This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/323830343a353033383a3a2f33322d313238203d3e203533303033.roa File: 323830343a353033383a3a2f33322d313238203d3e203533303033.roa (raw, json) Hash identifier: I2CQAOab+9Ome6PT1k8k6cyfqDdBArHCu8HauefxcJg= Subject key identifier: 75:75:C8:FC:5A:4D:51:55:34:73:69:1E:57:D3:F5:64:84:68:AE:CA Certificate issuer: /CN=7D97FFCCB49C7F4473FB237860EB326C81C6666D Certificate serial: 162BB941DB3791E39F3C3FAF15C4F5C5583602B9 Authority key identifier: 7D:97:FF:CC:B4:9C:7F:44:73:FB:23:78:60:EB:32:6C:81:C6:66:6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/323830343a353033383a3a2f33322d313238203d3e203533303033.roa Signing time: Mon 10 Nov 2025 15:41:05 +0000 ROA not before: Mon 10 Nov 2025 15:36:05 +0000 ROA not after: Mon 09 Nov 2026 15:41:05 +0000 asID: 53003 IP address blocks: 2804:5038::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.crl rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 17:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:2b:b9:41:db:37:91:e3:9f:3c:3f:af:15:c4:f5:c5:58:36:02:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D97FFCCB49C7F4473FB237860EB326C81C6666D Validity Not Before: Nov 10 15:36:05 2025 GMT Not After : Nov 9 15:41:05 2026 GMT Subject: CN=7575C8FC5A4D51553473691E57D3F5648468AECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:7c:63:9b:25:2b:32:42:21:a7:50:fd:a5: 22:11:ce:57:00:c0:ac:fb:9d:c7:11:f4:2d:89:05: 3a:85:8c:49:46:43:92:e4:89:32:ce:c5:8f:a0:76: b9:a0:53:9e:08:e8:c5:c6:11:47:e1:71:94:ad:d1: 59:c3:c3:76:de:d5:ed:33:6b:a7:90:b5:74:b3:02: b5:f8:95:ac:f2:0f:76:1d:75:48:83:54:1a:4a:2a: bf:92:d5:65:a3:b9:41:80:b0:7e:c4:be:19:02:64: 30:60:2e:16:30:49:89:fa:dd:c2:8b:3a:87:16:e5: 79:43:3e:ac:5d:5c:a6:fb:ff:b2:38:cc:bb:c1:93: 08:91:48:91:b1:78:76:a9:ae:6c:aa:5e:76:06:dc: fd:0b:73:ae:77:a3:e7:25:3f:0f:a7:19:16:bf:44: 0b:35:ae:51:51:7c:98:8c:3a:ba:1e:4b:4d:b4:c6: f4:4a:2d:60:6d:5e:29:b8:ed:7a:ba:65:77:4c:c7: 56:cf:30:43:42:c5:8b:8b:71:81:ff:f8:7b:0a:b2: 05:19:ae:17:6f:b0:a5:71:4e:1a:9b:ae:2b:61:b1: cd:02:74:3b:b3:31:75:d3:cd:6f:d3:63:5e:de:86: d1:41:62:d1:c3:c9:d8:46:c5:75:3e:22:e1:9a:34: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:75:C8:FC:5A:4D:51:55:34:73:69:1E:57:D3:F5:64:84:68:AE:CA X509v3 Authority Key Identifier: keyid:7D:97:FF:CC:B4:9C:7F:44:73:FB:23:78:60:EB:32:6C:81:C6:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/323830343a353033383a3a2f33322d313238203d3e203533303033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5038::/32 Signature Algorithm: sha256WithRSAEncryption 