This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/323830343a3731383a3a2f33322d3332203d3e20323632363230.roa File: 323830343a3731383a3a2f33322d3332203d3e20323632363230.roa (raw, json) Hash identifier: SsNbWvZWT2jQFMNFhxaxYClxEzvJjY6xA2bYzwb0GHk= Subject key identifier: D6:A2:CC:70:A4:86:9E:33:5F:4E:CB:FC:9B:12:F0:2E:52:03:C6:A6 Certificate issuer: /CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87 Certificate serial: 577BAEBE437B413CCA72E06FC3CD6793B04E5139 Authority key identifier: 88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer Subject info access: rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/323830343a3731383a3a2f33322d3332203d3e20323632363230.roa Signing time: Fri 28 Nov 2025 13:21:51 +0000 ROA not before: Fri 28 Nov 2025 13:16:51 +0000 ROA not after: Fri 27 Nov 2026 13:21:51 +0000 asID: 262620 IP address blocks: 2804:718::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7b:ae:be:43:7b:41:3c:ca:72:e0:6f:c3:cd:67:93:b0:4e:51:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87 Validity Not Before: Nov 28 13:16:51 2025 GMT Not After : Nov 27 13:21:51 2026 GMT Subject: CN=D6A2CC70A4869E335F4ECBFC9B12F02E5203C6A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:77:02:82:79:f3:db:b0:b9:8d:65:41:11: 50:7e:2b:b0:b6:73:e8:1f:85:86:ab:bd:24:f8:4b: 03:ba:31:13:bb:ab:15:f9:50:be:93:8f:60:a0:5c: 9c:32:1a:66:05:f1:d0:44:ff:0d:dd:40:5d:dc:7a: 09:5f:ca:80:25:5c:55:1a:12:e0:17:71:51:e3:71: 04:34:b3:18:90:0a:7c:51:c4:ee:33:26:f1:4e:c7: a9:6f:b4:8c:26:f4:7f:9b:5d:ee:fb:8b:34:ad:4d: 88:00:9c:57:73:ce:47:30:fd:53:6e:fb:41:df:48: a2:d5:9f:2e:71:42:b5:2d:4d:55:e4:5c:7e:55:4c: d8:6a:78:0f:b6:9d:4e:e9:57:d5:24:4c:f6:20:f1: 0c:31:5c:b9:d9:eb:8e:fc:36:1c:53:cb:4e:04:1d: ac:9e:31:62:80:16:fe:09:42:43:6c:c0:8c:4e:56: 5d:fb:b5:58:ac:f9:58:86:8a:c5:f8:d6:17:81:c8: ef:c5:53:61:52:bb:fe:17:1f:da:f8:06:84:a6:e1: c8:db:ac:82:ee:ad:f1:a0:0e:f9:47:1c:33:78:0e: 5b:cc:7a:74:ab:5d:94:5d:fb:df:af:49:bb:fe:df: 23:76:3d:08:8f:d4:a8:28:c7:0e:4d:07:44:43:9a: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A2:CC:70:A4:86:9E:33:5F:4E:CB:FC:9B:12:F0:2E:52:03:C6:A6 X509v3 Authority Key Identifier: keyid:88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/323830343a3731383a3a2f33322d3332203d3e20323632363230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:718::/32 Signature Algorithm: sha256WithRSAEncryption 04:5d:a9:89:06:92:4b:6e:c9:4c:45:5c:c7:a6:96:a3:58:a1: d4:1f:79:3a:58:83:11:f5:8a:90:2f:05:88:1f:5d:8a:69:fd: