This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8AhFSSfURtDMekUdy6nv3qmYjk5asj4KjCJLX48Kb8tu/0/323830343a326664633a3a2f33322d3438203d3e20323634393137.roa File: 323830343a326664633a3a2f33322d3438203d3e20323634393137.roa (raw, json) Hash identifier: q0vThy+tWEfCwVgE4xpUCP2Y3fg9QLB0VI5mUaD5woQ= Subject key identifier: C4:47:0E:74:08:4C:8E:A3:B5:CB:F3:88:84:CD:05:F2:5B:A4:D4:28 Certificate issuer: /CN=138AD5CC554B5E56ABE278C0CD5DBA6AE9465C08 Certificate serial: 12476B4E753B10ACF1BAF2C50C7B844EE0274D85 Authority key identifier: 13:8A:D5:CC:55:4B:5E:56:AB:E2:78:C0:CD:5D:BA:6A:E9:46:5C:08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/138AD5CC554B5E56ABE278C0CD5DBA6AE9465C08.cer Subject info access: rsync://rpki-repo.registro.br/repo/8AhFSSfURtDMekUdy6nv3qmYjk5asj4KjCJLX48Kb8tu/0/323830343a326664633a3a2f33322d3438203d3e20323634393137.roa Signing time: Wed 12 Nov 2025 11:53:36 +0000 ROA not before: Wed 12 Nov 2025 11:48:36 +0000 ROA not after: Wed 11 Nov 2026 11:53:36 +0000 asID: 264917 IP address blocks: 2804:2fdc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8AhFSSfURtDMekUdy6nv3qmYjk5asj4KjCJLX48Kb8tu/0/138AD5CC554B5E56ABE278C0CD5DBA6AE9465C08.crl rsync://rpki-repo.registro.br/repo/8AhFSSfURtDMekUdy6nv3qmYjk5asj4KjCJLX48Kb8tu/0/138AD5CC554B5E56ABE278C0CD5DBA6AE9465C08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/138AD5CC554B5E56ABE278C0CD5DBA6AE9465C08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:47:6b:4e:75:3b:10:ac:f1:ba:f2:c5:0c:7b:84:4e:e0:27:4d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138AD5CC554B5E56ABE278C0CD5DBA6AE9465C08 Validity Not Before: Nov 12 11:48:36 2025 GMT Not After : Nov 11 11:53:36 2026 GMT Subject: CN=C4470E74084C8EA3B5CBF38884CD05F25BA4D428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:3c:ab:30:d7:9f:f1:24:36:7c:7b:de:cd: 89:8a:af:29:60:d1:cc:3a:83:3e:f1:21:43:a9:36: e9:1f:ba:c2:1d:8e:c4:47:c4:4f:96:81:22:f3:f4: 37:4d:b6:23:e9:f1:9c:47:e9:28:e8:d2:6c:e7:f9: d5:c4:dd:cb:8f:34:10:96:fd:7a:69:64:fc:76:0e: fe:66:50:12:09:b1:62:9d:54:3a:6b:54:72:c7:f3: af:09:18:f9:76:0b:c9:cd:28:ea:44:5b:df:ea:31: df:e2:da:50:e8:a1:94:a6:45:25:94:38:83:b2:c8: 56:96:81:af:5d:43:5e:a5:ef:0d:df:b6:04:b7:c9: 65:12:19:66:26:93:0a:91:e4:13:e5:01:19:f3:16: 8f:57:f6:eb:28:67:42:9d:8b:17:05:c4:5b:39:84: 39:f8:fe:5e:d1:4f:5b:be:94:c7:77:90:da:6c:40: 4d:ce:e1:73:00:5b:77:66:b5:0f:f4:ce:61:66:1f: 86:18:3f:16:dc:df:a6:60:1d:f9:d5:53:82:e8:01: 7d:d3:2d:e8:22:15:8a:96:ee:ed:4f:a7:6a:79:ed: 77:13:8e:d4:83:92:14:c5:fe:81:73:5d:16:ef:69: 77:d5:70:91:25:8d:5a:8f:af:45:ba:1c:7a:2f:14: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:47:0E:74:08:4C:8E:A3:B5:CB:F3:88:84:CD:05:F2:5B:A4:D4:28 X509v3 Authority Key Identifier: