This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/323830343a356139343a3a2f33322d3438203d3e20323638373832.roa File: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (raw, json) Hash identifier: ymgJuTMZWv+63/VwPVmOxio8KOfxsIABsf+i4ONWEss= Subject key identifier: CD:5A:38:4C:A2:C9:A8:A1:5A:16:01:C0:E4:DD:EC:69:BA:85:48:04 Certificate issuer: /CN=D1FFDF44055E16082D529730642377D751467152 Certificate serial: 0133EBA2EB70F060587A64BE804981F735BE4589 Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer Subject info access: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/323830343a356139343a3a2f33322d3438203d3e20323638373832.roa Signing time: Sat 22 Nov 2025 17:21:01 +0000 ROA not before: Sat 22 Nov 2025 17:16:01 +0000 ROA not after: Sat 21 Nov 2026 17:21:01 +0000 asID: 268782 IP address blocks: 2804:5a94::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 09:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:33:eb:a2:eb:70:f0:60:58:7a:64:be:80:49:81:f7:35:be:45:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1FFDF44055E16082D529730642377D751467152 Validity Not Before: Nov 22 17:16:01 2025 GMT Not After : Nov 21 17:21:01 2026 GMT Subject: CN=CD5A384CA2C9A8A15A1601C0E4DDEC69BA854804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:69:ad:9a:9f:d7:82:47:5b:63:99:e4:f4: 8e:a6:8d:e0:57:be:c8:eb:65:f8:c4:36:da:92:31: d2:24:90:b6:56:d1:41:e3:97:94:ef:eb:f0:af:ca: 93:be:e6:d8:a4:1a:c4:52:8c:7b:b0:ca:9d:13:0b: e7:38:e2:49:f6:41:c8:c1:eb:05:45:e7:e6:8c:0c: 1a:14:f2:da:53:7f:a7:24:40:71:ec:5b:8d:70:8d: 8b:43:df:d9:df:55:99:15:e5:8d:c7:fd:0f:ea:9d: d8:ca:17:57:d8:ed:0c:74:66:8b:6b:a1:be:6b:0e: 70:55:8b:b6:9f:df:af:d6:18:17:c2:d7:bf:30:ac: 17:be:0a:4e:35:a0:85:74:f5:29:0a:25:60:b8:c6: 1e:1d:30:ce:01:6f:08:62:d0:25:78:76:e2:ce:3c: d1:3c:ad:79:d7:2b:b5:53:b8:ca:2c:3e:ad:9a:c2: b3:00:54:c3:b7:64:74:01:a6:36:ab:9f:39:8d:f2: 5b:54:31:cd:6b:a2:be:f3:cd:c0:c2:f7:8c:78:5f: 4a:b9:d5:5b:9d:7f:a7:3a:07:fa:5f:f7:61:9b:91: 13:c0:4c:41:5f:40:af:9a:8d:fe:b3:23:ff:bf:0c: ec:5c:de:4d:12:8f:65:d6:74:e9:3a:02:fc:20:1c: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5A:38:4C:A2:C9:A8:A1:5A:16:01:C0:E4:DD:EC:69:BA:85:48:04 X509v3 Authority Key Identifier: keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/323830343a356139343a3a2f33322d3438203d3e20323638373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5a94::/32 Signature Algorithm: sha256WithRSAEncryption 13:68:7d:7a:eb:7c:f0:e0:0e:93:c4:44:b4:04:93:32:6e:8f: 