This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/323830343a343838303a3a2f33322d3438203d3e20323637313235.roa File: 323830343a343838303a3a2f33322d3438203d3e20323637313235.roa (raw, json) Hash identifier: 5DbhAPMYsjx1ax8jLHl3oVmTwFJ7eesKl1+eZc6/uJo= Subject key identifier: DF:2D:D0:7B:07:4A:21:85:CC:E8:66:D1:BC:10:72:CC:B0:36:7A:0E Certificate issuer: /CN=D53752ADA92E81931C29CA44ABDEEDDF373E93F7 Certificate serial: 1CF41E5DBCFA46B08C35AFF45E90AEDA2578E4 Authority key identifier: D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer Subject info access: rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/323830343a343838303a3a2f33322d3438203d3e20323637313235.roa Signing time: Thu 13 Nov 2025 18:18:13 +0000 ROA not before: Thu 13 Nov 2025 18:13:13 +0000 ROA not after: Thu 12 Nov 2026 18:18:13 +0000 asID: 267125 IP address blocks: 2804:4880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.crl rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 00:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f4:1e:5d:bc:fa:46:b0:8c:35:af:f4:5e:90:ae:da:25:78:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D53752ADA92E81931C29CA44ABDEEDDF373E93F7 Validity Not Before: Nov 13 18:13:13 2025 GMT Not After : Nov 12 18:18:13 2026 GMT Subject: CN=DF2DD07B074A2185CCE866D1BC1072CCB0367A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:0d:6b:5a:9e:1d:e8:26:5e:95:8c:36:4b: 4d:3f:86:22:58:1a:37:2f:da:73:37:ac:0c:73:20: e3:6c:8e:c0:1b:17:01:53:d3:c2:07:9b:80:87:15: 41:52:24:44:f1:8c:97:dd:d0:e6:d0:ec:49:b3:ba: e2:14:67:2d:0f:cc:a4:2b:57:ff:38:3d:ff:7c:e3: c2:e6:89:f3:0b:ca:58:6f:da:f5:8c:fa:0a:16:e8: 5a:f6:a5:01:95:5c:32:67:5c:f3:df:99:68:d7:37: 2f:5e:82:63:c3:b0:11:51:a8:69:47:ee:3c:dd:01: 34:62:1d:6d:70:08:a7:e9:ed:11:dd:56:ba:1d:1b: ce:f3:b3:22:b9:7b:67:a7:1f:dc:75:e6:46:6a:d4: 16:d8:fd:b4:0a:28:c9:a1:00:08:79:28:39:df:b2: d9:53:5a:07:de:83:f1:72:de:be:6e:da:db:c4:5b: 09:00:38:da:b1:4c:03:49:c8:84:c3:bd:fb:da:be: 16:11:14:45:d8:3f:d7:c1:a5:dc:d2:c4:8a:e0:a6: d2:7b:d8:3f:4c:fa:eb:01:42:9e:95:c0:7f:f5:c7: d3:6e:20:36:75:8f:ba:4a:d6:76:dd:4a:f6:4b:86: 6b:26:7c:22:5d:22:28:56:fe:5c:53:c0:95:55:0b: 6c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2D:D0:7B:07:4A:21:85:CC:E8:66:D1:BC:10:72:CC:B0:36:7A:0E X509v3 Authority Key Identifier: keyid:D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/323830343a343838303a3a2f33322d3438203d3e20323637313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4880::/32 Signature Algorithm: sha256WithRSAEncryption 39:c4:d0:e9:34:2d:12:b4:90:a2:3c:bd:d7:0b:42:33:e3:86: 