This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa File: 323830343a363931383a3a2f33322d313238203d3e20323730323438.roa (raw, json) Hash identifier: INdY29VlXjwZidJJ/5h5EXG5teGth80EwR3/25Ljk6g= Subject key identifier: 01:2A:8F:48:FE:5D:56:17:A6:71:82:68:45:F4:8A:1F:F6:28:DB:EF Certificate issuer: /CN=5D3B8E4D6F6524006852CBF685ABF991011CFDFD Certificate serial: 5554770904FB740BE395E9509A5FC3906001F772 Authority key identifier: 5D:3B:8E:4D:6F:65:24:00:68:52:CB:F6:85:AB:F9:91:01:1C:FD:FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D3B8E4D6F6524006852CBF685ABF991011CFDFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa Signing time: Thu 27 Nov 2025 17:43:35 +0000 ROA not before: Thu 27 Nov 2025 17:38:35 +0000 ROA not after: Thu 26 Nov 2026 17:43:35 +0000 asID: 270248 IP address blocks: 2804:6918::/32 maxlen: 128 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 55:54:77:09:04:fb:74:0b:e3:95:e9:50:9a:5f:c3:90:60:01:f7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D3B8E4D6F6524006852CBF685ABF991011CFDFD Validity Not Before: Nov 27 17:38:35 2025 GMT Not After : Nov 26 17:43:35 2026 GMT Subject: CN=012A8F48FE5D5617A671826845F48A1FF628DBEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:02:ca:d3:5f:8a:6f:48:00:be:c1:db:c5: 97:f8:4e:24:63:1d:3f:0a:f7:12:a0:13:58:fa:69: 66:84:07:2c:81:d9:86:94:9f:fb:57:23:d3:a0:46: 0a:2a:5e:a7:a6:3e:77:6f:32:e4:ba:ef:c0:db:0e: e4:38:4f:84:2f:70:41:5e:ec:89:99:4e:ae:7e:e1: df:1b:f6:91:c7:2b:6f:ba:ed:7e:4d:75:42:f3:42: 00:91:db:9f:bf:48:7f:01:48:fe:9e:61:e0:f8:78: 5c:0d:63:98:4c:7b:2e:94:e6:56:d7:69:e2:77:f3: 62:d0:3d:13:05:3c:d3:82:b7:69:9d:f0:ff:1c:5e: 4c:24:fd:f0:fd:87:a1:03:84:3f:dd:d5:5b:17:b1: 9a:17:8c:d5:85:06:a6:9d:c3:09:59:5f:19:71:5a: 69:1b:46:ee:2e:71:4e:d1:39:88:be:65:4e:7a:d7: 95:2c:27:ed:7f:a0:c0:a1:c8:eb:78:ff:2c:45:30: a2:42:1c:a4:18:76:49:c5:2d:79:43:ff:bd:64:49: 32:5f:0c:4e:82:9b:ca:13:ac:8b:cb:5c:13:f8:7e: b2:d2:64:0c:84:81:69:12:29:33:e6:fb:bc:9f:20: e8:22:3a:30:7f:37:2d:e9:59:f1:f9:8f:77:64:d3: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2A:8F:48:FE:5D:56:17:A6:71:82:68:45:F4:8A:1F:F6:28:DB:EF X509v3 Authority Key Identifier: keyid:5D:3B:8E:4D:6F:65:24:00:68:52:CB:F6:85:AB:F9:91:01:1C:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/5D3B8E4D6F6524006852CBF685ABF991011CFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D3B8E4D6F6524006852CBF685ABF991011CFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6918::/32 Signature Algorithm: sha256WithRSAEncryption 65:6f:c8:35:a7:4a:f0:bb:a6:3c:d2:ff:a7:1e:ad:b4:41:6a: