This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/323830343a353463383a3a2f33322d3438203d3e203631353935.roa File: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (raw, json) Hash identifier: Lr4RgQ9+Kc8eB8NQKeHtU80CyD6ZWwwwrof8SW1hNR4= Subject key identifier: 53:95:11:DE:B8:A4:EB:38:B9:0E:87:66:04:C9:AD:C7:0F:9A:DA:49 Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Certificate serial: 5D222C9AEF65C755B37E3F33C6D237F14EDDFD0D Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/323830343a353463383a3a2f33322d3438203d3e203631353935.roa Signing time: Fri 21 Nov 2025 12:20:51 +0000 ROA not before: Fri 21 Nov 2025 12:15:51 +0000 ROA not after: Fri 20 Nov 2026 12:20:51 +0000 asID: 61595 IP address blocks: 2804:54c8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 01:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:22:2c:9a:ef:65:c7:55:b3:7e:3f:33:c6:d2:37:f1:4e:dd:fd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Validity Not Before: Nov 21 12:15:51 2025 GMT Not After : Nov 20 12:20:51 2026 GMT Subject: CN=539511DEB8A4EB38B90E876604C9ADC70F9ADA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:2b:a2:e0:0d:ce:e7:5c:50:e6:f1:c4:79: 11:77:4f:bb:08:47:41:a9:d3:b8:e2:df:d6:3a:5b: 95:3b:4a:0d:9e:97:c4:7d:8d:ea:24:aa:09:40:c0: 8f:3a:c4:5c:c3:ad:2d:96:ab:66:ca:00:8b:1a:e8: b4:74:85:b3:72:5e:fa:ca:1d:1e:d9:14:e5:b7:cf: 16:76:4c:6c:90:c8:69:b9:1c:15:d7:7b:50:f9:5d: cd:ae:3e:44:98:a5:4a:67:2d:c2:68:a3:88:1f:66: 86:e3:3f:21:ac:79:d7:fb:6f:91:f5:9d:aa:18:d2: 08:6a:21:a6:d8:8e:82:39:3a:7c:2e:34:9e:9b:1a: b4:7d:c4:a6:1c:f7:9c:f1:c6:29:3b:43:56:09:69: d0:03:c8:da:8b:19:ce:5f:4b:90:8a:64:50:d0:e7: bb:7b:2c:03:24:0d:ed:53:76:f0:4a:f4:ae:12:44: c7:aa:89:ca:13:79:c0:2e:0a:2e:2e:fa:e8:0b:89: 73:58:b0:8b:ae:0d:c9:14:bb:9b:ac:5b:09:ef:3a: a3:50:86:93:ab:1c:c3:72:d6:16:81:6e:2d:16:90: a1:2b:b4:c7:a0:f8:51:fa:21:e8:36:04:6c:2f:68: bf:98:ee:6c:83:d2:03:4c:18:da:b9:8b:fc:b6:cd: f1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:95:11:DE:B8:A4:EB:38:B9:0E:87:66:04:C9:AD:C7:0F:9A:DA:49 X509v3 Authority Key Identifier: keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/323830343a353463383a3a2f33322d3438203d3e203631353935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:54c8::/32 Signature Algorithm: sha256WithRSAEncryption 33:b6:bf:c7:71:ba:99:7c:61:bc:13:7a:85:7e:48:97:5c:ad: 8f:39:f5:c7:e2:89:a8:7c:80:42:89:0e:e7:23:87:6e:f5:d1: f6:7d:ad:d9:e7:fe:fd:ac:7b:d1:ea:0d:1e:58:4d:46:5a:21: 63:97:4b:a9:91:16:2d:1c:7b:26:e0:ee:7e:95:ee:59:38:63: 94:1e:0b:b6:09:a3:10:1f:a9:28:bf:e8:ce:c2:b1:bf:5b:2c: d2:8d:06:9f:8d:77:45:ae:6c:2e:ff:5d:5b:51:71:48:81:75: 80:03:78:8e:e8:07:6f:67:76:5d:bf:0d:dc:df:5d:9f:f6:ce: 01:59:a5:d7:9d:97:98:b3:ce:72:75:bf:fe:5d:42:56:75:80: f3:bc:1c:d0:d4:30:96:7c:aa:d3:71:72:6b:49:ae:f8:07:ee: 84:22:4f:8b:ff:9d:7b:bb:dd:d1:05:dc:ac:a3:7f:f3:87:4b: 88:6e:9c:37:4a:da:35:f1:8b:e9:1f:d1:48:27:dc:c5:44:19: 65:a8:20:43:35:1f:d3:93:61:38:67:86:ae:ab:75:d5:e8:0b: dd:76:bc:8f:40:4f:5b:4b:e2:da:1e:60:ec:fd:13:05:fb:92: 07:0b:3b:9f:38:da:b2:e3:d3:42:3d:69:79:d8:a7:63:e6:48: 13:99:e1:8f -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUXSIsmu9lx1Wzfj8zxtI38U7d/Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1 OUQ3MTEzQTAeFw0yNTExMjExMjE1NTFaFw0yNjExMjAxMjIwNTFaMDMxMTAvBgNV BAMTKDUzOTUxMURFQjhBNEVCMzhCOTBFODc2NjA0QzlBREM3MEY5QURBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspyui4A3O51xQ5vHEeRF3T7sI R0Gp07ji39Y6W5U7Sg2el8R9jeokqglAwI86xFzDrS2Wq2bKAIsa6LR0hbNyXvrK HR7ZFOW3zxZ2TGyQyGm5HBXXe1D5Xc2uPkSYpUpnLcJoo4gfZobjPyGsedf7b5H1 naoY0ghqIabYjoI5OnwuNJ6bGrR9xKYc95zxxik7Q1YJadADyNqLGc5fS5CKZFDQ 57t7LAMkDe1TdvBK9K4SRMeqicoTecAuCi4u+ugLiXNYsIuuDckUu5usWwnvOqNQ hpOrHMNy1haBbi0WkKErtMeg+FH6Ieg2BGwvaL+Y7myD0gNMGNq5i/y2zfHNAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUU5UR3rik6zi5DodmBMmtxw+a2kkwHwYDVR0j BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JIZ3hOc0FKZkE0aVM5NFprRmYyeVp5UUJ5Um96YkoxRVBVQUtMZjVwYnlGLzAv MzIzODMwMzQzYTM1MzQ2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM1 MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEVMgwDQYJKoZIhvcNAQELBQADggEBADO2v8dxupl8 YbwTeoV+SJdcrY859cfiiah8gEKJDucjh2710fZ9rdnn/v2se9HqDR5YTUZaIWOX S6mRFi0ceybg7n6V7lk4Y5QeC7YJoxAfqSi/6M7Csb9bLNKNBp+Nd0WubC7/XVtR cUiBdYADeI7oB29ndl2/DdzfXZ/2zgFZpdedl5izznJ1v/5dQlZ1gPO8HNDUMJZ8 qtNxcmtJrvgH7oQiT4v/nXu73dEF3Kyjf/OHS4hunDdK2jXxi+kf0Ugn3MVEGWWo IEM1H9OTYThnhq6rddXoC912vI9AT1tL4toeYOz9EwX7kgcLO5842rLj00I9aXnY p2PmSBOZ4Y8= -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:22 2025 by rpki-client