6d:81:70:c4:57:b6:cf:da:e9:ce:c4:b9:54:16: 13:89:d3:8b:a3:fc:05:75:4d:f2:34:e6:1d:7b:79:25:7e:27: 64:93:c6:5a:81:36:9a:07:2e:74:69:a1:63:87:c8:fe:24:c6: 4d:9b:49:25:5d:d2:21:a3:59:2a:ae:b8:b9:05:e5:aa:26:e3: 2e:09:e2:74:46:8d:54:5f:eb:8b:04:77:1f:b3:23:e6:d1:f1: d8:dd:d0:dc:46:d7:a2:59:04:75:f0:ee:05:2e:2a:af:ad:ab: a7:24:2d:4c:1b:af:55:88:e3:df:b6:07:dc:5a:2f:fc:89:f1: be:d7:b8:f7:4e:f3:0e:dd:15:e0:6c:bf:5e:bd:92:f0:a6:bd: 8f:82:42:ee:8a:5d:c5:ba:a2:23:2d:0c:8d:24:ac:6e:54:4c: 77:16:03:e0:75:a6:fe:36:f0:b6:66:f1:9c:98:b6:f7:6e:58: 06:69:f1:b0:44:81:37:37:f9:90:ab:3c:fb:ce:af:de:0a:2c: 30:13:bc:40:97:b6:b9:8f:40:6d:1d:31:d6:32:13:60:ee:be: 02:20:97:16:e5:5d:e5:96:91:32:29:57:7d:e3:f8:53:24:7f: 4e:e3:f6:85 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUJEY7/lLubuYR3i8Vcy/+l9wl9IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRGOTRBNkVBOTExRDg2NEY3RDFDOUM1MjY2QzRGRjRF NTA4QkU1QTAeFw0yNTExMTcxMzA2MDRaFw0yNjExMTYxMzExMDRaMDMxMTAvBgNV BAMTKDc2MTA4NjkyQUQzMEMwQkRBN0JDQTFCNTAyM0FBMEY3MUFEMUQ1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzR94AiYMGQFhLVWMD7GK4r1IA ejdKHoH6ucEPryiCNP/DzurIDbcZe1HwjW9woC7y2UJcSy1gee7PCnFmoy7zb3LR Y1Bd3Qc72OiVjc0ywf+/LnGLPhs4RH/oQXMwACt7lvqm3DiGHv0OilH59f8vk/XE XQv9ACaqJnJak/jhbf5JvnUMgh0r93vTamf30yLOWzGsmPgoY2OXrEdds+sZVAXa nKyZZTA1RVeSyO677s/CSI+h3b6psERjOA0uNVOQV5dA0/MkfPpMgle9ZpeZABMa Ikcr+mWDxsBMXSUN5AWDHQUs7hkSuCOuseHK0CJhy652SV0RDlZOZFOnPOETAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUdhCGkq0wwL2nvKG1Ajqg9xrR1aEwHwYDVR0j BBgwFoAUhPlKbqkR2GT30cnFJmxP9OUIvlowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0VwTUhjdndyVjl0NnNTTnV2b0xoRzd6cjc4WTkxUkY0OFY0cWJ1Y05I RmcvMC84NEY5NEE2RUE5MTFEODY0RjdEMUM5QzUyNjZDNEZGNEU1MDhCRTVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0Rjk0QTZFQTkxMUQ4NjRG N0QxQzlDNTI2NkM0RkY0RTUwOEJFNUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdFcE1IY3Z3clY5dDZzU051dm9MaEc3enI3OFk5MVJGNDhWNHFidWNOSEZnLzAv MzIzODMwMzQzYTM4NjQ2MTYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMz MzMzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASNrDANBgkqhkiG9w0BAQsFAAOCAQEALXgSZr4W Wm1mazj5k95CgjNpAD0q8W2BcMRXts/a6c7EuVQWE4nTi6P8BXVN8jTmHXt5JX4n ZJPGWoE2mgcudGmhY4fI/iTGTZtJJV3SIaNZKq64uQXlqibjLgnidEaNVF/riwR3 H7Mj5tHx2N3Q3EbXolkEdfDuBS4qr62rpyQtTBuvVYjj37YH3Fov/Inxvte4907z Dt0V4Gy/Xr2S8Ka9j4JC7opdxbqiIy0MjSSsblRMdxYD4HWm/jbwtmbxnJi2925Y BmnxsESBNzf5kKs8+86v3gosMBO8QJe2uY9AbR0x1jITYO6+AiCXFuVd5ZaRMilX feP4UyR/TuP2hQ== -----END CERTIFICATE-----Generated at Mon Dec 8 11:21:08 2025 by rpki-client