keyid:13:8A:D5:CC:55:4B:5E:56:AB:E2:78:C0:CD:5D:BA:6A:E9:46:5C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8AhFSSfURtDMekUdy6nv3qmYjk5asj4KjCJLX48Kb8tu/0/138AD5CC554B5E56ABE278C0CD5DBA6AE9465C08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/138AD5CC554B5E56ABE278C0CD5DBA6AE9465C08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AhFSSfURtDMekUdy6nv3qmYjk5asj4KjCJLX48Kb8tu/0/323830343a326664633a3a2f33322d3438203d3e20323634393137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2fdc::/32 Signature Algorithm: sha256WithRSAEncryption 4d:41:64:b6:c3:23:28:68:ec:99:53:3a:40:92:83:9e:7d:68: ce:75:7c:f2:bb:c9:ce:ef:ef:b7:4f:bb:db:57:66:49:34:89: e6:98:93:a5:0e:ce:d4:70:08:3e:d1:bb:88:ce:16:06:39:04: 27:54:49:41:48:f7:1f:76:f1:70:ad:04:f1:19:7d:fe:44:02: ef:3c:c0:40:03:b6:73:63:a2:8c:9c:a7:f2:36:48:99:63:29: 93:ef:56:ec:ac:57:d2:4a:66:7f:98:a5:b9:6a:ab:67:91:41: 86:c1:23:6c:ec:52:ad:c3:00:62:bf:b7:2e:6f:a4:ab:b2:28: 70:48:58:d6:4f:f0:29:15:b6:43:20:fa:16:8e:c2:ed:3e:96: 3b:59:f5:67:9e:72:c0:a1:46:1e:ac:ab:7e:e9:60:f1:31:2f: 25:50:84:96:e1:a7:73:42:6f:15:2f:9d:fd:d4:48:b9:69:01: 1b:8c:85:b5:9e:09:48:ea:e5:98:d0:02:83:77:06:80:f5:75: 71:58:93:d9:d8:3f:f9:b9:db:7f:ee:b5:65:e5:06:0d:58:b4: d9:7f:af:5c:11:f7:bb:3d:2c:62:54:e2:33:4d:e0:f2:ef:8c: 69:aa:51:7e:1d:cd:df:ae:42:8e:57:56:62:01:18:44:fb:a3: 13:08:01:f9 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUEkdrTnU7EKzxuvLFDHuETuAnTYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM4QUQ1Q0M1NTRCNUU1NkFCRTI3OEMwQ0Q1REJBNkFF OTQ2NUMwODAeFw0yNTExMTIxMTQ4MzZaFw0yNjExMTExMTUzMzZaMDMxMTAvBgNV BAMTKEM0NDcwRTc0MDg0QzhFQTNCNUNCRjM4ODg0Q0QwNUYyNUJBNEQ0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YDyrMNef8SQ2fHvezYmKrylg 0cw6gz7xIUOpNukfusIdjsRHxE+WgSLz9DdNtiPp8ZxH6Sjo0mzn+dXE3cuPNBCW /XppZPx2Dv5mUBIJsWKdVDprVHLH868JGPl2C8nNKOpEW9/qMd/i2lDooZSmRSWU OIOyyFaWga9dQ16l7w3ftgS3yWUSGWYmkwqR5BPlARnzFo9X9usoZ0KdixcFxFs5 hDn4/l7RT1u+lMd3kNpsQE3O4XMAW3dmtQ/0zmFmH4YYPxbc36ZgHfnVU4LoAX3T LegiFYqW7u1Pp2p57XcTjtSDkhTF/oFzXRbvaXfVcJEljVqPr0W6HHovFJ77AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUxEcOdAhMjqO1y/OIhM0F8luk1CgwHwYDVR0j BBgwFoAUE4rVzFVLXlar4njAzV26aulGXAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEFoRlNTZlVSdERNZWtVZHk2bnYzcW1Zams1YXNqNEtqQ0pMWDQ4S2I4 dHUvMC8xMzhBRDVDQzU1NEI1RTU2QUJFMjc4QzBDRDVEQkE2QUU5NDY1QzA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzOEFENUNDNTU0QjVFNTZB QkUyNzhDMENENURCQTZBRTk0NjVDMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhBaEZTU2ZVUnRETWVrVWR5Nm52M3FtWWprNWFzajRLakNKTFg0OEtiOHR1LzAv MzIzODMwMzQzYTMyNjY2NDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0 MzkzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQv3DANBgkqhkiG9w0BAQsFAAOCAQEATUFktsMj KGjsmVM6QJKDnn1oznV88rvJzu/vt0+721dmSTSJ5piTpQ7O1HAIPtG7iM4WBjkE J1RJQUj3H3bxcK0E8Rl9/kQC7zzAQAO2c2OijJyn8jZImWMpk+9W7KxX0kpmf5il uWqrZ5FBhsEjbOxSrcMAYr+3Lm+kq7IocEhY1k/wKRW2QyD6Fo7C7T6WO1n1Z55y wKFGHqyrfulg8TEvJVCEluGnc0JvFS+d/dRIuWkBG4yFtZ4JSOrlmNACg3cGgPV1 cViT2dg/+bnbf+61ZeUGDVi02X+vXBH3uz0sYlTiM03g8u+MaapRfh3N365CjldW YgEYRPujEwgB+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:10:54 2025 by rpki-client