This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d313238203d3e20323734363130.roa File: 323830343a393066383a3a2f33322d313238203d3e20323734363130.roa (raw, json) Hash identifier: +Ookx9BO6kpMWOhxp3+3mXdfi1Jhj+0PJsptDEd8uuo= Subject key identifier: A7:07:79:6E:52:7E:8F:3B:92:9B:CF:41:77:86:20:69:01:27:39:BB Certificate issuer: /CN=83368A4AE56A398CA02571CD14080BDF8EEEABC1 Certificate serial: 79EC972E5D52B0CB7161CF7941DEA52D02071C3D Authority key identifier: 83:36:8A:4A:E5:6A:39:8C:A0:25:71:CD:14:08:0B:DF:8E:EE:AB:C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83368A4AE56A398CA02571CD14080BDF8EEEABC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d313238203d3e20323734363130.roa Signing time: Fri 07 Nov 2025 12:52:48 +0000 ROA not before: Fri 07 Nov 2025 12:47:48 +0000 ROA not after: Fri 06 Nov 2026 12:52:48 +0000 asID: 274610 IP address blocks: 2804:90f8::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/83368A4AE56A398CA02571CD14080BDF8EEEABC1.crl rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/83368A4AE56A398CA02571CD14080BDF8EEEABC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83368A4AE56A398CA02571CD14080BDF8EEEABC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 14:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ec:97:2e:5d:52:b0:cb:71:61:cf:79:41:de:a5:2d:02:07:1c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83368A4AE56A398CA02571CD14080BDF8EEEABC1 Validity Not Before: Nov 7 12:47:48 2025 GMT Not After : Nov 6 12:52:48 2026 GMT Subject: CN=A707796E527E8F3B929BCF4177862069012739BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:e4:5e:2a:77:fb:7b:f6:ca:7c:9c:08:2f: ab:45:d6:62:c7:a4:e1:8f:2a:01:af:34:df:33:c6: 19:60:1c:05:06:34:c7:de:d5:8e:ce:1e:41:d7:42: b8:e2:9f:a0:3c:ac:be:bf:5c:f1:a9:c8:5a:c7:fd: 39:f9:e9:d5:45:22:6d:76:98:e2:dc:45:75:95:0d: 5f:3c:26:51:36:34:c9:0a:bc:c2:3d:d0:20:74:0d: a5:ad:54:fa:18:b0:2d:19:8a:cf:cb:e0:ca:af:a6: 33:79:7c:20:5e:25:1b:21:02:f0:80:c2:ca:aa:ac: 14:8b:4d:40:5f:6e:a8:00:02:86:00:0b:3a:43:27: 76:87:b8:07:82:ac:13:c5:9c:86:33:2f:3d:ce:56: ad:7f:a9:06:ba:3c:41:14:fa:4e:35:63:57:51:e0: 4c:bf:c8:b7:86:23:eb:c9:58:b3:f1:3e:38:7b:a4: bb:ce:18:3a:7c:60:1c:e8:e1:0b:6a:c2:ad:22:52: bb:f5:00:6e:d9:49:c8:3f:b9:22:2e:cc:b5:e7:94: 3b:a3:7d:25:f2:e0:88:9a:b2:be:8c:4e:da:02:bf: 01:19:c5:0d:a5:74:81:dc:e4:9d:55:21:7f:1c:9e: 4d:44:66:aa:e7:83:9a:04:aa:5f:55:9c:53:1e:8a: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:79:6E:52:7E:8F:3B:92:9B:CF:41:77:86:20:69:01:27:39:BB X509v3 Authority Key Identifier: keyid:83:36:8A:4A:E5:6A:39:8C:A0:25:71:CD:14:08:0B:DF:8E:EE:AB:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/83368A4AE56A398CA02571CD14080BDF8EEEABC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83368A4AE56A398CA02571CD14080BDF8EEEABC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d313238203d3e20323734363130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:90f8::/32 