This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33352d3335203d3e20323635323430.roa File: 323830343a326362633a3a2f33352d3335203d3e20323635323430.roa (raw, json) Hash identifier: kxlAXv9O6fYcs03d0BYTEy76k90IASjNlC1Fb99IQos= Subject key identifier: B6:E4:7A:20:4B:8D:73:B9:F9:0B:F5:C2:3D:6A:CD:9B:A5:70:75:35 Certificate issuer: /CN=DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D Certificate serial: 4EE5FC4F3696A92618E1977938F8D7CAD67DE616 Authority key identifier: DA:87:B1:64:45:04:48:E1:0F:6A:DF:AE:2D:61:A1:A4:A2:3D:BD:7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer Subject info access: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33352d3335203d3e20323635323430.roa Signing time: Mon 10 Nov 2025 19:24:07 +0000 ROA not before: Mon 10 Nov 2025 19:19:07 +0000 ROA not after: Mon 09 Nov 2026 19:24:07 +0000 asID: 265240 IP address blocks: 2804:2cbc::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.crl rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 08:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e5:fc:4f:36:96:a9:26:18:e1:97:79:38:f8:d7:ca:d6:7d:e6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D Validity Not Before: Nov 10 19:19:07 2025 GMT Not After : Nov 9 19:24:07 2026 GMT Subject: CN=B6E47A204B8D73B9F90BF5C23D6ACD9BA5707535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:25:54:69:90:b9:a1:26:09:4a:46:28:5d: e4:00:a6:d6:27:40:d3:84:48:24:72:5e:89:08:73: 23:86:f9:d5:e3:57:e0:c9:dc:a7:6e:36:a4:47:49: 3b:fc:d8:49:3b:ea:99:c3:22:cc:6d:84:cd:6b:69: 71:e8:86:a7:66:75:52:50:ca:7f:14:35:d2:9d:80: 37:4e:7f:c3:dd:04:2e:0a:ae:d5:c6:35:90:1e:5c: 20:9d:37:dd:d3:5f:fb:55:93:e6:e5:b0:37:f3:80: 64:1d:2b:e4:63:e8:27:bb:b4:5c:e5:cc:19:79:ad: 04:f3:a2:2c:14:1b:cb:77:80:bc:5b:29:00:8a:73: 38:55:59:ac:08:9b:b9:53:bf:d5:a6:88:bc:8e:77: f9:d8:e4:17:3f:de:1f:f8:07:90:08:25:f3:cc:fc: e1:27:a4:42:37:8f:1f:3b:f0:87:e9:00:da:f1:36: 04:bf:21:0e:6f:9d:a0:67:93:bc:0d:d8:5b:12:98: 4b:9c:91:6b:64:e9:d7:b5:e8:32:1b:d5:1d:d6:99: 7f:dd:0c:2b:67:7e:f5:14:46:62:f4:68:ec:5b:11: e3:c0:c5:a3:28:ec:05:04:6c:a8:cb:b2:79:26:f2: bc:63:c3:af:10:7b:4d:18:06:ed:50:05:b7:e8:47: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E4:7A:20:4B:8D:73:B9:F9:0B:F5:C2:3D:6A:CD:9B:A5:70:75:35 X509v3 Authority Key Identifier: keyid:DA:87:B1:64:45:04:48:E1:0F:6A:DF:AE:2D:61:A1:A4:A2:3D:BD:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA87B164450448E10F6ADFAE2D61A1A4A23DBD7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33352d3335203d3e20323635323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2cbc::/35 Signature Algorithm: sha256WithRSAEncryption 