ca:bb:91:88:61:73:da:cd:e1:fb:51:fe:2d:7b:d6:56:c2:74: c1:64:8b:2a:3b:f8:a1:32:03:d9:eb:84:13:73:2b:08:90:6b: 52:fb:b0:1d:00:ac:fc:7e:da:4b:6b:5f:d7:71:b5:0e:81:2e: 59:19:26:8e:82:a1:75:6a:72:89:df:13:44:90:44:a0:dd:db: 3a:59:ad:9c:cc:a0:a3:7a:bf:af:9b:8a:bb:a1:10:38:b3:8d: 0c:7c:f6:f8:0d:48:85:8e:c1:fa:e7:f4:fc:ea:9b:99:99:e6: ca:54:8c:00:94:8b:5a:07:ef:28:23:0b:e2:44:bb:63:e3:2c: 17:89:d8:23:5a:53:b2:62:e8:9c:c3:c0:53:d9:7c:92:a7:f9: 48:c3:4e:97:2f:da:66:7a:5b:51:ee:47:3e:8b:ca:24:dc:3b: 72:c6:5a:35:d3:07:ed:c9:43:1d:33:d4:7c:ff:09:0f:ba:31: 26:a7:97:89:63:68:27:ef:5f:37:00:a3:83:69:4c:93:f7:ad: e8:d9:8d:1d:52:dd:2a:32:77:5e:d6:20:9d:17:9e:c4:2b:79: d7:2c:2b:55:59:35:20:ed:73:ba:43:4d:42:75:b6:c8:d5:a2: f9:0c:58:02 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUVVR3CQT7dAvjlelQml/DkGAB93IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQzQjhFNEQ2RjY1MjQwMDY4NTJDQkY2ODVBQkY5OTEw MTFDRkRGRDAeFw0yNTExMjcxNzM4MzVaFw0yNjExMjYxNzQzMzVaMDMxMTAvBgNV BAMTKDAxMkE4RjQ4RkU1RDU2MTdBNjcxODI2ODQ1RjQ4QTFGRjYyOERCRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/QLK01+Kb0gAvsHbxZf4TiRj HT8K9xKgE1j6aWaEByyB2YaUn/tXI9OgRgoqXqemPndvMuS678DbDuQ4T4QvcEFe 7ImZTq5+4d8b9pHHK2+67X5NdULzQgCR25+/SH8BSP6eYeD4eFwNY5hMey6U5lbX aeJ382LQPRMFPNOCt2md8P8cXkwk/fD9h6EDhD/d1VsXsZoXjNWFBqadwwlZXxlx WmkbRu4ucU7ROYi+ZU5615UsJ+1/oMChyOt4/yxFMKJCHKQYdknFLXlD/71kSTJf DE6Cm8oTrIvLXBP4frLSZAyEgWkSKTPm+7yfIOgiOjB/Ny3pWfH5j3dk03TRAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUASqPSP5dVhemcYJoRfSKH/Yo2+8wHwYDVR0j BBgwFoAUXTuOTW9lJABoUsv2hav5kQEc/f0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUhFTmkzREJlaER0TVRtQk1TMXlSQTMzQWlWUlA1TWtpS3o5d01lNVFx bjcvMC81RDNCOEU0RDZGNjUyNDAwNjg1MkNCRjY4NUFCRjk5MTAxMUNGREZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEM0I4RTRENkY2NTI0MDA2 ODUyQ0JGNjg1QUJGOTkxMDExQ0ZERkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FIRU5pM0RCZWhEdE1UbUJNUzF5UkEzM0FpVlJQNU1raUt6OXdNZTVRcW43LzAv MzIzODMwMzQzYTM2MzkzMTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzAzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBGkYMA0GCSqGSIb3DQEBCwUAA4IBAQBlb8g1 p0rwu6Y80v+nHq20QWrKu5GIYXPazeH7Uf4te9ZWwnTBZIsqO/ihMgPZ64QTcysI kGtS+7AdAKz8ftpLa1/XcbUOgS5ZGSaOgqF1anKJ3xNEkESg3ds6Wa2czKCjer+v m4q7oRA4s40MfPb4DUiFjsH65/T86puZmebKVIwAlItaB+8oIwviRLtj4ywXidgj WlOyYuicw8BT2XySp/lIw06XL9pmeltR7kc+i8ok3Dtyxlo10wftyUMdM9R8/wkP ujEmp5eJY2gn7183AKODaUyT963o2Y0dUt0qMnde1iCdF57EK3nXLCtVWTUg7XO6 Q01CdbbI1aL5DFgC -----END CERTIFICATE-----Generated at Sat Dec 6 20:05:02 2025 by rpki-client