a6:39:08:bf:9b:be:03:33:81:02:f2:e8:76:c8:7c:18:56:c0: dd:8e:36:ea:d0:1d:39:d1:d7:ac:e9:61:d3:f5:00:97:bb:ce: a4:5e:b7:0a:84:60:c5:10:9a:b3:86:88:26:a4:9f:a0:9c:86: 0a:79:ab:53:bd:70:1f:2a:1d:1a:3a:c1:87:b6:9c:c2:ee:a7: 74:c1:7a:bf:70:55:a1:78:7a:25:9f:5c:3e:34:ef:9e:83:a7: 99:b9:de:c7:8d:da:87:29:1f:e0:a4:ae:e1:2d:ed:e9:de:e4: f1:bc:3c:53:ef:a5:f3:d9:18:ef:d0:77:fc:85:10:db:a4:43: f9:8f:76:32:17:4b:fc:2b:9f:c4:ae:1b:f3:4d:01:fd:11:ab: 91:27:07:3b:d8:ab:c1:a5:4a:25:8f:60:61:76:06:14:6d:53: 97:59:b3:29:8c:a5:25:6a:6e:8b:ea:69:6c:14:99:1f:6b:cb: 1c:52:db:16:71:bd:5c:fd:6b:bc:fc:20:ef:f6:a4:1b:c2:1f: 17:67:3f:fd:0e:da:50:f8:52:74:20:89:73:73:3f:12:f4:2b: 14:5c:83:6a -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUV3uuvkN7QTzKcuBvw81nk7BOUTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgxRUMxRTQ2RUU5MkQ3RTI0OTQxMERDQUYwRTVBRUY2 OEY1OEQ4NzAeFw0yNTExMjgxMzE2NTFaFw0yNjExMjcxMzIxNTFaMDMxMTAvBgNV BAMTKEQ2QTJDQzcwQTQ4NjlFMzM1RjRFQ0JGQzlCMTJGMDJFNTIwM0M2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzt3cCgnnz27C5jWVBEVB+K7C2 c+gfhYarvST4SwO6MRO7qxX5UL6Tj2CgXJwyGmYF8dBE/w3dQF3ceglfyoAlXFUa EuAXcVHjcQQ0sxiQCnxRxO4zJvFOx6lvtIwm9H+bXe77izStTYgAnFdzzkcw/VNu +0HfSKLVny5xQrUtTVXkXH5VTNhqeA+2nU7pV9UkTPYg8QwxXLnZ6478NhxTy04E HayeMWKAFv4JQkNswIxOVl37tVis+ViGisX41heByO/FU2FSu/4XH9r4BoSm4cjb rILurfGgDvlHHDN4DlvMenSrXZRd+9+vSbv+3yN2PQiP1Kgoxw5NB0RDmni3AgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU1qLMcKSGnjNfTsv8mxLwLlIDxqYwHwYDVR0j BBgwFoAUiB7B5G7pLX4klBDcrw5a72j1jYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHB3aWlSWjRhZllNeHdudEJ2S05TSEc4VlNhTHJWNVYyUGl0ZkRHTjJN QlEvMC84ODFFQzFFNDZFRTkyRDdFMjQ5NDEwRENBRjBFNUFFRjY4RjU4RDg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MUVDMUU0NkVFOTJEN0Uy NDk0MTBEQ0FGMEU1QUVGNjhGNThEODcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzhwd2lpUlo0YWZZTXh3bnRCdktOU0hHOFZTYUxyVjVWMlBpdGZER04yTUJRLzAv MzIzODMwMzQzYTM3MzEzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM2 MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEBxgwDQYJKoZIhvcNAQELBQADggEBAARdqYkGkktu yUxFXMemlqNYodQfeTpYgxH1ipAvBYgfXYpp/aY5CL+bvgMzgQLy6HbIfBhWwN2O NurQHTnR16zpYdP1AJe7zqRetwqEYMUQmrOGiCakn6Cchgp5q1O9cB8qHRo6wYe2 nMLup3TBer9wVaF4eiWfXD40756Dp5m53seN2ocpH+CkruEt7ene5PG8PFPvpfPZ GO/Qd/yFENukQ/mPdjIXS/wrn8SuG/NNAf0Rq5EnBzvYq8GlSiWPYGF2BhRtU5dZ symMpSVqbovqaWwUmR9ryxxS2xZxvVz9a7z8IO/2pBvCHxdnP/0O2lD4UnQgiXNz PxL0KxRcg2o= -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:01 2025 by rpki-client