82:7f:3e:03:2c:44:3d:39:32:4d:5f:bf:bb:bc:eb:f0:1e:d7: 28:ac:00:47:c2:ce:88:1e:c1:23:0e:3c:9e:fd:b8:bb:1d:1d: 63:22:6f:0a:eb:b3:be:4f:3e:35:d9:8c:93:1b:55:38:ae:dd: 11:89:ae:57:55:b8:32:00:a3:5c:a1:20:81:ac:6e:69:66:70: 20:7c:4f:28:22:f9:60:dc:b2:2c:48:74:38:d7:ac:b7:07:20: 9b:19:d7:86:79:bb:98:d3:d6:82:c6:41:66:a2:9b:49:44:d5: f2:ae:83:45:5a:81:18:2a:ee:60:b6:43:88:0d:e7:fb:7e:56: a8:22:a2:0e:43:1c:b9:4e:71:bf:74:35:e8:f4:c2:82:a4:f5: 71:a6:3d:4e:17:10:34:70:68:84:ac:a3:df:55:ed:12:59:1f: db:d0:ce:80:3c:7c:ec:e4:36:b9:fd:f1:72:66:87:8f:85:1a: 86:08:c7:af:56:2d:92:8f:c9:ee:d8:b3:66:38:3f:b7:3a:51: 52:3a:50:da:50:14:93:6a:3b:c7:33:70:72:03:4c:56:d2:31: 23:5c:ea:64:8a:fd:27:6f:0d:08:96:7a:cc:82:b9:e0:76:27: 9a:ef:50:fd:e7:9f:07:52:9f:12:90:c7:d0:e0:05:37:5f:6e: 7e:6b:55:cb -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUTuX8TzaWqSYY4Zd5OPjXytZ95hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4N0IxNjQ0NTA0NDhFMTBGNkFERkFFMkQ2MUExQTRB MjNEQkQ3RDAeFw0yNTExMTAxOTE5MDdaFw0yNjExMDkxOTI0MDdaMDMxMTAvBgNV BAMTKEI2RTQ3QTIwNEI4RDczQjlGOTBCRjVDMjNENkFDRDlCQTU3MDc1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHiVUaZC5oSYJSkYoXeQAptYn QNOESCRyXokIcyOG+dXjV+DJ3KduNqRHSTv82Ek76pnDIsxthM1raXHohqdmdVJQ yn8UNdKdgDdOf8PdBC4KrtXGNZAeXCCdN93TX/tVk+blsDfzgGQdK+Rj6Ce7tFzl zBl5rQTzoiwUG8t3gLxbKQCKczhVWawIm7lTv9WmiLyOd/nY5Bc/3h/4B5AIJfPM /OEnpEI3jx878IfpANrxNgS/IQ5vnaBnk7wN2FsSmEuckWtk6de16DIb1R3WmX/d DCtnfvUURmL0aOxbEePAxaMo7AUEbKjLsnkm8rxjw68Qe00YBu1QBbfoR9DvAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUtuR6IEuNc7n5C/XCPWrNm6VwdTUwHwYDVR0j BBgwFoAU2oexZEUESOEPat+uLWGhpKI9vX0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXRGbUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJS YlUvMC9EQTg3QjE2NDQ1MDQ0OEUxMEY2QURGQUUyRDYxQTFBNEEyM0RCRDdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBODdCMTY0NDUwNDQ4RTEw RjZBREZBRTJENjFBMUE0QTIzREJEN0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F0Rm1FOGZ6U1RLdEF1OEdiWHU0ZTdEMWNxdVdHcnluSjdaWGtiYmpiUmJVLzAv MzIzODMwMzQzYTMyNjM2MjYzM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNjM1 MzIzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYFKAQsvAAwDQYJKoZIhvcNAQELBQADggEBAIJ/PgMs RD05Mk1fv7u86/Ae1yisAEfCzogewSMOPJ79uLsdHWMibwrrs75PPjXZjJMbVTiu 3RGJrldVuDIAo1yhIIGsbmlmcCB8Tygi+WDcsixIdDjXrLcHIJsZ14Z5u5jT1oLG QWaim0lE1fKug0VagRgq7mC2Q4gN5/t+Vqgiog5DHLlOcb90Nej0woKk9XGmPU4X EDRwaISso99V7RJZH9vQzoA8fOzkNrn98XJmh4+FGoYIx69WLZKPye7Ys2Y4P7c6 UVI6UNpQFJNqO8czcHIDTFbSMSNc6mSK/SdvDQiWesyCueB2J5rvUP3nnwdSnxKQ x9DgBTdfbn5rVcs= -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:50 2025 by rpki-client