81:09:a8:96:65:9d:41:a1:a6:16:52:8e:3f:5c:26:07:50:6a: ac:ea:ba:fc:cb:16:14:3f:53:7c:b2:93:45:3a:1b:42:c3:a8: 48:4c:03:a4:45:6e:0c:4b:86:45:a3:ff:0c:9e:97:6a:de:05: 4a:e0:31:ee:d3:33:4c:9c:10:13:4e:6b:f5:f5:e7:4f:56:f3: 87:7a:3e:c9:3d:ca:47:ce:3d:46:ad:16:f6:c2:09:6a:4a:21: 42:4e:0a:b4:74:fa:f9:66:b0:55:87:a8:f7:9f:83:70:40:31: 05:30:88:8f:b0:4d:54:ac:28:0c:5d:94:ef:e5:d3:7e:63:34: 43:a4:16:f0:96:50:28:8c:20:70:07:9e:f0:f2:fa:5c:1e:97: e8:97:70:41:73:d1:51:9a:5b:23:24:68:d2:f4:1c:d5:b7:a8: b2:a9:5d:c8:69:aa:9f:68:79:82:ee:03:c3:47:8c:13:64:90: d1:69:c2:6f:bc:97:a0:07:0b:30:e0:ec:c1:bb:8d:87:55:0a: c6:f7:ed:6b:98:d7:40:4c:c9:eb:bd:0a:6c:ea:86:d0:3d:54: e3:5c:3f:5b:06:f1:46:83:d3:ad:b8:04:f7:7b:2d:68:d9:13: 5c:cb:c5:b0 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUATProutw8GBYemS+gEmB9zW+RYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGRkRGNDQwNTVFMTYwODJENTI5NzMwNjQyMzc3RDc1 MTQ2NzE1MjAeFw0yNTExMjIxNzE2MDFaFw0yNjExMjExNzIxMDFaMDMxMTAvBgNV BAMTKENENUEzODRDQTJDOUE4QTE1QTE2MDFDMEU0RERFQzY5QkE4NTQ4MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnmmtmp/XgkdbY5nk9I6mjeBX vsjrZfjENtqSMdIkkLZW0UHjl5Tv6/CvypO+5tikGsRSjHuwyp0TC+c44kn2QcjB 6wVF5+aMDBoU8tpTf6ckQHHsW41wjYtD39nfVZkV5Y3H/Q/qndjKF1fY7Qx0Zotr ob5rDnBVi7af36/WGBfC178wrBe+Ck41oIV09SkKJWC4xh4dMM4Bbwhi0CV4duLO PNE8rXnXK7VTuMosPq2awrMAVMO3ZHQBpjarnzmN8ltUMc1ror7zzcDC94x4X0q5 1Vudf6c6B/pf92GbkRPATEFfQK+ajf6zI/+/DOxc3k0Sj2XWdOk6AvwgHJdLAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUzVo4TKLJqKFaFgHA5N3sabqFSAQwHwYDVR0j BBgwFoAU0f/fRAVeFggtUpcwZCN311FGcVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlK Wm4vMC9EMUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkZERjQ0MDU1RTE2MDgy RDUyOTczMDY0MjM3N0Q3NTE0NjcxNTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzh5Uk5hU1RDS1o5YmtvYUZ3ZUZMalRzckdHNnlLYkFmeWRkNmpSNm1pSlpuLzAv MzIzODMwMzQzYTM1NjEzOTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4 MzczODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARalDANBgkqhkiG9w0BAQsFAAOCAQEAE2h9eut8 8OAOk8REtASTMm6PgQmolmWdQaGmFlKOP1wmB1BqrOq6/MsWFD9TfLKTRTobQsOo SEwDpEVuDEuGRaP/DJ6Xat4FSuAx7tMzTJwQE05r9fXnT1bzh3o+yT3KR849Rq0W 9sIJakohQk4KtHT6+WawVYeo95+DcEAxBTCIj7BNVKwoDF2U7+XTfmM0Q6QW8JZQ KIwgcAee8PL6XB6X6JdwQXPRUZpbIyRo0vQc1beosqldyGmqn2h5gu4Dw0eME2SQ 0WnCb7yXoAcLMODswbuNh1UKxvfta5jXQEzJ670KbOqG0D1U41w/WwbxRoPTrbgE 93staNkTXMvFsA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:50 2025 by rpki-client