This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/323830343a3339633a3a2f33322d313238203d3e203238333239.roa File: 323830343a3339633a3a2f33322d313238203d3e203238333239.roa (raw, json) Hash identifier: l/hqIYTgperocWGoH2LXNkWN7KFJmnNHUekFWOuzg8M= Subject key identifier: D2:D1:A9:6E:28:69:57:D8:6A:20:EF:A4:B3:3F:14:30:43:DB:09:AF Certificate issuer: /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112 Certificate serial: 3A7388FF0581AFAC8733BF30EFC69D0511915EAB Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer Subject info access: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/323830343a3339633a3a2f33322d313238203d3e203238333239.roa Signing time: Tue 11 Nov 2025 15:44:11 +0000 ROA not before: Tue 11 Nov 2025 15:39:11 +0000 ROA not after: Tue 10 Nov 2026 15:44:11 +0000 asID: 28329 IP address blocks: 2804:39c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:73:88:ff:05:81:af:ac:87:33:bf:30:ef:c6:9d:05:11:91:5e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112 Validity Not Before: Nov 11 15:39:11 2025 GMT Not After : Nov 10 15:44:11 2026 GMT Subject: CN=D2D1A96E286957D86A20EFA4B33F143043DB09AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:a1:05:2b:d0:5a:65:86:fa:05:64:4a:4f: 67:a4:50:ae:f7:ca:c6:5c:19:c9:5e:2f:60:94:8c: e1:b3:8d:8d:38:44:f4:c7:a0:2f:0d:e0:08:8e:2a: a7:27:1e:b4:6c:5f:4d:c7:86:b7:77:23:06:21:e5: 36:de:7a:d5:34:4d:76:3a:eb:ae:1d:3e:78:7a:5b: e3:6d:eb:ae:da:9d:ec:76:c3:f1:3a:e2:53:86:db: f5:99:9c:50:bc:b7:8b:3a:c1:bc:af:68:e4:4e:b2: 47:cb:46:98:a2:f9:3f:2d:8e:13:f7:86:f6:3c:df: 87:5f:69:cb:be:c2:55:d2:d8:78:4f:4d:c8:7f:e0: e4:86:db:2e:97:42:9e:6b:17:5c:b8:61:f5:fb:e2: 32:69:ce:af:63:ba:c0:4e:b8:bd:b3:c3:b3:68:36: 1b:cf:23:be:e7:6f:56:9b:10:5a:58:95:15:a4:2d: b7:b8:ed:9a:6c:14:d5:27:e4:7e:c3:96:c5:b4:cb: 1b:a0:33:6f:f5:d1:c2:96:ef:9f:70:a8:8e:da:d8: 82:3c:dd:7a:0a:b6:69:b9:b9:1d:a9:87:9c:b5:28: 33:b0:29:92:a6:eb:97:ee:67:61:7d:25:63:b9:ba: 82:58:ad:8a:b4:d2:b5:7f:58:02:71:40:a4:53:81: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D1:A9:6E:28:69:57:D8:6A:20:EF:A4:B3:3F:14:30:43:DB:09:AF X509v3 Authority Key Identifier: keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/323830343a3339633a3a2f33322d313238203d3e203238333239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:39c::/32 Signature Algorithm: sha256WithRSAEncryption 72:de:f6:b2:73:d5:75:29:33:a6:e7:cf:60:04:a9:0a:e9:28: 99:d4:97:2d:f2:07:d1:72:29:cf:cb:dc:ae:dc:06:ba:04:e1: e0:58:c6:8a:3d:1c:96:e9:a5:3b:b3:18:46:7d:de:96:38:e5: 60:c7:7d:8b:fe:8b:a5:fe:d6:3f:d7:24:a3:f6:ed:a3:ae:b5: 81:8a:32:8b:76:da:58:b4:02:a4:47:3b:9d:59:92:b6:81:40: 62:61:bf:09:ab:83:5b:9a:09:5c:26:95:3a:ba:0e:6e:c0:7c: af:7b:40:d1:2d:e2:fc:11:d3:35:d3:78:5d:07:07:f2:5a:d5: f9:8d:74:ed:5c:6d:25:bf:90:d5:6e:2c:be:1a:ed:5b:20:61: c5:29:ae:21:db:e1:af:46:12:0c:06:4a:7e:ce:f2:cc:fe:06: 02:b0:40:86:95:d2:fe:68:70:36:3d:dd:fb:c6:f6:52:14:49: 16:76:3d:4b:71:eb:93:e8:2f:17:e4:a5:93:6f:45:25:ed:5b: 30:5c:50:08:e0:c8:41:68:c7:f0:45:b9:10:7b:a0:4b:34:38: 00:a5:00:7d:16:33:60:67:63:21:09:99:4b:9c:0a:c4:c1:7e: b7:c0:3e:1d:58:1e:27:13:bd:0f:54:e2:65:57:76:df:5f:b3: c9:c1:c1:08 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUOnOI/wWBr6yHM78w78adBRGRXqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYzOUJGRDhCQkE4RUMzQTE0REM4NUNENEFDMzgxRTM2 QTI5RjExMjAeFw0yNTExMTExNTM5MTFaFw0yNjExMTAxNTQ0MTFaMDMxMTAvBgNV BAMTKEQyRDFBOTZFMjg2OTU3RDg2QTIwRUZBNEIzM0YxNDMwNDNEQjA5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvqEFK9BaZYb6BWRKT2ekUK73 ysZcGcleL2CUjOGzjY04RPTHoC8N4AiOKqcnHrRsX03Hhrd3IwYh5TbeetU0TXY6 664dPnh6W+Nt667anex2w/E64lOG2/WZnFC8t4s6wbyvaOROskfLRpii+T8tjhP3 hvY834dfacu+wlXS2HhPTch/4OSG2y6XQp5rF1y4YfX74jJpzq9jusBOuL2zw7No NhvPI77nb1abEFpYlRWkLbe47ZpsFNUn5H7DlsW0yxugM2/10cKW759wqI7a2II8 3XoKtmm5uR2ph5y1KDOwKZKm65fuZ2F9JWO5uoJYrYq00rV/WAJxQKRTgQsZAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU0tGpbihpV9hqIO+ksz8UMEPbCa8wHwYDVR0j BBgwFoAUTzm/2Luo7DoU3IXNSsOB42op8RIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy VHgvMi80RjM5QkZEOEJCQThFQzNBMTREQzg1Q0Q0QUMzODFFMzZBMjlGMTEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMzlCRkQ4QkJBOEVDM0Ex NERDODVDRDRBQzM4MUUzNkEyOUYxMTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzIv MzIzODMwMzQzYTMzMzk2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzODMz MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEA5wwDQYJKoZIhvcNAQELBQADggEBAHLe9rJz1XUp M6bnz2AEqQrpKJnUly3yB9FyKc/L3K7cBroE4eBYxoo9HJbppTuzGEZ93pY45WDH fYv+i6X+1j/XJKP27aOutYGKMot22li0AqRHO51ZkraBQGJhvwmrg1uaCVwmlTq6 Dm7AfK97QNEt4vwR0zXTeF0HB/Ja1fmNdO1cbSW/kNVuLL4a7VsgYcUpriHb4a9G EgwGSn7O8sz+BgKwQIaV0v5ocDY93fvG9lIUSRZ2PUtx65PoLxfkpZNvRSXtWzBc UAjgyEFox/BFuRB7oEs0OAClAH0WM2BnYyEJmUucCsTBfrfAPh1YHicTvQ9U4mVX dt9fs8nBwQg= -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:14 2025 by rpki-client