Signature Algorithm: sha256WithRSAEncryption 92:77:7f:0d:1d:5e:86:74:3e:f8:76:a1:a3:af:7a:8a:a6:01: 92:c9:8f:c5:a7:2d:0a:81:74:9a:7c:40:3f:8b:e2:1b:31:65: 68:02:58:19:7e:0a:de:59:3c:69:86:69:fe:5d:30:46:80:2b: 90:be:de:82:c3:f5:28:c4:4b:84:8c:ac:7b:32:b9:ed:4e:fe: 86:f2:ac:60:87:db:16:14:f0:30:29:9d:64:3f:e9:6c:da:9a: 78:6a:e1:67:62:a4:72:36:fd:33:b4:d4:44:79:4b:be:a2:36: d7:c4:69:29:5c:40:03:9a:e4:d5:0b:dc:fb:54:bf:ec:a8:c4: e9:8b:04:6b:90:95:6d:8d:77:02:87:4d:f3:64:5e:ef:0c:2e: 9d:2f:ae:68:5f:28:8d:dd:cd:e2:f9:64:b0:61:ed:81:9c:d4: 7d:0f:0b:0b:8b:1d:0c:eb:1a:c3:90:c1:bf:13:9b:fb:97:cd: 4c:59:de:af:e7:f2:a7:2b:e9:e0:69:fa:a8:36:23:fb:54:8e: f9:6a:90:2f:21:09:f0:54:e5:ef:67:28:9a:85:67:fc:e0:5d: f1:79:4a:07:94:ba:87:21:57:cd:63:58:df:41:2e:ad:cc:80: c5:68:dc:0a:1b:f5:91:e8:8d:c1:7b:21:c0:78:bc:65:8f:7e: 49:fa:fa:08 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUeeyXLl1SsMtxYc95Qd6lLQIHHD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzNjhBNEFFNTZBMzk4Q0EwMjU3MUNEMTQwODBCREY4 RUVFQUJDMTAeFw0yNTExMDcxMjQ3NDhaFw0yNjExMDYxMjUyNDhaMDMxMTAvBgNV BAMTKEE3MDc3OTZFNTI3RThGM0I5MjlCQ0Y0MTc3ODYyMDY5MDEyNzM5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8f+ReKnf7e/bKfJwIL6tF1mLH pOGPKgGvNN8zxhlgHAUGNMfe1Y7OHkHXQrjin6A8rL6/XPGpyFrH/Tn56dVFIm12 mOLcRXWVDV88JlE2NMkKvMI90CB0DaWtVPoYsC0Zis/L4MqvpjN5fCBeJRshAvCA wsqqrBSLTUBfbqgAAoYACzpDJ3aHuAeCrBPFnIYzLz3OVq1/qQa6PEEU+k41Y1dR 4Ey/yLeGI+vJWLPxPjh7pLvOGDp8YBzo4Qtqwq0iUrv1AG7ZScg/uSIuzLXnlDuj fSXy4Iiasr6MTtoCvwEZxQ2ldIHc5J1VIX8cnk1EZqrng5oEql9VnFMeiqMJAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUpwd5blJ+jzuSm89Bd4YgaQEnObswHwYDVR0j BBgwFoAUgzaKSuVqOYygJXHNFAgL347uq8EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby84eFpDa2Rkb1NiM3NRQW11R3FVeFpqVzlkOWhLYVJZbm9LcVh2TjVXUjc3 LzAvODMzNjhBNEFFNTZBMzk4Q0EwMjU3MUNEMTQwODBCREY4RUVFQUJDMS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MzM2OEE0QUU1NkEzOThDQTAy NTcxQ0QxNDA4MEJERjhFRUVBQkMxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84 eFpDa2Rkb1NiM3NRQW11R3FVeFpqVzlkOWhLYVJZbm9LcVh2TjVXUjc3LzAvMzIz ODMwMzQzYTM5MzA2NjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3MzQz NjMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBJD4MA0GCSqGSIb3DQEBCwUAA4IBAQCSd38NHV6G dD74dqGjr3qKpgGSyY/Fpy0KgXSafEA/i+IbMWVoAlgZfgreWTxphmn+XTBGgCuQ vt6Cw/UoxEuEjKx7MrntTv6G8qxgh9sWFPAwKZ1kP+ls2pp4auFnYqRyNv0ztNRE eUu+ojbXxGkpXEADmuTVC9z7VL/sqMTpiwRrkJVtjXcCh03zZF7vDC6dL65oXyiN 3c3i+WSwYe2BnNR9DwsLix0M6xrDkMG/E5v7l81MWd6v5/KnK+ngafqoNiP7VI75 apAvIQnwVOXvZyiahWf84F3xeUoHlLqHIVfNY1jfQS6tzIDFaNwKG/WR6I3BeyHA eLxlj35J+voI -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:56 2025 by rpki-client