This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/323830343a373566303a3a2f33322d313238203d3e20323731303739.roa File: 323830343a373566303a3a2f33322d313238203d3e20323731303739.roa (raw, json) Hash identifier: 0pHtEVmtptfCW1hlsfzp0qcUp3I9S9GwoWoaQ04Zss8= Subject key identifier: 8D:85:DA:A3:94:9C:75:1B:B7:B5:22:CC:5A:BE:16:33:62:52:EC:29 Certificate issuer: /CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9 Certificate serial: 5BAE74151EA5A28B0DF3C3A3CA25F7A3202E74EE Authority key identifier: A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/323830343a373566303a3a2f33322d313238203d3e20323731303739.roa Signing time: Wed 12 Nov 2025 14:58:36 +0000 ROA not before: Wed 12 Nov 2025 14:53:36 +0000 ROA not after: Wed 11 Nov 2026 14:58:36 +0000 asID: 271079 IP address blocks: 2804:75f0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ae:74:15:1e:a5:a2:8b:0d:f3:c3:a3:ca:25:f7:a3:20:2e:74:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9 Validity Not Before: Nov 12 14:53:36 2025 GMT Not After : Nov 11 14:58:36 2026 GMT Subject: CN=8D85DAA3949C751BB7B522CC5ABE16336252EC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:55:f4:7a:32:62:41:c8:c4:1e:7c:d8:e3: ba:d5:48:ff:a2:fb:22:c0:e5:af:af:e4:ca:08:a8: a9:c0:35:df:e7:8d:ee:2c:c9:b0:a3:c8:f4:8b:57: 09:d0:c0:2c:9f:cf:ba:6d:12:d3:b9:c2:e9:17:84: 11:24:14:cb:8a:30:2d:84:d9:d9:de:31:02:a0:56: 57:20:fd:24:e9:0f:c7:42:17:15:b9:a2:f5:d0:ba: 9f:07:67:b9:44:3e:0c:0f:c2:56:a2:36:42:b2:68: 9f:91:35:c2:9c:13:80:73:0e:5f:72:6b:cf:56:b1: 9a:5f:72:86:94:75:bc:e6:b0:0d:eb:17:79:1c:f0: 46:96:c6:db:6c:aa:d4:62:4c:42:b7:04:ba:cd:bd: d4:6e:d4:88:2f:fc:3a:74:be:44:03:e2:35:9d:2c: 8a:64:be:b8:83:94:30:a3:94:41:44:2a:56:31:68: 6b:93:0f:d0:9b:95:a9:89:35:dd:8f:d6:f8:2d:fc: ba:53:a0:fc:6a:29:bf:9f:e9:05:a4:06:98:fd:fd: 71:c0:f0:8d:54:b7:fd:59:81:9e:99:00:98:10:39: a9:47:40:6f:6c:a9:5b:a7:6c:5b:0b:61:b1:7f:84: 47:23:bf:91:a3:1f:9c:36:f3:f6:7c:86:17:62:7e: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:85:DA:A3:94:9C:75:1B:B7:B5:22:CC:5A:BE:16:33:62:52:EC:29 X509v3 Authority Key Identifier: keyid:A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/323830343a373566303a3a2f33322d313238203d3e20323731303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:75f0::/32 Signature Algorithm: sha256WithRSAEncryption 26:17:15:13:09:d8:77:f1:b9:c9:55:21:4c:f4:92:ca:26:67: 93:b0:69:72:99:42:11:b7:79:d0:a5:30:8d:3a:88:ad:7a:76: f2:73:bc:4e:a8:12:16:60:17:7c:ee:b3:96:58:06:39:0c:52: 