03:42:a5:2f:53:66:5f:5f:41:95:fc:12:ca:0e:8c:bb:16:13: 17:fd:86:a5:bc:52:92:cc:28:21:a3:a8:c3:eb:36:77:be:29: f0:44:de:55:64:98:15:ba:0d:a8:84:1a:c3:cb:87:06:4a:2f: d1:4b:d2:a8:37:70:c5:6e:6a:b1:b1:21:3d:18:d3:86:d9:96: da:e4:69:d3:ed:2a:02:9e:ba:02:bb:2c:75:56:86:af:73:00: 52:6f:24:a8:33:75:54:af:62:d9:58:fd:e4:17:44:e2:a1:b9: d4:b4:b1:5a:06:7e:3a:34:a2:37:bf:33:90:28:39:aa:6f:78: a5:be:a5:83:e2:00:e9:3a:03:b0:9e:67:6b:db:e3:87:57:e5: fe:68:1d:96:ee:9a:c4:9d:86:df:c5:73:b3:a3:da:34:f5:81: 5d:16:67:ba:4f:6d:79:fa:75:a2:e0:d7:8d:9e:4c:ba:a7:82: 89:51:dd:f2:9a:68:a0:67:3b:03:63:2e:d6:15:49:3e:8c:f2: c4:bc:44:98:94:33:3d:68:48:e1:3b:c7:c9:bd:9f:12:51:3e: 49:f5:2a:08:d9:65:70:e3:c6:6a:e0:6a:c7:8d:23:a8:49:c5: 98:e5:f8:24:9e:b2:9d:82:08:e6:f8:ac:7e:93:fb:0e:78:0c: 74:31:86:57 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUFiu5Qds3keOfPD+vFcT1xVg2ArkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5N0ZGQ0NCNDlDN0Y0NDczRkIyMzc4NjBFQjMyNkM4 MUM2NjY2RDAeFw0yNTExMTAxNTM2MDVaFw0yNjExMDkxNTQxMDVaMDMxMTAvBgNV BAMTKDc1NzVDOEZDNUE0RDUxNTUzNDczNjkxRTU3RDNGNTY0ODQ2OEFFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUF3xjmyUrMkIhp1D9pSIRzlcA wKz7nccR9C2JBTqFjElGQ5LkiTLOxY+gdrmgU54I6MXGEUfhcZSt0VnDw3be1e0z a6eQtXSzArX4lazyD3YddUiDVBpKKr+S1WWjuUGAsH7EvhkCZDBgLhYwSYn63cKL OocW5XlDPqxdXKb7/7I4zLvBkwiRSJGxeHaprmyqXnYG3P0Lc653o+clPw+nGRa/ RAs1rlFRfJiMOroeS020xvRKLWBtXim47Xq6ZXdMx1bPMENCxYuLcYH/+HsKsgUZ rhdvsKVxThqbrithsc0CdDuzMXXTzW/TY17ehtFBYtHDydhGxXU+IuGaNMyvAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUdXXI/FpNUVU0c2keV9P1ZIRorsowHwYDVR0j BBgwFoAUfZf/zLScf0Rz+yN4YOsybIHGZm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXZkVkZ3ZlgxWE1VRHpFdHhSOVhlVndXYWkyMzEycjZ6RHpDM3ZkVG1R U0ovMS83RDk3RkZDQ0I0OUM3RjQ0NzNGQjIzNzg2MEVCMzI2QzgxQzY2NjZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdEOTdGRkNDQjQ5QzdGNDQ3 M0ZCMjM3ODYwRUIzMjZDODFDNjY2NkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl2ZFZGd2ZYMVhNVUR6RXR4UjlYZVZ3V2FpMjMxMnI2ekR6QzN2ZFRtUVNKLzEv MzIzODMwMzQzYTM1MzAzMzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMz MzAzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARQODANBgkqhkiG9w0BAQsFAAOCAQEAA0KlL1Nm X19BlfwSyg6MuxYTF/2GpbxSkswoIaOow+s2d74p8ETeVWSYFboNqIQaw8uHBkov 0UvSqDdwxW5qsbEhPRjThtmW2uRp0+0qAp66ArssdVaGr3MAUm8kqDN1VK9i2Vj9 5BdE4qG51LSxWgZ+OjSiN78zkCg5qm94pb6lg+IA6ToDsJ5na9vjh1fl/mgdlu6a xJ2G38Vzs6PaNPWBXRZnuk9tefp1ouDXjZ5MuqeCiVHd8ppooGc7A2Mu1hVJPozy xLxEmJQzPWhI4TvHyb2fElE+SfUqCNllcOPGauBqx40jqEnFmOX4JJ6ynYII5vis fpP7DngMdDGGVw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:00 2025 by rpki-client