This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa File: 323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa (raw, json) Hash identifier: hSBzLXBM8J/8XyT9Z6ebCXMWTQnyKLAiUWFzij9o9Ys= Subject key identifier: 19:E6:BB:D5:47:4D:29:89:67:ED:C7:19:49:EC:32:3C:1B:28:70:89 Certificate issuer: /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94 Certificate serial: 197DBA16285D3A165B65DB3493B4B8696C8C2382 Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer Subject info access: rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa Signing time: Mon 24 Nov 2025 13:35:25 +0000 ROA not before: Mon 24 Nov 2025 13:30:25 +0000 ROA not after: Mon 23 Nov 2026 13:35:25 +0000 asID: 272518 IP address blocks: 2804:8268:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 17:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7d:ba:16:28:5d:3a:16:5b:65:db:34:93:b4:b8:69:6c:8c:23:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94 Validity Not Before: Nov 24 13:30:25 2025 GMT Not After : Nov 23 13:35:25 2026 GMT Subject: CN=19E6BBD5474D298967EDC71949EC323C1B287089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bb:10:85:95:c6:25:b9:10:b2:11:69:c7:cb: 7d:20:47:1e:86:68:86:d4:7d:f9:db:2c:ef:a3:81: 58:ae:c9:ae:e5:a5:5b:e8:6f:fc:c3:6e:31:39:70: b3:61:9b:fc:8e:7e:21:03:e9:4b:66:df:79:e3:40: d6:ed:be:93:8b:42:6f:a8:0a:28:f4:40:b1:9e:71: 2e:f2:89:e0:21:70:66:7a:26:30:27:31:b7:0f:b1: 6b:52:e5:de:a5:34:c3:1f:48:ac:a5:fb:ea:bc:ce: 76:70:25:36:29:cc:36:cd:df:d0:e7:3c:aa:57:60: 03:56:ed:59:ce:86:7f:42:03:31:ba:e8:90:58:21: d5:c3:f6:25:e2:99:87:f8:13:e1:1c:5c:0b:d2:0d: 75:cc:9f:84:37:dd:42:bc:59:93:fc:7a:9f:5c:7c: 73:fc:37:d9:9e:b0:0d:6d:fe:06:46:50:2e:f4:cd: e6:50:bc:86:13:e7:ea:b3:8a:a1:59:30:a2:61:f5: cd:d0:91:e2:74:b3:bd:6d:f0:47:d6:b0:77:56:11: 6d:22:99:68:97:81:6a:45:a4:c5:3c:37:d7:65:4c: 1e:0a:35:2b:fc:c7:6d:21:9c:c7:e8:d8:f9:67:f5: cf:ff:b7:26:b8:30:0a:26:6f:ba:d9:68:07:82:d3: 17:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:BB:D5:47:4D:29:89:67:ED:C7:19:49:EC:32:3C:1B:28:70:89 X509v3 Authority Key Identifier: keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8268:8000::/34 Signature Algorithm: sha256WithRSAEncryption 49:2a:27:4a:0c:83:6b:48:d8:fa:3e:8b:4d:2a:c2:87:58:b6: 09:5f:b9:ed:e3:18:bc:a0:b7:7c:59:64:53:98:47:f9:7f:8c: 6f:8c:3e:54:fb:ef:db:d0:39:ee:59:92:14:4f:6e:2b:99:fc: 63:65:dc:a1:11:a6:c4:0e:be:fd:80:60:cd:47:30:9d:3f:79: a9:2d:04:ba:be:9e:75:6a:a2:eb:e0:16:d4:62:bb:92:89:6a: 82:af:f3:4e:da:97:ca:92:32:2a:5a:61:dc:93:26:4c:f0:79: f4:1b:a3:ca:e2:49:a6:a4:8b:a0:be:19:b0:df:30:51:cf:43: 4f:93:4e:c6:ce:9f:8e:6d:32:36:61:8f:1d:92:91:de:c1:b3: 7a:32:59:ce:8d:a7:55:1e:f9:31:9c:78:80:63:bf:24:f8:b0: 86:e4:d7:2a:90:9e:11:f8:c4:b8:89:53:d0:76:a6:f5:5a:41: 83:67:d2:f9:dd:e8:8c:8f:44:da:67:29:e3:3d:8e:1a:0a:be: 7d:86:ae:9b:e1:c7:2d:e3:2c:c3:d5:de:59:32:92:2d:40:b6: fa:3f:ce:73:31:15:31:0e:7e:cc:86:a4:47:ca:06:48:1f:e7: c8:0b:a3:cc:13:3d:46:97:23:1a:23:8c:c5:c4:f2:88:f4:87: 42:31:0f:21 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUGX26FihdOhZbZds0k7S4aWyMI4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE3MEU1OUY2NDdEMTJGMkMwMTM4MUY3ODlGRUExOUI5 NEE3RUE5NDAeFw0yNTExMjQxMzMwMjVaFw0yNjExMjMxMzM1MjVaMDMxMTAvBgNV BAMTKDE5RTZCQkQ1NDc0RDI5ODk2N0VEQzcxOTQ5RUMzMjNDMUIyODcwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjuxCFlcYluRCyEWnHy30gRx6G aIbUffnbLO+jgViuya7lpVvob/zDbjE5cLNhm/yOfiED6Utm33njQNbtvpOLQm+o Cij0QLGecS7yieAhcGZ6JjAnMbcPsWtS5d6lNMMfSKyl++q8znZwJTYpzDbN39Dn PKpXYANW7VnOhn9CAzG66JBYIdXD9iXimYf4E+EcXAvSDXXMn4Q33UK8WZP8ep9c fHP8N9mesA1t/gZGUC70zeZQvIYT5+qziqFZMKJh9c3QkeJ0s71t8EfWsHdWEW0i mWiXgWpFpMU8N9dlTB4KNSv8x20hnMfo2Pln9c//tya4MAomb7rZaAeC0xcrAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUGea71UdNKYln7ccZSewyPBsocIkwHwYDVR0j BBgwFoAUMXDln2R9EvLAE4H3if6hm5Sn6pQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2 eHQvMC8zMTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNzBFNTlGNjQ3RDEyRjJD MDEzODFGNzg5RkVBMTlCOTRBN0VBOTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlCMkdUaTdwWWpFZkdXeFlEYTZGamFMdEplc2hRRlhKc1U5U3NaZ1ZGNnh0LzAv MzIzODMwMzQzYTM4MzIzNjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEgmiAMA0GCSqGSIb3DQEBCwUA A4IBAQBJKidKDINrSNj6PotNKsKHWLYJX7nt4xi8oLd8WWRTmEf5f4xvjD5U++/b 0DnuWZIUT24rmfxjZdyhEabEDr79gGDNRzCdP3mpLQS6vp51aqLr4BbUYruSiWqC r/NO2pfKkjIqWmHckyZM8Hn0G6PK4kmmpIugvhmw3zBRz0NPk07Gzp+ObTI2YY8d kpHewbN6MlnOjadVHvkxnHiAY78k+LCG5NcqkJ4R+MS4iVPQdqb1WkGDZ9L53eiM j0TaZynjPY4aCr59hq6b4cct4yzD1d5ZMpItQLb6P85zMRUxDn7MhqRHygZIH+fI C6PMEz1GlyMaI4zFxPKI9IdCMQ8h -----END CERTIFICATE-----Generated at Sun Dec 7 06:24:54 2025 by rpki-client