This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/323830343a6431633a3a2f33322d3332203d3e203532363030.roa File: 323830343a6431633a3a2f33322d3332203d3e203532363030.roa (raw, json) Hash identifier: kx+gtk3y46lxx99zDNT/tAjY3ez1RuWFtsjlv+A7rVA= Subject key identifier: 9E:D2:BD:DF:3E:5A:30:71:9E:4C:62:77:05:C5:A1:E7:16:7C:71:ED Certificate issuer: /CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0 Certificate serial: 660C8719F8388CCDE471D3276603D608DC625582 Authority key identifier: 29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/323830343a6431633a3a2f33322d3332203d3e203532363030.roa Signing time: Mon 17 Nov 2025 12:55:34 +0000 ROA not before: Mon 17 Nov 2025 12:50:34 +0000 ROA not after: Mon 16 Nov 2026 12:55:34 +0000 asID: 52600 IP address blocks: 2804:d1c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0c:87:19:f8:38:8c:cd:e4:71:d3:27:66:03:d6:08:dc:62:55:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0 Validity Not Before: Nov 17 12:50:34 2025 GMT Not After : Nov 16 12:55:34 2026 GMT Subject: CN=9ED2BDDF3E5A30719E4C627705C5A1E7167C71ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:98:82:2d:ce:c8:5d:9c:c5:6b:a3:7b:30: f6:87:40:b0:45:6b:9a:50:44:58:fe:7f:e7:f4:2d: 33:97:24:8d:54:84:86:14:55:32:a2:2f:7f:55:b4: d9:96:92:94:7d:d4:96:60:8c:b3:71:b9:02:3f:6f: 98:9f:dc:64:20:a0:0b:18:fd:4f:99:9e:17:9b:3c: 75:af:a6:5a:5f:70:56:01:70:ee:6f:d1:a1:8d:d7: ba:26:1f:91:3a:99:48:21:f7:9d:2f:a6:0e:47:5f: 98:e9:f3:10:ae:b5:eb:7b:bd:8a:85:78:02:d6:12: b8:86:15:0c:2d:7d:0d:c4:83:db:7c:1b:32:d2:71: 00:80:ad:75:80:45:19:d7:a4:3e:e1:98:5b:ca:a8: e5:ff:61:0e:b7:fe:c1:86:05:fe:4a:ae:65:c1:4f: 27:6f:0e:fe:e2:05:d4:6a:c8:83:1d:34:26:8e:df: 9e:96:7b:ed:e0:b6:b6:7b:58:06:bd:72:31:ba:21: 41:a6:86:7c:8e:27:7b:f0:ee:81:d9:cf:6d:59:e2: 3c:85:61:4f:d6:bc:02:42:c8:f6:3b:ae:53:62:74: 59:f0:28:20:71:fb:51:d0:ed:2f:4f:07:d8:6d:60: c5:98:9a:1c:56:e9:63:c0:0e:b8:4d:fe:45:c0:b2: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D2:BD:DF:3E:5A:30:71:9E:4C:62:77:05:C5:A1:E7:16:7C:71:ED X509v3 Authority Key Identifier: keyid:29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/323830343a6431633a3a2f33322d3332203d3e203532363030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:d1c::/32 Signature Algorithm: sha256WithRSAEncryption 28:d0:9a:bd:ef:0b:77:32:60:57:ce:d7:1f:8d:f9:3a:8a:2a: fb:7c:7f:87:f8:cd:f5:14:8f:63:c8:94:29:96:fd:7b:21:b6: 9d:29:6e:0a:e1:2f:a4:3d:1b:2e:cd:f6:f3:db:f8:f3:be:70: