This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/323830343a376438633a3a2f33322d313238203d3e20323731353638.roa File: 323830343a376438633a3a2f33322d313238203d3e20323731353638.roa (raw, json) Hash identifier: py9zGi4YS+arvJI8H6F9Qy5ph4T8d0D5MdG+ccp7nk8= Subject key identifier: E2:10:02:41:E2:4C:CB:2F:68:01:45:F6:F1:BE:D2:3A:CE:81:86:5A Certificate issuer: /CN=3072A5F7CD1ED49F1294BF501470922B420E536A Certificate serial: 624B74B84D81703AC1A8A5814998FA25B49535F2 Authority key identifier: 30:72:A5:F7:CD:1E:D4:9F:12:94:BF:50:14:70:92:2B:42:0E:53:6A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3072A5F7CD1ED49F1294BF501470922B420E536A.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/323830343a376438633a3a2f33322d313238203d3e20323731353638.roa Signing time: Wed 03 Dec 2025 20:47:34 +0000 ROA not before: Wed 03 Dec 2025 20:42:34 +0000 ROA not after: Wed 02 Dec 2026 20:47:34 +0000 asID: 271568 IP address blocks: 2804:7d8c::/32 maxlen: 128 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 62:4b:74:b8:4d:81:70:3a:c1:a8:a5:81:49:98:fa:25:b4:95:35:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3072A5F7CD1ED49F1294BF501470922B420E536A Validity Not Before: Dec 3 20:42:34 2025 GMT Not After : Dec 2 20:47:34 2026 GMT Subject: CN=E2100241E24CCB2F680145F6F1BED23ACE81865A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:1f:30:e1:d2:95:b9:bb:f8:a1:9c:f5:4d: e6:4c:42:c8:97:67:84:a5:3e:36:73:1a:3c:7a:aa: 52:37:ef:94:45:21:b0:22:ad:f8:a2:c0:47:a5:9e: f9:27:6d:73:c1:04:cf:d8:42:a5:c1:4a:c9:40:f2: 15:ba:06:94:dd:a6:8e:22:c3:7e:69:84:2a:e8:56: bd:dd:e8:91:f5:e2:e5:36:57:4a:bc:39:81:48:53: 23:60:23:fc:05:6c:f8:49:57:bf:a7:2a:21:f5:a9: 3b:fc:30:d6:7b:a8:1c:87:4d:bd:0f:c6:f3:a3:43: 8f:84:eb:cf:e2:0e:07:34:d7:03:99:bd:23:09:bb: b7:10:98:79:21:a2:b7:1f:66:6c:a1:38:76:e0:8d: 6c:e0:76:e9:77:cd:ea:95:55:c3:24:50:02:a4:da: 7d:e1:f8:bb:63:a2:5e:62:b0:cd:40:a1:42:2d:bc: 74:d1:4a:f1:c5:e0:50:b2:29:71:bf:c5:7c:7c:1e: 12:75:94:87:20:56:79:b0:04:e7:17:5a:6c:bd:dd: ca:90:13:af:9d:62:16:87:02:16:9d:26:f0:c4:51: 00:47:c3:38:46:1e:72:24:5d:f4:5d:6a:a9:11:c6: b3:c9:07:2d:a8:6c:07:9f:cd:ba:13:09:80:23:19: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:02:41:E2:4C:CB:2F:68:01:45:F6:F1:BE:D2:3A:CE:81:86:5A X509v3 Authority Key Identifier: keyid:30:72:A5:F7:CD:1E:D4:9F:12:94:BF:50:14:70:92:2B:42:0E:53:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/3072A5F7CD1ED49F1294BF501470922B420E536A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3072A5F7CD1ED49F1294BF501470922B420E536A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKNMHDJxfMAEBgFpBCVfDgUALPpZ95UMCkY8HYKfxJ5W/0/323830343a376438633a3a2f33322d313238203d3e20323731353638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7d8c::/32 