This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa File: 323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa (raw, json) Hash identifier: rU5pztM2TOhA7//APvTw0CVrcKQRGDrZ42x6hZvswH0= Subject key identifier: F1:E0:B6:28:65:11:73:46:7E:66:4B:97:D0:F0:A3:BD:0F:5D:B2:55 Certificate issuer: /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379 Certificate serial: 402FEF2FCB8CFA717D290DB0019EE66F03616EB8 Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa Signing time: Wed 17 Dec 2025 03:36:09 +0000 ROA not before: Wed 17 Dec 2025 03:31:09 +0000 ROA not after: Wed 16 Dec 2026 03:36:09 +0000 asID: 268707 IP address blocks: 2804:5984:ae00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 19:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2f:ef:2f:cb:8c:fa:71:7d:29:0d:b0:01:9e:e6:6f:03:61:6e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379 Validity Not Before: Dec 17 03:31:09 2025 GMT Not After : Dec 16 03:36:09 2026 GMT Subject: CN=F1E0B628651173467E664B97D0F0A3BD0F5DB255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:74:27:1c:ff:2a:a2:cf:45:3f:27:8d:32: f3:71:d8:3e:49:41:5d:a4:51:c9:59:b4:73:80:a8: ee:cd:a2:62:d2:62:31:76:32:2d:d8:93:98:44:c3: fe:9a:3d:94:f6:f7:ec:65:6d:eb:a9:36:4f:be:91: 91:4b:0c:50:e1:2b:a0:b3:12:9d:38:0f:aa:8d:1a: 4e:40:41:b1:b2:e0:d3:ea:e1:9b:9d:eb:e6:cc:14: 86:d2:65:c0:1e:05:ce:bd:c6:67:0a:db:58:f6:95: 71:88:70:3e:79:6f:51:6c:71:03:af:8f:0d:f6:f6: 93:8c:2c:a8:bc:b6:18:b3:ae:a7:13:93:6e:19:86: 9f:c1:45:b3:44:1b:66:b8:7b:4e:9e:89:35:36:77: 6e:74:bd:cf:a9:ee:bd:3a:cd:43:70:9e:eb:78:59: 37:ff:59:f0:4b:05:16:86:82:7b:58:81:b4:1d:15: ab:78:af:bc:d9:9a:b8:88:11:39:df:a7:cc:68:d7: e7:dc:fb:33:83:ab:1e:df:58:61:bd:79:55:25:28: 5d:f7:a6:b5:5e:db:2c:bf:9c:aa:1b:c3:b2:c3:6b: 0d:67:db:d8:d6:cb:7e:e9:b7:52:b9:44:80:d7:06: bc:ab:95:3a:7a:fe:ef:70:17:cd:81:94:a4:c7:b5: 60:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E0:B6:28:65:11:73:46:7E:66:4B:97:D0:F0:A3:BD:0F:5D:B2:55 X509v3 Authority Key Identifier: keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5984:ae00::/40 Signature Algorithm: sha256WithRSAEncryption 94:8b:bc:41:bb:3c:95:5b:d5:a3:94:32:16:3a:fc:60:6a:45: 84:24:f1:c1:77:6a:35:99:91:cb:39:df:84:2b:00:05:70:53: 0b:be:16:98:71:95:a8:30:d6:dd:08:ca:b4:ec:75:83:b6:7f: 89:1b:15:68:94:06:dd:b4:83:14:ce:e0:ea:65:d4:76:a5:2f: 2b:e9:c8:0d:94:f7:6a:41:32:1f:bc:96:ef:ac:77:4f:6e:96: fa:f6:26:af:41:a6:e1:ef:20:ab:ae:28:c0:47:30:b0:e5:42: fa:98:db:33:f3:54:68:c0:fa:86:a3:c1:0f:24:23:89:4f:c4: 92:4c:a5:3e:4f:ce:03:e7:08:9d:89:93:17:5a:ec:44:e9:61: 0e:06:81:3b:09:b8:5b:08:cb:a2:d9:1d:40:9c:8e:35:d0:69: 56:f7:7d:4a:4e:61:67:e2:67:d9:55:c0:33:4e:f5:c6:73:de: 64:55:ea:72:f3:18:53:27:7e:31:17:c1:e3:a6:c0:e0:56:5b: 77:42:4a:84:54:7f:00:ad:85:0e:5e:f2:40:fe:68:ca:1e:bc: 02:4e:bb:70:79:8f:b0:17:a2:a8:a9:f6:3d:41:bc:71:eb:ff: 79:6e:49:2c:63:a9:fb:3c:72:f6:9b:73:48:42:39:ad:5a:f8: 0d:4f:c3:d3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQC/vL8uM+nF9KQ2wAZ7mbwNhbrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EzRTA0QkMzOUJDNDk0M0Q4NjhGNDFFQTUzQzAxMjNG NjY4QzM3OTAeFw0yNTEyMTcwMzMxMDlaFw0yNjEyMTYwMzM2MDlaMDMxMTAvBgNV BAMTKEYxRTBCNjI4NjUxMTczNDY3RTY2NEI5N0QwRjBBM0JEMEY1REIyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HHQnHP8qos9FPyeNMvNx2D5J QV2kUclZtHOAqO7NomLSYjF2Mi3Yk5hEw/6aPZT29+xlbeupNk++kZFLDFDhK6Cz Ep04D6qNGk5AQbGy4NPq4Zud6+bMFIbSZcAeBc69xmcK21j2lXGIcD55b1FscQOv jw329pOMLKi8thizrqcTk24Zhp/BRbNEG2a4e06eiTU2d250vc+p7r06zUNwnut4 WTf/WfBLBRaGgntYgbQdFat4r7zZmriIETnfp8xo1+fc+zODqx7fWGG9eVUlKF33 prVe2yy/nKobw7LDaw1n29jWy37pt1K5RIDXBryrlTp6/u9wF82BlKTHtWCpAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU8eC2KGURc0Z+ZkuX0PCjvQ9dslUwHwYDVR0j BBgwFoAUej4EvDm8SUPYaPQepTwBI/Zow3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5 RVYvMC83QTNFMDRCQzM5QkM0OTQzRDg2OEY0MUVBNTNDMDEyM0Y2NjhDMzc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBM0UwNEJDMzlCQzQ5NDNE ODY4RjQxRUE1M0MwMTIzRjY2OEMzNzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv MzIzODMwMzQzYTM1MzkzODM0M2E2MTY1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEWYSuMA0GCSqGSIb3DQEBCwUA A4IBAQCUi7xBuzyVW9WjlDIWOvxgakWEJPHBd2o1mZHLOd+EKwAFcFMLvhaYcZWo MNbdCMq07HWDtn+JGxVolAbdtIMUzuDqZdR2pS8r6cgNlPdqQTIfvJbvrHdPbpb6 9iavQabh7yCrrijARzCw5UL6mNsz81RowPqGo8EPJCOJT8SSTKU+T84D5widiZMX WuxE6WEOBoE7CbhbCMui2R1AnI410GlW931KTmFn4mfZVcAzTvXGc95kVepy8xhT J34xF8HjpsDgVlt3QkqEVH8ArYUOXvJA/mjKHrwCTrtweY+wF6KoqfY9Qbxx6/95 bkksY6n7PHL2m3NIQjmtWvgNT8PT -----END CERTIFICATE-----Generated at Thu Dec 18 20:03:13 2025 by rpki-client