cc:d9:dc:a7:f8:10:be:fd:f7:dc:ea:16:31:ab:5d:9b:f4:23: 99:35:38:12:5a:a6:45:ae:fa:9c:9b:8f:43:9b:6f:b4:18:d8: 61:fb:f2:c8:ae:b9:0b:d6:71:9f:0e:03:e1:e5:06:5f:d6:02: 89:71:34:00:99:3e:7f:38:d0:e1:5f:2b:fa:b1:93:e8:6b:0c: 3c:1b:43:03:cc:aa:37:1c:fc:2c:06:3a:97:6c:ba:cd:fe:c5: ff:83:b7:60:5d:c2:48:61:d1:53:e4:a3:a7:c5:45:30:f8:4b: 01:1a:01:e2:0e:a4:40:4a:31:76:37:ce:46:e5:88:85:ac:27: 7e:94:ee:66:6c:06:e1:87:c2:75:f6:9b:84:ba:7e:5d:33:c7: ae:b2:42:5e:8a:61:53:41:9d:ce:82:61:15:29:a8:89:a7:8b: 94:99:23:be:cf:65:a4:15:c6:a9:86:39:ef:e6:ff:81:65:5b: 62:1a:e4:57:db:72:bc:12:9f:d4:44:1b:1f:49:35:3c:92:bf: b5:18:97:57 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUZgyHGfg4jM3kcdMnZgPWCNxiVYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlFRDREMkQ3MkM0NjVENURBMTFFMjI1NzZBRUQwMzcx MDlGQ0JEMDAeFw0yNTExMTcxMjUwMzRaFw0yNjExMTYxMjU1MzRaMDMxMTAvBgNV BAMTKDlFRDJCRERGM0U1QTMwNzE5RTRDNjI3NzA1QzVBMUU3MTY3QzcxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRYZiCLc7IXZzFa6N7MPaHQLBF a5pQRFj+f+f0LTOXJI1UhIYUVTKiL39VtNmWkpR91JZgjLNxuQI/b5if3GQgoAsY /U+ZnhebPHWvplpfcFYBcO5v0aGN17omH5E6mUgh950vpg5HX5jp8xCutet7vYqF eALWEriGFQwtfQ3Eg9t8GzLScQCArXWARRnXpD7hmFvKqOX/YQ63/sGGBf5KrmXB TydvDv7iBdRqyIMdNCaO356We+3gtrZ7WAa9cjG6IUGmhnyOJ3vw7oHZz21Z4jyF YU/WvAJCyPY7rlNidFnwKCBx+1HQ7S9PB9htYMWYmhxW6WPADrhN/kXAsr+ZAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUntK93z5aMHGeTGJ3BcWh5xZ8ce0wHwYDVR0j BBgwFoAUKe1NLXLEZdXaEeIldq7QNxCfy9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXhORVdqaGNpdnIzdUM1NGtaNUdva3hpWGNyV0w0Ync4alM5WERQR2o1 Mm4vMC8yOUVENEQyRDcyQzQ2NUQ1REExMUUyMjU3NkFFRDAzNzEwOUZDQkQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RUQ0RDJENzJDNDY1RDVE QTExRTIyNTc2QUVEMDM3MTA5RkNCRDAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl4TkVXamhjaXZyM3VDNTRrWjVHb2t4aVhjcldMNGJ3OGpTOVhEUEdqNTJuLzAv MzIzODMwMzQzYTY0MzE2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzNjMw MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBA0cMA0GCSqGSIb3DQEBCwUAA4IBAQAo0Jq97wt3MmBX ztcfjfk6iir7fH+H+M31FI9jyJQplv17IbadKW4K4S+kPRsuzfbz2/jzvnDM2dyn +BC+/ffc6hYxq12b9COZNTgSWqZFrvqcm49Dm2+0GNhh+/LIrrkL1nGfDgPh5QZf 1gKJcTQAmT5/ONDhXyv6sZPoaww8G0MDzKo3HPwsBjqXbLrN/sX/g7dgXcJIYdFT 5KOnxUUw+EsBGgHiDqRASjF2N85G5YiFrCd+lO5mbAbhh8J19puEun5dM8euskJe imFTQZ3OgmEVKaiJp4uUmSO+z2WkFcaphjnv5v+BZVtiGuRX23K8Ep/URBsfSTU8 kr+1GJdX -----END CERTIFICATE-----Generated at Sat Dec 6 13:10:28 2025 by rpki-client