This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa File: 323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (raw, json) Hash identifier: cHMEH3okxWfwROJpehpqXokpVfIavyGmq4FX80L1Gbw= Subject key identifier: C8:25:8E:E5:FC:D1:16:57:0F:77:A1:89:1E:6D:4F:FD:2B:53:88:FB Certificate issuer: /CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35 Certificate serial: 54BDB45EAA36FB55E51EB2D159D4510C54132238 Authority key identifier: 1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa Signing time: Tue 11 Nov 2025 11:55:57 +0000 ROA not before: Tue 11 Nov 2025 11:50:57 +0000 ROA not after: Tue 10 Nov 2026 11:55:57 +0000 asID: 263142 IP address blocks: 2804:1760::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:bd:b4:5e:aa:36:fb:55:e5:1e:b2:d1:59:d4:51:0c:54:13:22:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35 Validity Not Before: Nov 11 11:50:57 2025 GMT Not After : Nov 10 11:55:57 2026 GMT Subject: CN=C8258EE5FCD116570F77A1891E6D4FFD2B5388FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:76:fa:d6:6d:5b:37:54:7b:a5:23:f8:8e:03: f7:a0:c7:33:81:1e:91:b7:8c:51:b5:bb:39:f8:91: 23:cd:7c:d2:28:cc:05:b4:25:ad:37:2a:d8:d7:89: fd:6e:11:1b:20:4b:58:cb:a7:be:cf:2e:b4:18:60: 7f:78:f0:ae:bb:fa:7f:3e:41:50:38:e1:9f:df:8d: d0:da:d9:fc:25:68:c8:24:bf:1e:80:ca:7a:50:5f: fd:68:b6:64:bd:a6:ad:10:d9:3f:78:74:a1:53:9e: ff:d9:71:e9:f2:43:99:c9:35:1b:68:71:78:7f:0b: 80:f8:48:de:ec:ba:a4:2b:c0:6b:46:2e:75:81:37: ed:13:b0:cb:10:76:f1:2e:96:bd:1f:c9:b7:2c:6a: c0:c5:8e:e5:ae:78:d9:e7:b7:41:45:1d:ff:d4:0a: 1a:a1:e8:b0:dc:a7:47:50:d3:48:f0:99:4d:51:4b: 40:94:1e:e4:9f:df:e7:76:22:91:66:0c:08:8b:b8: bc:ed:40:17:4d:76:ae:5e:08:f4:94:51:64:b6:bc: 94:a8:69:49:90:e4:5e:be:27:ef:14:80:de:b7:b7: 84:45:3d:b1:f2:7f:78:38:8e:49:04:11:7f:8b:15: 78:e3:80:98:59:c3:33:c5:54:67:64:32:7f:a7:0c: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:25:8E:E5:FC:D1:16:57:0F:77:A1:89:1E:6D:4F:FD:2B:53:88:FB X509v3 Authority Key Identifier: keyid:1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1760::/32 Signature Algorithm: sha256WithRSAEncryption 2a:78:4b:0d:70:e1:6c:fa:62:ba:62:97:80:38:f7:06:ce:82: c4:24:fd:a6:f3:7e:40:1e:7f:78:f3:c8:b7:da:6b:2a:41:80: 73:47:c7:13:4f:67:29:93:e0:13:4e:b4:c3:43:0f:cd:4a:49: 92:13:e7:30:d1:8d:55:ec:48:0c:71:91:ef:cb:68:e5:f1:cc: 1e:ec:b7:16:80:f5:93:ef:69:09:d9:99:f5:26:45:c6:ae:57: b2:e6:db:b6:fc:76:e3:cf:b0:99:21:75:5a:df:fc:52:6a:12: 2d:b6:2d:ff:83:a4:a9:64:ca:a2:65:87:33:03:fa:12:77:44: 68:fb:57:e3:62:b8:0a:07:41:24:89:3a:32:2e:92:a8:9a:05: 06:c4:e1:c9:ed:4c:2a:ce:78:70:bb:d5:d9:69:cd:22:91:06: 5e:ae:7f:38:60:4c:4f:fe:38:ab:bb:df:b4:24:d3:fe:0b:61: a6:42:bf:ee:f6:97:99:ac:17:1d:df:18:9a:92:5a:f7:9a:fa: 92:76:4a:82:d3:c9:85:bf:ad:5d:91:86:ac:31:80:25:a8:01: 06:18:92:24:93:7d:e1:08:33:d4:98:35:fa:27:8a:2a:28:79: a5:f6:94:69:c0:6f:c7:9e:1c:9e:65:be:bc:2e:20:ea:eb:03: ae:3b:fe:1a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUVL20Xqo2+1XlHrLRWdRRDFQTIjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFMUFDRDFGODUyOUIwNTREQTc4RDFCNTk3NEI4RDVF ODQ2RkEzNTAeFw0yNTExMTExMTUwNTdaFw0yNjExMTAxMTU1NTdaMDMxMTAvBgNV BAMTKEM4MjU4RUU1RkNEMTE2NTcwRjc3QTE4OTFFNkQ0RkZEMkI1Mzg4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdvrWbVs3VHulI/iOA/egxzOB HpG3jFG1uzn4kSPNfNIozAW0Ja03KtjXif1uERsgS1jLp77PLrQYYH948K67+n8+ QVA44Z/fjdDa2fwlaMgkvx6AynpQX/1otmS9pq0Q2T94dKFTnv/ZcenyQ5nJNRto cXh/C4D4SN7suqQrwGtGLnWBN+0TsMsQdvEulr0fybcsasDFjuWueNnnt0FFHf/U Chqh6LDcp0dQ00jwmU1RS0CUHuSf3+d2IpFmDAiLuLztQBdNdq5eCPSUUWS2vJSo aUmQ5F6+J+8UgN63t4RFPbHyf3g4jkkEEX+LFXjjgJhZwzPFVGdkMn+nDNgxAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUyCWO5fzRFlcPd6GJHm1P/StTiPswHwYDVR0j BBgwFoAUHOGs0fhSmwVNp40bWXS41ehG+jUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFlTUUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4 c1kvMC8xQ0UxQUNEMUY4NTI5QjA1NERBNzhEMUI1OTc0QjhENUU4NDZGQTM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRTFBQ0QxRjg1MjlCMDU0 REE3OEQxQjU5NzRCOEQ1RTg0NkZBMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhZU1FKQ1lKdmtLUXFQckJmZnhEd3FCR2VaOGlaTEh2eTdtOGlUNlFKeHNZLzAv MzIzODMwMzQzYTMxMzczNjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzMzMTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBBdgMA0GCSqGSIb3DQEBCwUAA4IBAQAqeEsN cOFs+mK6YpeAOPcGzoLEJP2m835AHn9488i32msqQYBzR8cTT2cpk+ATTrTDQw/N SkmSE+cw0Y1V7EgMcZHvy2jl8cwe7LcWgPWT72kJ2Zn1JkXGrley5tu2/Hbjz7CZ IXVa3/xSahItti3/g6SpZMqiZYczA/oSd0Ro+1fjYrgKB0EkiToyLpKomgUGxOHJ 7Uwqznhwu9XZac0ikQZern84YExP/jiru9+0JNP+C2GmQr/u9peZrBcd3xiaklr3 mvqSdkqC08mFv61dkYasMYAlqAEGGJIkk33hCDPUmDX6J4oqKHml9pRpwG/Hnhye Zb68LiDq6wOuO/4a -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:47 2025 by rpki-client