Signature Algorithm: sha256WithRSAEncryption a4:a7:09:7c:df:d4:ed:88:98:85:bd:bc:4a:74:f0:94:3b:e9: a8:13:fc:46:ff:bf:73:a9:25:29:59:59:cc:10:5d:4d:5f:0e: 17:ba:3d:08:7b:ce:d8:7b:2f:0d:0d:cb:de:c3:5d:32:54:12: 30:7a:1c:7c:da:ca:29:00:0d:c4:9d:59:a7:93:3a:5c:fc:41: 2d:c4:af:a4:a1:9e:fb:6e:19:7a:6b:e6:a8:17:ef:d0:da:a2: 6d:6a:07:18:2f:ab:f3:dd:35:72:ce:8f:e9:50:5b:95:04:4b: 44:81:ab:9e:4c:89:2b:37:ee:77:f9:70:b5:2c:20:c6:4a:81: df:77:5e:c4:c4:99:d9:9a:e4:4b:64:86:9d:ad:07:71:5b:c2: cc:c2:29:6d:b8:c7:70:13:2f:26:4d:3a:5d:b4:40:e4:37:7b: b5:7b:19:f4:7a:8d:c6:7f:53:6c:0a:0c:ae:93:4f:bb:61:89: 11:6d:e1:5a:51:24:b7:cd:eb:18:91:38:d1:7e:63:11:6b:44: 0e:ba:6c:17:41:03:41:29:cc:7b:18:bd:41:ec:80:96:fd:47: 11:70:60:c0:12:ae:e6:d6:2f:a3:da:ea:8b:db:88:24:c1:46: d3:60:3f:d7:74:88:3b:62:7e:c4:a9:1f:e5:73:b1:e7:25:d9: 2b:e6:79:9f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUYkt0uE2BcDrBqKWBSZj6JbSVNfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3MkE1RjdDRDFFRDQ5RjEyOTRCRjUwMTQ3MDkyMkI0 MjBFNTM2QTAeFw0yNTEyMDMyMDQyMzRaFw0yNjEyMDIyMDQ3MzRaMDMxMTAvBgNV BAMTKEUyMTAwMjQxRTI0Q0NCMkY2ODAxNDVGNkYxQkVEMjNBQ0U4MTg2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVAB8w4dKVubv4oZz1TeZMQsiX Z4SlPjZzGjx6qlI375RFIbAirfiiwEelnvknbXPBBM/YQqXBSslA8hW6BpTdpo4i w35phCroVr3d6JH14uU2V0q8OYFIUyNgI/wFbPhJV7+nKiH1qTv8MNZ7qByHTb0P xvOjQ4+E68/iDgc01wOZvSMJu7cQmHkhorcfZmyhOHbgjWzgdul3zeqVVcMkUAKk 2n3h+Ltjol5isM1AoUItvHTRSvHF4FCyKXG/xXx8HhJ1lIcgVnmwBOcXWmy93cqQ E6+dYhaHAhadJvDEUQBHwzhGHnIkXfRdaqkRxrPJBy2obAefzboTCYAjGfYTAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU4hACQeJMyy9oAUX28b7SOs6BhlowHwYDVR0j BBgwFoAUMHKl980e1J8SlL9QFHCSK0IOU2owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUtOTUhESnhmTUFFQmdGcEJDVmZEZ1VBTFBwWjk1VU1Da1k4SFlLZnhK NVcvMC8zMDcyQTVGN0NEMUVENDlGMTI5NEJGNTAxNDcwOTIyQjQyMEU1MzZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNzJBNUY3Q0QxRUQ0OUYx Mjk0QkY1MDE0NzA5MjJCNDIwRTUzNkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FLTk1IREp4Zk1BRUJnRnBCQ1ZmRGdVQUxQcFo5NVVNQ2tZOEhZS2Z4SjVXLzAv MzIzODMwMzQzYTM3NjQzODYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzEzNTM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBH2MMA0GCSqGSIb3DQEBCwUAA4IBAQCkpwl8 39TtiJiFvbxKdPCUO+moE/xG/79zqSUpWVnMEF1NXw4Xuj0Ie87Yey8NDcvew10y VBIwehx82sopAA3EnVmnkzpc/EEtxK+koZ77bhl6a+aoF+/Q2qJtagcYL6vz3TVy zo/pUFuVBEtEgaueTIkrN+53+XC1LCDGSoHfd17ExJnZmuRLZIadrQdxW8LMwilt uMdwEy8mTTpdtEDkN3u1exn0eo3Gf1NsCgyuk0+7YYkRbeFaUSS3zesYkTjRfmMR a0QOumwXQQNBKcx7GL1B7ICW/UcRcGDAEq7m1i+j2uqL24gkwUbTYD/XdIg7Yn7E qR/lc7HnJdkr5nmf -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:09 2025 by rpki-client