This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/323830343a313764383a3a2f33322d3438203d3e203631393139.roa File: 323830343a313764383a3a2f33322d3438203d3e203631393139.roa (raw, json) Hash identifier: bITsOqfSBj5+fdjDTMOruwgIhQaxtp98y55+dSaaFZY= Subject key identifier: 2F:DB:DC:6B:1D:43:E3:1C:BD:EE:1C:F0:F4:C7:0D:1E:E2:77:3C:EF Certificate issuer: /CN=A90D3FFAF243378899C8E9EEDD7F6F846604CB82 Certificate serial: 68E25AF9F58035D6C149AE3F1F096CAD1CE8D9A2 Authority key identifier: A9:0D:3F:FA:F2:43:37:88:99:C8:E9:EE:DD:7F:6F:84:66:04:CB:82 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.cer Subject info access: rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/323830343a313764383a3a2f33322d3438203d3e203631393139.roa Signing time: Thu 20 Nov 2025 18:20:41 +0000 ROA not before: Thu 20 Nov 2025 18:15:41 +0000 ROA not after: Thu 19 Nov 2026 18:20:41 +0000 asID: 61919 IP address blocks: 2804:17d8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.crl rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 19:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e2:5a:f9:f5:80:35:d6:c1:49:ae:3f:1f:09:6c:ad:1c:e8:d9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90D3FFAF243378899C8E9EEDD7F6F846604CB82 Validity Not Before: Nov 20 18:15:41 2025 GMT Not After : Nov 19 18:20:41 2026 GMT Subject: CN=2FDBDC6B1D43E31CBDEE1CF0F4C70D1EE2773CEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:4e:1b:bb:8e:c6:51:f0:3e:a3:8b:30:35: 45:f3:7e:01:5b:90:1e:28:08:0e:29:12:cd:e2:1f: a2:7b:dd:49:7e:3e:f0:e8:5f:65:b3:dc:c5:63:64: 64:9f:d0:6d:db:fc:bc:5e:bb:21:45:f6:46:32:61: c2:12:66:d6:fa:0e:45:85:5d:f6:33:7e:9e:75:8e: f8:79:57:c0:53:35:83:53:41:ae:7e:a6:3e:9e:94: ab:e1:7c:71:8d:73:50:1e:3d:02:f9:3c:1d:dc:5a: 67:91:3a:74:1f:b5:71:b5:fd:8f:9f:1f:e8:c5:3a: 71:cf:ad:f0:a0:18:26:e6:e9:45:0c:9f:2b:3f:19: 53:7b:ee:54:a4:a5:e3:fb:3e:73:01:91:3b:bd:5b: d5:7d:b9:8e:bf:da:b7:ab:58:3a:07:ed:fe:3f:9f: fc:21:3f:35:1f:12:26:7f:b4:04:de:63:54:06:e6: 86:e7:9a:df:4c:b7:53:d3:e2:4e:36:e2:21:31:c5: 9b:dd:04:17:4c:46:3b:9d:81:1f:50:7b:56:be:d3: 0d:53:2b:2c:37:42:7e:8b:22:63:7a:8b:14:47:a5: 7e:42:b2:6b:1e:84:6e:83:55:2e:9d:33:14:07:1a: 4b:eb:a5:fb:5a:6b:33:3b:57:72:1e:3d:cc:fe:bb: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DB:DC:6B:1D:43:E3:1C:BD:EE:1C:F0:F4:C7:0D:1E:E2:77:3C:EF X509v3 Authority Key Identifier: keyid:A9:0D:3F:FA:F2:43:37:88:99:C8:E9:EE:DD:7F:6F:84:66:04:CB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/323830343a313764383a3a2f33322d3438203d3e203631393139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:17d8::/32 Signature Algorithm: