This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/323830343a356238343a3a2f33322d313238203d3e203238333239.roa File: 323830343a356238343a3a2f33322d313238203d3e203238333239.roa (raw, json) Hash identifier: XCBYNGyaNqWsSAsbytHLZ98TCsiF5fytyMHnelFYVrM= Subject key identifier: 43:2E:89:BE:11:2D:BD:9C:50:AA:B0:D3:FD:5E:E8:12:D4:82:F2:1E Certificate issuer: /CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112 Certificate serial: 0EDEEDC73DDEFFF32E4B06FE0041FE901A4D1D68 Authority key identifier: 4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer Subject info access: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/323830343a356238343a3a2f33322d313238203d3e203238333239.roa Signing time: Tue 11 Nov 2025 15:44:14 +0000 ROA not before: Tue 11 Nov 2025 15:39:14 +0000 ROA not after: Tue 10 Nov 2026 15:44:14 +0000 asID: 28329 IP address blocks: 2804:5b84::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:de:ed:c7:3d:de:ff:f3:2e:4b:06:fe:00:41:fe:90:1a:4d:1d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112 Validity Not Before: Nov 11 15:39:14 2025 GMT Not After : Nov 10 15:44:14 2026 GMT Subject: CN=432E89BE112DBD9C50AAB0D3FD5EE812D482F21E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b2:bb:e0:9c:bf:b4:bf:39:32:8d:0d:67:96: 1c:7d:41:11:21:4d:92:0d:5f:b1:f1:bc:fe:9a:e5: 27:fd:8e:7b:cf:29:e3:14:ad:17:cc:09:eb:50:55: 03:c6:29:f5:e3:c4:84:3c:42:2c:8a:30:a5:4f:87: 4d:ea:ef:08:e8:be:cc:8c:57:8f:8b:ae:7d:49:f0: 29:3f:48:39:68:9e:8c:08:ca:03:eb:a1:ee:0f:8a: 2b:5c:33:42:38:b9:83:72:d2:99:4e:db:8b:2e:ef: eb:63:f6:03:09:9c:a0:d5:00:f7:72:90:16:ad:75: b3:31:67:31:88:4a:25:53:eb:89:88:50:ca:e2:dc: 98:85:5a:38:75:7b:df:5f:84:e9:a0:85:58:e1:31: 33:04:01:64:cb:b3:83:40:24:6a:c2:60:b4:4d:4c: f4:7f:45:9e:71:a1:56:be:97:84:de:42:e0:d5:68: 86:7f:35:51:3a:bd:a9:44:cd:e5:cc:31:3e:67:0f: 7d:a9:50:47:0f:db:1e:51:31:df:d3:ae:b7:11:5e: b6:c2:7e:f3:14:d3:31:cd:b8:4c:46:6d:f5:d6:b1: ca:28:60:06:7e:dd:70:b3:58:12:15:26:de:91:a2: ca:f5:34:4c:7b:8a:df:5f:15:c6:ea:ce:67:8a:cf: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2E:89:BE:11:2D:BD:9C:50:AA:B0:D3:FD:5E:E8:12:D4:82:F2:1E X509v3 Authority Key Identifier: keyid:4F:39:BF:D8:BB:A8:EC:3A:14:DC:85:CD:4A:C3:81:E3:6A:29:F1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F39BFD8BBA8EC3A14DC85CD4AC381E36A29F112.