This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616563303a3a2f34322d3432203d3e20323638373037.roa File: 323830343a353938343a616563303a3a2f34322d3432203d3e20323638373037.roa (raw, json) Hash identifier: uGEHTWxyFSiUbHTRtsotJu/5RHYYk/eMX2jBLUgC39Q= Subject key identifier: F1:56:8B:8D:23:A4:E3:7F:E2:16:EA:D8:9C:B8:50:10:95:63:06:B3 Certificate issuer: /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379 Certificate serial: 14B58803F39553F4EBEBC8366D45D6196D5E0A98 Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616563303a3a2f34322d3432203d3e20323638373037.roa Signing time: Wed 17 Dec 2025 03:36:07 +0000 ROA not before: Wed 17 Dec 2025 03:31:07 +0000 ROA not after: Wed 16 Dec 2026 03:36:07 +0000 asID: 268707 IP address blocks: 2804:5984:aec0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 19:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b5:88:03:f3:95:53:f4:eb:eb:c8:36:6d:45:d6:19:6d:5e:0a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379 Validity Not Before: Dec 17 03:31:07 2025 GMT Not After : Dec 16 03:36:07 2026 GMT Subject: CN=F1568B8D23A4E37FE216EAD89CB85010956306B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:77:bf:14:6b:3e:ab:74:10:74:96:31:60: aa:53:83:fa:82:29:e0:c5:92:4f:2c:e5:62:40:79: d0:00:5e:c5:e7:71:a6:36:7c:d7:63:7b:6e:32:19: 0f:f4:85:ba:2d:0f:ea:9d:61:12:70:fc:c9:56:9d: 14:0e:fc:05:45:db:96:56:b8:ed:96:16:d3:00:d7: ae:61:a9:8a:04:1d:9c:8e:e0:97:17:96:ca:e2:30: 44:6e:9a:ea:58:f1:fa:22:04:1f:ea:47:9a:40:92: c6:42:3e:c0:c8:63:49:ad:c1:4e:68:9d:bc:86:69: 52:0f:1c:63:71:f0:83:33:93:a8:f4:9e:d2:12:ec: 40:f7:63:95:32:ee:75:22:f2:42:f8:ee:1c:59:c2: 81:cd:02:43:d5:5d:21:05:f9:7e:c4:b0:7e:c4:46: a8:84:a7:c3:63:f6:46:b1:a6:e2:ca:12:2e:7b:55: f6:48:ed:34:b3:9d:cf:28:a8:40:18:b0:e2:68:49: 8c:ef:1b:ff:ae:d6:cc:a9:a4:86:8b:bc:96:c0:a6: 3c:6c:26:14:fe:ba:9c:2b:d6:a1:35:7e:87:96:00: 1f:1f:a1:ba:1e:13:8b:ed:da:fd:ef:db:c4:20:c3: 46:5e:28:1c:2f:cb:d9:7a:84:17:88:9d:12:33:15: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:56:8B:8D:23:A4:E3:7F:E2:16:EA:D8:9C:B8:50:10:95:63:06:B3 X509v3 Authority Key Identifier: keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616563303a3a2f34322d3432203d3e20323638373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5984:aec0::/42 Signature Algorithm: sha256WithRSAEncryption 63:ad:e4:18:b2:7d:d2:1a:e2:c8:21:ea:09:2e:64:49:da:ad: e9:bf:32:c2:00:a4:8a:8f:45:bb:d1:7d:4b:13:fe:6a:8a:9a: 26:ff:46:1c:53:ab:64:1f:ea:49:fb:17:e2:e5:9f:b7:1c:4d: 9b:08:1c:99:21:6f:48:e0:0f:fd:6a:8b:ac:79:b3:22:ba:8c: 83:8b:16:2c:e2:4c:ad:62:f9:34:ce:fe:14:91:1e:26:c5:09: bc:bd:2f:f6:89:41:98:d3:31:e0:6a:f9:7b:39:6c:11:3c:a2: 96:cc:58:a7:5d:27:e8:9b:de:78:3e:74:62:91:ee:58:70:da: cd:e9:85:e6:71:27:26:08:64:82:57:a4:80:cd:b2:b2:77:e0: c9:07:e9:4b:70:26:5a:3f:15:0b:d0:9b:55:03:f2:fb:65:1d: a7:e1:30:9e:21:bf:d5:84:e5:84:03:c1:80:e0:0d:a9:98:ea: 6d:e8:f5:0a:f9:54:02:3e:bc:10:ef:9e:6f:db:ea:9f:bc:7d: 89:4d:4f:6b:df:c7:b0:94:93:6e:48:81:c1:f9:77:63:8e:9d: d5:21:0e:69:e2:fd:64:08:8e:de:f8:a0:e0:90:a9:ca:be:8a: 41:f3:7c:a3:80:ff:cd:5b:bb:cb:b1:78:1d:e6:19:be:02:70: 26:4f:5c:0c -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUFLWIA/OVU/Tr68g2bUXWGW1eCpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EzRTA0QkMzOUJDNDk0M0Q4NjhGNDFFQTUzQzAxMjNG NjY4QzM3OTAeFw0yNTEyMTcwMzMxMDdaFw0yNjEyMTYwMzM2MDdaMDMxMTAvBgNV BAMTKEYxNTY4QjhEMjNBNEUzN0ZFMjE2RUFEODlDQjg1MDEwOTU2MzA2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUFXe/FGs+q3QQdJYxYKpTg/qC KeDFkk8s5WJAedAAXsXncaY2fNdje24yGQ/0hbotD+qdYRJw/MlWnRQO/AVF25ZW uO2WFtMA165hqYoEHZyO4JcXlsriMERumupY8foiBB/qR5pAksZCPsDIY0mtwU5o nbyGaVIPHGNx8IMzk6j0ntIS7ED3Y5Uy7nUi8kL47hxZwoHNAkPVXSEF+X7EsH7E RqiEp8Nj9kaxpuLKEi57VfZI7TSznc8oqEAYsOJoSYzvG/+u1syppIaLvJbApjxs JhT+upwr1qE1foeWAB8foboeE4vt2v3v28Qgw0ZeKBwvy9l6hBeInRIzFdtrAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQU8VaLjSOk43/iFurYnLhQEJVjBrMwHwYDVR0j BBgwFoAUej4EvDm8SUPYaPQepTwBI/Zow3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5 RVYvMC83QTNFMDRCQzM5QkM0OTQzRDg2OEY0MUVBNTNDMDEyM0Y2NjhDMzc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBM0UwNEJDMzlCQzQ5NDNE ODY4RjQxRUE1M0MwMTIzRjY2OEMzNzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv MzIzODMwMzQzYTM1MzkzODM0M2E2MTY1NjMzMDNhM2EyZjM0MzIyZDM0MzIyMDNk M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigEWYSuwDANBgkqhkiG9w0BAQsF AAOCAQEAY63kGLJ90hriyCHqCS5kSdqt6b8ywgCkio9Fu9F9SxP+aoqaJv9GHFOr ZB/qSfsX4uWftxxNmwgcmSFvSOAP/WqLrHmzIrqMg4sWLOJMrWL5NM7+FJEeJsUJ vL0v9olBmNMx4Gr5ezlsETyilsxYp10n6JveeD50YpHuWHDazemF5nEnJghkglek gM2ysnfgyQfpS3AmWj8VC9CbVQPy+2Udp+EwniG/1YTlhAPBgOANqZjqbej1CvlU Aj68EO+eb9vqn7x9iU1Pa9/HsJSTbkiBwfl3Y46d1SEOaeL9ZAiO3vig4JCpyr6K QfN8o4D/zVu7y7F4HeYZvgJwJk9cDA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:03:13 2025 by rpki-client