4b:ab:ff:57:ce:54:57:ed:50:c0:49:9e:6e:12:71:36:f1:50: 13:62:bb:c4:25:fb:cb:0a:40:c8:85:89:d1:bb:58:f6:36:d9: 86:89:85:ad:c8:d5:39:d2:b5:38:b2:b5:56:60:88:cc:35:01: 4d:90:2e:3c:b6:39:37:ae:94:e4:a5:7d:86:fd:ef:79:46:18: 47:5a:df:4e:5b:b9:43:29:bb:44:bd:33:f6:fe:14:d7:5d:37: 52:6d:e7:5e:ac:02:8c:03:be:6f:bd:38:0a:bf:1a:38:94:e6: 13:19:fa:6d:1c:c4:f3:d5:6a:6f:94:af:5b:69:dd:95:4c:34: 58:b7:b1:ce:9b:29:c5:ff:19:6f:c9:18:a9:b0:3d:df:fe:3f: 30:56:fb:5d:08:e4:5a:c7:7f:a2:1a:d9:5e:ca:dd:ea:89:79: 1c:dd:17:08:f7:d3:41:41:4f:7e:97:4e:67:db:ee:73:83:26: 43:6e:9e:26:d3:b4:5d:91:c1:1c:5f:4f:db:52:a5:50:50:9d: 4c:85:66:13:3a:1a:67:0e:59:65:41:96:b0:1e:2a:ef:20:e5: c0:78:c5:7f:73:f7:89:a9:71:09:02:f1:5b:d2:3b:bc:8f:f1: 6f:ac:1f:6c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgITHPQeXbz6RrCMNa/0XpCu2iV45DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhENTM3NTJBREE5MkU4MTkzMUMyOUNBNDRBQkRFRURERjM3 M0U5M0Y3MB4XDTI1MTExMzE4MTMxM1oXDTI2MTExMjE4MTgxM1owMzExMC8GA1UE AxMoREYyREQwN0IwNzRBMjE4NUNDRTg2NkQxQkMxMDcyQ0NCMDM2N0EwRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANGkDWtanh3oJl6VjDZLTT+GIlga Ny/aczesDHMg42yOwBsXAVPTwgebgIcVQVIkRPGMl93Q5tDsSbO64hRnLQ/MpCtX /zg9/3zjwuaJ8wvKWG/a9Yz6ChboWvalAZVcMmdc89+ZaNc3L16CY8OwEVGoaUfu PN0BNGIdbXAIp+ntEd1Wuh0bzvOzIrl7Z6cf3HXmRmrUFtj9tAooyaEACHkoOd+y 2VNaB96D8XLevm7a28RbCQA42rFMA0nIhMO9+9q+FhEURdg/18Gl3NLEiuCm0nvY P0z66wFCnpXAf/XH024gNnWPukrWdt1K9kuGayZ8Il0iKFb+XFPAlVULbCMCAwEA AaOCAlAwggJMMB0GA1UdDgQWBBTfLdB7B0ohhczoZtG8EHLMsDZ6DjAfBgNVHSME GDAWgBTVN1KtqS6BkxwpykSr3u3fNz6T9zAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9CQmZVRXc3OU5lUWFVZUpZTnA1SDRmZkJNQ05wS3JHWENUb295dG45MkZ2 cC8xL0Q1Mzc1MkFEQTkyRTgxOTMxQzI5Q0E0NEFCREVFRERGMzczRTkzRjcuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvRDUzNzUyQURBOTJFODE5MzFD MjlDQTQ0QUJERUVEREYzNzNFOTNGNy5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkJmVUV3NzlOZVFhVWVKWU5wNUg0ZmZCTUNOcEtyR1hDVG9veXRuOTJGdnAvMS8z MjM4MzAzNDNhMzQzODM4MzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM2Mzcz MTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBEiAMA0GCSqGSIb3DQEBCwUAA4IBAQA5xNDpNC0S tJCiPL3XC0Iz44ZLq/9XzlRX7VDASZ5uEnE28VATYrvEJfvLCkDIhYnRu1j2NtmG iYWtyNU50rU4srVWYIjMNQFNkC48tjk3rpTkpX2G/e95RhhHWt9OW7lDKbtEvTP2 /hTXXTdSbederAKMA75vvTgKvxo4lOYTGfptHMTz1WpvlK9bad2VTDRYt7HOmynF /xlvyRipsD3f/j8wVvtdCORax3+iGtleyt3qiXkc3RcI99NBQU9+l05n2+5zgyZD bp4m07RdkcEcX0/bUqVQUJ1MhWYTOhpnDlllQZawHirvIOXAeMV/c/eJqXEJAvFb 0ju8j/FvrB9s -----END CERTIFICATE-----Generated at Sun Dec 7 03:32:02 2025 by rpki-client