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/2/323830343a356238343a3a2f33322d313238203d3e203238333239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5b84::/32 Signature Algorithm: sha256WithRSAEncryption 76:6c:e4:d9:62:46:a8:fe:b5:24:eb:80:b2:a2:38:70:d0:a0: 7a:20:70:d6:c6:12:02:d1:d9:7b:3a:bb:f8:fc:a0:73:46:1c: 3c:26:fe:c9:fa:e2:13:a7:44:df:98:01:8a:ad:ac:6c:20:4b: 29:f6:87:d5:58:be:64:fd:e0:89:3b:80:65:be:79:ab:3e:18: 2a:b3:21:ef:3c:e7:bb:c4:14:1e:5a:ad:e9:c0:fd:2c:e2:1f: 94:e2:48:64:08:43:da:75:7e:40:f6:5f:4d:06:bc:fb:ee:2b: 09:d7:b6:f1:2d:35:cf:a3:d4:bc:15:14:15:8d:2d:b0:f8:e7: 60:d2:cb:70:f0:a3:ae:f8:d5:f7:6b:a6:29:38:56:16:bb:d4: 96:0e:cf:48:a8:dc:34:b5:17:da:97:31:51:2a:0a:a4:d9:68: ea:fb:23:ae:f7:df:d7:a7:eb:ed:cc:08:51:af:c5:74:a9:4f: fd:fe:1b:00:66:a9:9d:12:30:f7:81:47:37:73:96:b1:d8:ab: cc:ac:f4:9e:b7:24:bb:40:82:d8:6e:9f:e9:3b:49:f8:47:20: 2f:61:73:e1:c1:b3:2a:31:0a:74:a8:27:59:32:8a:e6:c5:e7: ec:1a:dd:d1:f1:97:05:5d:cd:ad:a7:95:db:43:30:32:d1:f2: 04:8b:ed:43 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUDt7txz3e//MuSwb+AEH+kBpNHWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYzOUJGRDhCQkE4RUMzQTE0REM4NUNENEFDMzgxRTM2 QTI5RjExMjAeFw0yNTExMTExNTM5MTRaFw0yNjExMTAxNTQ0MTRaMDMxMTAvBgNV BAMTKDQzMkU4OUJFMTEyREJEOUM1MEFBQjBEM0ZENUVFODEyRDQ4MkYyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQsrvgnL+0vzkyjQ1nlhx9QREh TZINX7HxvP6a5Sf9jnvPKeMUrRfMCetQVQPGKfXjxIQ8QiyKMKVPh03q7wjovsyM V4+Lrn1J8Ck/SDlonowIygProe4PiitcM0I4uYNy0plO24su7+tj9gMJnKDVAPdy kBatdbMxZzGISiVT64mIUMri3JiFWjh1e99fhOmghVjhMTMEAWTLs4NAJGrCYLRN TPR/RZ5xoVa+l4TeQuDVaIZ/NVE6valEzeXMMT5nD32pUEcP2x5RMd/TrrcRXrbC fvMU0zHNuExGbfXWscooYAZ+3XCzWBIVJt6Rosr1NEx7it9fFcbqzmeKz7WbAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUQy6JvhEtvZxQqrDT/V7oEtSC8h4wHwYDVR0j BBgwFoAUTzm/2Luo7DoU3IXNSsOB42op8RIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy VHgvMi80RjM5QkZEOEJCQThFQzNBMTREQzg1Q0Q0QUMzODFFMzZBMjlGMTEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMzlCRkQ4QkJBOEVDM0Ex NERDODVDRDRBQzM4MUUzNkEyOUYxMTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzIv MzIzODMwMzQzYTM1NjIzODM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM4 MzMzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARbhDANBgkqhkiG9w0BAQsFAAOCAQEAdmzk2WJG qP61JOuAsqI4cNCgeiBw1sYSAtHZezq7+Pygc0YcPCb+yfriE6dE35gBiq2sbCBL KfaH1Vi+ZP3giTuAZb55qz4YKrMh7zznu8QUHlqt6cD9LOIflOJIZAhD2nV+QPZf TQa8++4rCde28S01z6PUvBUUFY0tsPjnYNLLcPCjrvjV92umKThWFrvUlg7PSKjc NLUX2pcxUSoKpNlo6vsjrvff16fr7cwIUa/FdKlP/f4bAGapnRIw94FHN3OWsdir zKz0nrcku0CC2G6f6TtJ+EcgL2Fz4cGzKjEKdKgnWTKK5sXn7Brd0fGXBV3NraeV 20MwMtHyBIvtQw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:07 2025 by rpki-client