sha256WithRSAEncryption 10:0d:cf:f1:cf:25:1f:4c:65:fc:91:43:2a:33:d5:f8:57:0f: ce:f4:a9:fe:87:10:0f:b8:61:34:ac:a1:ff:e7:06:47:00:4d: 91:3e:a9:47:2a:b8:40:f5:a6:9e:89:bd:8c:4a:9b:06:dc:62: 24:96:29:35:1a:53:01:d0:a5:02:cb:39:9f:10:95:0c:41:bf: aa:63:8d:e1:a3:48:56:19:cf:2f:3c:1c:99:52:47:96:ac:a0: 29:1a:4a:07:ed:2a:50:1b:07:e4:a8:42:0b:76:47:7e:97:0c: eb:6c:1c:18:27:2a:82:72:96:2f:cb:d2:d9:22:81:22:cc:4b: 51:0e:1b:ea:c3:fe:6a:41:0b:78:2e:93:0c:e7:24:4f:37:8c: ac:ff:d3:8e:5a:0c:bc:f7:0c:a0:27:9f:06:63:f3:04:af:09: 14:c2:18:8c:47:7f:da:4e:86:fb:34:99:ef:00:86:32:a4:7b: ca:c6:84:40:05:f5:d8:c2:bf:40:05:43:b0:3d:88:9b:50:6f: bc:1b:cf:fd:f7:0a:b5:cf:7f:f8:ab:79:32:15:e0:bd:74:09: 1b:fd:2d:f7:4a:5b:e2:52:d2:f9:7a:0d:d5:6c:15:eb:94:92: 1d:e9:71:13:f1:d7:c5:0d:d3:9d:fa:3d:2f:c6:bb:28:97:c6: 24:c4:d9:04 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUaOJa+fWANdbBSa4/HwlsrRzo2aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkwRDNGRkFGMjQzMzc4ODk5QzhFOUVFREQ3RjZGODQ2 NjA0Q0I4MjAeFw0yNTExMjAxODE1NDFaFw0yNjExMTkxODIwNDFaMDMxMTAvBgNV BAMTKDJGREJEQzZCMUQ0M0UzMUNCREVFMUNGMEY0QzcwRDFFRTI3NzNDRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2k4bu47GUfA+o4swNUXzfgFb kB4oCA4pEs3iH6J73Ul+PvDoX2Wz3MVjZGSf0G3b/LxeuyFF9kYyYcISZtb6DkWF XfYzfp51jvh5V8BTNYNTQa5+pj6elKvhfHGNc1AePQL5PB3cWmeROnQftXG1/Y+f H+jFOnHPrfCgGCbm6UUMnys/GVN77lSkpeP7PnMBkTu9W9V9uY6/2rerWDoH7f4/ n/whPzUfEiZ/tATeY1QG5obnmt9Mt1PT4k424iExxZvdBBdMRjudgR9Qe1a+0w1T Kyw3Qn6LImN6ixRHpX5CsmsehG6DVS6dMxQHGkvrpftaazM7V3IePcz+u2OvAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUL9vcax1D4xy97hzw9McNHuJ3PO8wHwYDVR0j BBgwFoAUqQ0/+vJDN4iZyOnu3X9vhGYEy4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEs0b2RuYTdHVFc2ZlU5cEdHUzVNVHFORmg0Y3VTZXpaSzh2QkFSNkhC NXEvMC9BOTBEM0ZGQUYyNDMzNzg4OTlDOEU5RUVERDdGNkY4NDY2MDRDQjgyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MEQzRkZBRjI0MzM3ODg5 OUM4RTlFRUREN0Y2Rjg0NjYwNENCODIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhLNG9kbmE3R1RXNmZVOXBHR1M1TVRxTkZoNGN1U2V6Wks4dkJBUjZIQjVxLzAv MzIzODMwMzQzYTMxMzc2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM5 MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEF9gwDQYJKoZIhvcNAQELBQADggEBABANz/HPJR9M ZfyRQyoz1fhXD870qf6HEA+4YTSsof/nBkcATZE+qUcquED1pp6JvYxKmwbcYiSW KTUaUwHQpQLLOZ8QlQxBv6pjjeGjSFYZzy88HJlSR5asoCkaSgftKlAbB+SoQgt2 R36XDOtsHBgnKoJyli/L0tkigSLMS1EOG+rD/mpBC3gukwznJE83jKz/045aDLz3 DKAnnwZj8wSvCRTCGIxHf9pOhvs0me8AhjKke8rGhEAF9djCv0AFQ7A9iJtQb7wb z/33CrXPf/ireTIV4L10CRv9LfdKW+JS0vl6DdVsFeuUkh3pcRPx18UN0536PS/G uyiXxiTE2QQ= -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:54 2025 by rpki-client