This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3438203d3e203238333036.roa File: 323830343a33343a3a2f33322d3438203d3e203238333036.roa (raw, json) Hash identifier: pLZaekLmmHpU0JO1ZeK8kS7V8K+kqvULpE4f37fCc6s= Subject key identifier: 0D:A0:22:CA:E8:4A:2F:6F:DC:6C:2B:DE:6C:4C:6B:4C:74:9B:41:FA Certificate issuer: /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Certificate serial: 179D811F7000E0C9F67F12078BB1DC2A09B33EC9 Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3438203d3e203238333036.roa Signing time: Mon 24 Nov 2025 13:28:16 +0000 ROA not before: Mon 24 Nov 2025 13:23:16 +0000 ROA not after: Mon 23 Nov 2026 13:28:16 +0000 asID: 28306 IP address blocks: 2804:34::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9d:81:1f:70:00:e0:c9:f6:7f:12:07:8b:b1:dc:2a:09:b3:3e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Validity Not Before: Nov 24 13:23:16 2025 GMT Not After : Nov 23 13:28:16 2026 GMT Subject: CN=0DA022CAE84A2F6FDC6C2BDE6C4C6B4C749B41FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:34:0d:7a:83:39:ae:04:28:a7:78:e0:cb: 92:09:12:8c:e0:8c:5d:7b:42:4a:f9:95:64:f1:64: d0:0a:e7:54:56:53:0d:8e:d7:88:4c:6f:99:df:da: 73:51:9c:d3:bc:7d:d8:ca:79:7d:b6:af:03:76:4e: c3:0c:db:71:07:0e:51:8d:87:23:1b:0f:49:db:84: 77:9b:d9:02:c1:6a:f5:4a:f3:fe:04:13:c8:90:c7: 90:da:a9:e2:bd:b8:ef:ed:d6:a9:0d:14:88:dd:9c: 95:3c:e8:ea:84:ac:11:d6:43:d0:00:c3:d4:7b:cc: ea:14:ba:e5:f6:14:1b:06:f8:2e:a3:fc:1f:cf:f2: bd:81:11:36:f8:31:d5:cb:31:2b:49:e7:7b:b3:d1: 1d:0a:be:02:33:34:b5:cf:16:73:92:94:37:8d:2b: b6:a3:90:8a:70:51:18:67:96:d3:13:bb:b5:04:b0: 92:6e:36:28:d3:bf:df:da:e1:72:eb:40:e0:a2:1a: 40:7d:d3:10:c9:14:92:95:64:27:36:3f:71:08:68: 89:82:3c:a6:f4:2c:04:43:ac:f5:c5:fe:cf:be:92: 0b:33:7a:54:8f:77:2c:a2:18:96:ad:9a:1b:1c:14: c1:22:c6:b5:2d:06:af:a3:eb:79:71:2d:78:d5:d0: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A0:22:CA:E8:4A:2F:6F:DC:6C:2B:DE:6C:4C:6B:4C:74:9B:41:FA X509v3 Authority Key Identifier: keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3438203d3e203238333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:34::/32 Signature Algorithm: sha256WithRSAEncryption 0b:53:3a:6d:97:8b:a1:fe:8a:68:55:f8:fc:9b:a7:99:54:02: 17:d9:b9:1c:cc:04:ff:27:74:1d:f5:31:51:d3:df:d6:2a:26: 30:46:ca:58:56:2c:6c:85:fa:ea:5d:4b:ab:e6:be:17:45:3e: 12:a7:9e:08:88:1f:d7:ae:14:66:5f:df:cb:c2:a3:8c:80:07: d9:61:df:cf:85:29:45:26:c0:e3:65:c7:9e:a9:80:fc:d6:3d: 92:cb:89:47:9a:24:40:b5:a0:99:92:4c:32:22:37:e6:fb:69: 38:c6:a8:dc:4e:10:26:5e:28:46:35:ec:7d:34:c4:23:91:bf: df:7b:60:d9:02:5d:00:2d:b4:b3:cb:01:42:b5:67:12:d4:5d: aa:97:ee:0c:e7:e6:b8:27:c4:d1:b4:0c:2f:0d:84:2d:f4:a9: 6e:4a:a5:73:42:a8:b5:71:49:7b:4e:d9:c4:bf:ae:1c:45:09: 05:78:a8:b5:11:eb:00:07:fe:30:73:cc:be:60:dd:e9:82:67: e7:11:ae:1b:18:ba:a9:ff:e2:94:6a:5b:50:29:ff:08:0e:95: 96:72:68:ec:e8:d0:6c:83:a3:a5:18:47:dd:65:a4:c8:eb:7f: 0f:b6:f0:39:4b:06:4a:de:c6:90:3e:74:1b:91:ee:84:85:d0: c0:d2:b5:cb -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUF52BH3AA4Mn2fxIHi7HcKgmzPskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDMzUyQ0M0RUNDRTMyNUZEMzdFQ0U3ODNFNEM1NDIw QjIzQzUwMzAeFw0yNTExMjQxMzIzMTZaFw0yNjExMjMxMzI4MTZaMDMxMTAvBgNV BAMTKDBEQTAyMkNBRTg0QTJGNkZEQzZDMkJERTZDNEM2QjRDNzQ5QjQxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySjQNeoM5rgQop3jgy5IJEozg jF17Qkr5lWTxZNAK51RWUw2O14hMb5nf2nNRnNO8fdjKeX22rwN2TsMM23EHDlGN hyMbD0nbhHeb2QLBavVK8/4EE8iQx5DaqeK9uO/t1qkNFIjdnJU86OqErBHWQ9AA w9R7zOoUuuX2FBsG+C6j/B/P8r2BETb4MdXLMStJ53uz0R0KvgIzNLXPFnOSlDeN K7ajkIpwURhnltMTu7UEsJJuNijTv9/a4XLrQOCiGkB90xDJFJKVZCc2P3EIaImC PKb0LARDrPXF/s++kgszelSPdyyiGJatmhscFMEixrUtBq+j63lxLXjV0EjhAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUDaAiyuhKL2/cbCvebExrTHSbQfowHwYDVR0j BBgwFoAUvcNSzE7M4yX9N+zng+TFQgsjxQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O dWcvMC9CREMzNTJDQzRFQ0NFMzI1RkQzN0VDRTc4M0U0QzU0MjBCMjNDNTAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzM1MkNDNEVDQ0UzMjVG RDM3RUNFNzgzRTRDNTQyMEIyM0M1MDMuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv MzIzODMwMzQzYTMzMzQzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM4MzMzMDM2 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw DzANBAIAAjAHAwUAKAQANDANBgkqhkiG9w0BAQsFAAOCAQEAC1M6bZeLof6KaFX4 /JunmVQCF9m5HMwE/yd0HfUxUdPf1iomMEbKWFYsbIX66l1Lq+a+F0U+EqeeCIgf 164UZl/fy8KjjIAH2WHfz4UpRSbA42XHnqmA/NY9ksuJR5okQLWgmZJMMiI35vtp OMao3E4QJl4oRjXsfTTEI5G/33tg2QJdAC20s8sBQrVnEtRdqpfuDOfmuCfE0bQM Lw2ELfSpbkqlc0KotXFJe07ZxL+uHEUJBXiotRHrAAf+MHPMvmDd6YJn5xGuGxi6 qf/ilGpbUCn/CA6VlnJo7OjQbIOjpRhH3WWkyOt/D7bwOUsGSt7GkD50G5HuhIXQ wNK1yw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:41 2025 by rpki-client