6f:f2:5b:65:fe:10:35:86:5c:2b:9a:61:4e:71:d2:f7:d9:dc: a1:81:9e:4e:ec:1d:95:e4:56:db:02:18:2c:72:82:7d:af:ba: d3:7f:f2:cb:d4:85:bf:83:4e:79:10:00:bc:0e:b8:d8:6a:a0: bc:2b:b0:0a:bf:80:51:b9:af:7f:b3:e7:de:db:a2:15:df:91: 5c:42:00:40:58:c3:57:f5:95:6e:23:12:bc:b1:a1:4a:ff:f9: 98:1b:a8:3b:e0:72:ef:45:0b:e2:10:f6:f9:ed:68:74:e1:ea: cf:55:70:2f:01:c5:32:fa:96:08:41:df:f8:e5:e8:66:c9:dd: a6:24:d1:80:b1:ab:29:a8:55:26:e6:28:39:cc:ec:57:b7:7e: 65:c4:64:1e:c2:80:e5:7b:11:7a:db:5f:7b:45:35:bd:67:bb: 01:9a:cb:79:2b:ec:58:55:f1:f0:40:a1:91:30:12:dd:eb:7f: e3:1c:e2:9b:7a:0f:8e:b4:81:ce:90:aa:3a:d7:03:9b:e5:ec: 7b:b7:0e:68 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUW650FR6loosN88OjyiX3oyAudO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMxMjRCQ0U1QzMyMzZFREVDNzBCMzg5NzI1MUVFRTIz QjNGMUJFOTAeFw0yNTExMTIxNDUzMzZaFw0yNjExMTExNDU4MzZaMDMxMTAvBgNV BAMTKDhEODVEQUEzOTQ5Qzc1MUJCN0I1MjJDQzVBQkUxNjMzNjI1MkVDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvuVX0ejJiQcjEHnzY47rVSP+i +yLA5a+v5MoIqKnANd/nje4sybCjyPSLVwnQwCyfz7ptEtO5wukXhBEkFMuKMC2E 2dneMQKgVlcg/STpD8dCFxW5ovXQup8HZ7lEPgwPwlaiNkKyaJ+RNcKcE4BzDl9y a89WsZpfcoaUdbzmsA3rF3kc8EaWxttsqtRiTEK3BLrNvdRu1Igv/Dp0vkQD4jWd LIpkvriDlDCjlEFEKlYxaGuTD9CblamJNd2P1vgt/LpToPxqKb+f6QWkBpj9/XHA 8I1Ut/1ZgZ6ZAJgQOalHQG9sqVunbFsLYbF/hEcjv5GjH5w28/Z8hhdifuQ/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUjYXao5ScdRu3tSLMWr4WM2JS7CkwHwYDVR0j BBgwFoAUoxJLzlwyNu3scLOJclHu4js/G+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUtxYkpWb2ZCZzFQN1VobW5LaGRZNXFHWlFHemduZ1pnUWF0akNjV0oy eEwvMC9BMzEyNEJDRTVDMzIzNkVERUM3MEIzODk3MjUxRUVFMjNCM0YxQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzMTI0QkNFNUMzMjM2RURF QzcwQjM4OTcyNTFFRUUyM0IzRjFCRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlLcWJKVm9mQmcxUDdVaG1uS2hkWTVxR1pRR3pnbmdaZ1FhdGpDY1dKMnhMLzAv MzIzODMwMzQzYTM3MzU2NjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzEzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBHXwMA0GCSqGSIb3DQEBCwUAA4IBAQAmFxUT Cdh38bnJVSFM9JLKJmeTsGlymUIRt3nQpTCNOoitenbyc7xOqBIWYBd87rOWWAY5 DFJv8ltl/hA1hlwrmmFOcdL32dyhgZ5O7B2V5FbbAhgscoJ9r7rTf/LL1IW/g055 EAC8DrjYaqC8K7AKv4BRua9/s+fe26IV35FcQgBAWMNX9ZVuIxK8saFK//mYG6g7 4HLvRQviEPb57Wh04erPVXAvAcUy+pYIQd/45ehmyd2mJNGAsaspqFUm5ig5zOxX t35lxGQewoDlexF62197RTW9Z7sBmst5K+xYVfHwQKGRMBLd63/jHOKbeg+OtIHO kKo61wOb5ex7tw5o -----END CERTIFICATE-----Generated at Sat Dec 6 13:30:01 2025 by rpki-client