This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33322d3332203d3e203532383631.roa File: 323830343a3762633a3a2f33322d3332203d3e203532383631.roa (raw, json) Hash identifier: uMMTPD7yGODOfokYZCmpFjSUGvOWYWpfXrowOgPDYPw= Subject key identifier: BB:53:43:C4:5C:DB:82:8A:3D:47:68:B9:21:85:AE:6C:B2:D0:F6:75 Certificate issuer: /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270 Certificate serial: 3F4D4D76795D0EE8CFCB9887140A3078DDDE2BF7 Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer Subject info access: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33322d3332203d3e203532383631.roa Signing time: Tue 25 Nov 2025 14:46:55 +0000 ROA not before: Tue 25 Nov 2025 14:41:55 +0000 ROA not after: Tue 24 Nov 2026 14:46:55 +0000 asID: 52861 IP address blocks: 2804:7bc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 21:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4d:4d:76:79:5d:0e:e8:cf:cb:98:87:14:0a:30:78:dd:de:2b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270 Validity Not Before: Nov 25 14:41:55 2025 GMT Not After : Nov 24 14:46:55 2026 GMT Subject: CN=BB5343C45CDB828A3D4768B92185AE6CB2D0F675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:ad:46:10:ed:54:e2:22:81:a7:54:7f:49: 54:d7:dd:88:b8:cf:eb:77:d1:74:55:e9:cc:52:2a: 45:20:d5:56:ea:3e:63:c2:55:43:30:11:bb:8b:5a: 7b:d2:0e:65:61:d1:24:9a:1f:c3:e9:a3:3d:1a:1c: f1:fe:1b:16:c6:6d:a1:cc:0b:58:63:24:53:2f:93: 82:dc:32:bf:04:8a:10:c2:8b:76:d2:54:30:54:6f: 53:d9:8b:9e:aa:51:ae:2d:9a:cf:84:a8:1b:9d:6f: 35:22:5d:4f:61:fa:ea:94:7b:1c:1d:e7:4c:38:a9: 19:0a:15:5a:bc:6d:4c:5a:b5:4d:47:b6:a3:51:ac: ab:4c:c6:9c:2f:84:7b:e7:7a:37:8a:cb:1c:ac:d1: b3:13:51:34:42:ac:fb:6b:eb:6c:09:79:dd:50:09: b8:96:d9:87:b8:3d:d6:3e:6f:cb:57:ac:dc:79:aa: 15:b7:22:e2:f7:5c:88:eb:f0:42:10:bd:2a:f3:a3: 7a:67:b4:c0:3b:fe:32:76:14:20:cb:6e:a1:98:2c: 8a:72:44:f8:64:41:e3:4d:28:94:df:31:fb:d0:e5: bb:0f:ee:a8:65:7b:98:fe:db:dd:0d:1e:be:79:22: 37:7f:7a:87:a3:c9:8c:36:fc:ff:6b:05:b4:b1:ef: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:53:43:C4:5C:DB:82:8A:3D:47:68:B9:21:85:AE:6C:B2:D0:F6:75 X509v3 Authority Key Identifier: keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33322d3332203d3e203532383631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7bc::/32 Signature Algorithm: sha256WithRSAEncryption 87:12:42:4b:1c:32:20:b8:9c:6c:ca:80:8b:03:29:63:c5:97: b4:f5:6c:e2:67:23:24:fc:b3:0b:f8:d0:14:46:6e:d3:02:2a: d6:39:89:af:5f:ee:05:89:15:ae:0f:c0:43:bb:7d:6d:8b:e5: d9:76:22:22:e0:f9:62:67:06:3d:09:df:c5:11:84:92:19:97: a3:3c:f0:80:5f:88:66:f4:88:f8:25:58:a5:f7:54:81:df:08: 37:e5:4b:af:2d:9b:3f:ce:c3:1a:9f:07:1c:0b:af:8b:db:53: cc:f2:6b:60:6e:49:58:7c:b5:3f:8b:d3:91:4c:ab:7d:2e:ec: 0c:00:5e:6f:b9:87:11:bb:74:c6:ea:b1:c7:1c:e6:f4:bd:55: a6:64:76:ea:e7:9d:dc:56:f4:8d:03:12:cd:d8:be:62:95:31: 41:d8:e9:3e:08:a2:ac:61:59:e5:df:48:4c:a8:d5:cf:4e:7d: ad:ae:98:2d:d8:e1:a1:99:a3:60:85:89:1e:b3:ac:09:3f:37: 44:a0:8e:d0:0c:ed:9d:d9:e4:ab:65:a4:92:f7:ef:e8:dc:14: 1a:e7:b0:4f:e7:e5:0e:d9:2a:49:5f:e2:73:30:29:43:25:83: b2:e2:9f:d5:d6:4d:cd:99:3e:28:e6:f1:9d:66:e7:8a:a7:c2: db:8f:51:91 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUP01NdnldDujPy5iHFAoweN3eK/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4RkJFQ0MzRDczNDg3NUNEQzIzQjU1QjlFNTA5MkVB MjdERjI3MDAeFw0yNTExMjUxNDQxNTVaFw0yNjExMjQxNDQ2NTVaMDMxMTAvBgNV BAMTKEJCNTM0M0M0NUNEQjgyOEEzRDQ3NjhCOTIxODVBRTZDQjJEMEY2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//K1GEO1U4iKBp1R/SVTX3Yi4 z+t30XRV6cxSKkUg1VbqPmPCVUMwEbuLWnvSDmVh0SSaH8Ppoz0aHPH+GxbGbaHM C1hjJFMvk4LcMr8EihDCi3bSVDBUb1PZi56qUa4tms+EqBudbzUiXU9h+uqUexwd 50w4qRkKFVq8bUxatU1HtqNRrKtMxpwvhHvnejeKyxys0bMTUTRCrPtr62wJed1Q CbiW2Ye4PdY+b8tXrNx5qhW3IuL3XIjr8EIQvSrzo3pntMA7/jJ2FCDLbqGYLIpy RPhkQeNNKJTfMfvQ5bsP7qhle5j+290NHr55Ijd/eoejyYw2/P9rBbSx7z0XAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUu1NDxFzbgoo9R2i5IYWubLLQ9nUwHwYDVR0j BBgwFoAUCI++zD1zSHXNwjtVueUJLqJ98nAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjF1VVdpVWtuUkRTV1AzM2ZTSDVuSzdMZndNOU1QMWNnZXZLVjU5eGhB S1gvMC8wODhGQkVDQzNENzM0ODc1Q0RDMjNCNTVCOUU1MDkyRUEyN0RGMjcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4OEZCRUNDM0Q3MzQ4NzVD REMyM0I1NUI5RTUwOTJFQTI3REYyNzAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0IxdVVXaVVrblJEU1dQMzNmU0g1bks3TGZ3TTlNUDFjZ2V2S1Y1OXhoQUtYLzAv MzIzODMwMzQzYTM3NjI2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzODM2 MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBAe8MA0GCSqGSIb3DQEBCwUAA4IBAQCHEkJLHDIguJxs yoCLAyljxZe09WziZyMk/LML+NAURm7TAirWOYmvX+4FiRWuD8BDu31ti+XZdiIi 4PliZwY9Cd/FEYSSGZejPPCAX4hm9Ij4JVil91SB3wg35UuvLZs/zsManwccC6+L 21PM8mtgbklYfLU/i9ORTKt9LuwMAF5vuYcRu3TG6rHHHOb0vVWmZHbq553cVvSN AxLN2L5ilTFB2Ok+CKKsYVnl30hMqNXPTn2trpgt2OGhmaNghYkes6wJPzdEoI7Q DO2d2eSrZaSS9+/o3BQa57BP5+UO2SpJX+JzMClDJYOy4p/V1k3NmT4o5vGdZueK p8Lbj1GR -----END CERTIFICATE-----Generated at Sun Dec 7 01:59:16 2025 by rpki-client