This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/323830343a333862383a3a2f33322d3430203d3e20323636343937.roa File: 323830343a333862383a3a2f33322d3430203d3e20323636343937.roa (raw, json) Hash identifier: 31O3r7DcVa0Q1lErPl/vBL/XoYC0Jc+m/ZmKMWgbihs= Subject key identifier: 44:BF:C2:8C:8D:85:C2:6D:70:EE:A1:F6:F2:80:F2:74:E3:EE:21:A9 Certificate issuer: /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94 Certificate serial: 59F1D51E900196ADA5A9E3A56A1991B8B7C8BB82 Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/323830343a333862383a3a2f33322d3430203d3e20323636343937.roa Signing time: Thu 20 Nov 2025 21:00:21 +0000 ROA not before: Thu 20 Nov 2025 20:55:21 +0000 ROA not after: Thu 19 Nov 2026 21:00:21 +0000 asID: 266497 IP address blocks: 2804:38b8::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 14:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f1:d5:1e:90:01:96:ad:a5:a9:e3:a5:6a:19:91:b8:b7:c8:bb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94 Validity Not Before: Nov 20 20:55:21 2025 GMT Not After : Nov 19 21:00:21 2026 GMT Subject: CN=44BFC28C8D85C26D70EEA1F6F280F274E3EE21A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:ae:a2:ca:67:e8:94:56:d5:9b:ae:e2:2f: 1c:0a:8e:37:74:ca:7e:b8:eb:f4:b2:a4:ba:57:ca: 3f:df:82:86:0f:0c:56:84:1d:8a:4e:73:cf:ea:5e: f5:b6:81:1d:08:e9:ef:8d:a5:6b:d8:cd:9d:10:8f: c6:77:47:6d:52:98:21:ce:d5:d3:39:84:27:14:f3: 57:a3:69:8f:0a:7a:ff:90:47:4c:d2:6b:63:f5:aa: 20:8e:29:9f:8c:e9:11:da:c9:d4:0b:7c:11:49:4d: 46:66:49:9f:c1:5d:a4:23:46:80:67:25:50:39:18: 87:eb:98:66:f7:25:8e:a0:d8:bb:a5:bf:af:47:7d: d8:3f:86:2d:c0:09:3f:5d:a6:15:41:ba:77:61:d3: cc:c0:80:9c:ce:b7:bb:ec:2a:75:fa:5e:24:b1:9a: 44:0a:18:2f:7f:f7:35:b9:9a:58:d6:2a:2b:29:58: e4:2f:01:95:7d:60:84:62:9f:e8:35:53:ac:b2:13: 13:f6:29:fa:bf:e0:3a:e6:49:48:9a:e2:e2:d8:c3: 29:80:e8:c5:be:8f:8a:2f:a6:63:54:ef:93:a3:bf: 4d:60:dc:06:a2:fb:02:a4:f6:55:90:fe:78:2f:5e: 40:21:04:cd:75:1b:5c:d2:89:04:b4:80:16:a8:46: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BF:C2:8C:8D:85:C2:6D:70:EE:A1:F6:F2:80:F2:74:E3:EE:21:A9 X509v3 Authority Key Identifier: keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/323830343a333862383a3a2f33322d3430203d3e20323636343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:38b8::/32 Signature Algorithm: sha256WithRSAEncryption 74:58:65:f0:66:4b:a3:10:6f:9a:e5:6d:b0:af:2c:b0:81:c6: 5f:28:73:40:53:67:65:94:3e:a1:4c:ae:bd:49:37:04:b0:6a: 3c:ba:54:1e:69:b0:2c:f9:cc:f7:b0:63:91:00:79:83:0a:cb: 77:f9:df:26:bd:0c:6a:50:fd:83:f9:ad:7f:70:95:bd:85:06: cc:c5:14:91:0a:57:75:e6:1d:ac:9d:06:8e:33:51:58:9a:d2: 4b:3b:04:f2:33:ee:8a:7a:16:03:f3:21:50:a3:a7:a2:2c:01: 6f:2a:eb:d3:7b:0a:15:d6:72:1d:d1:a3:de:e1:06:b2:55:88: ae:99:86:46:1e:c3:f6:7f:4e:0f:b4:32:e7:09:83:52:14:d6: 23:9b:f7:57:c6:9b:31:fc:4b:a8:4d:b1:16:90:0f:e9:53:71: 6a:3c:f1:7e:46:65:0b:8d:fc:24:3b:62:6b:ea:b9:c7:c4:9a: a3:17:1b:0c:c8:ed:4b:f9:c2:7d:23:d0:78:e3:d8:55:f1:25: 6a:a2:38:f9:f9:47:3d:4b:9f:71:94:f2:f5:7a:4d:c2:f0:9e: d3:0d:e6:aa:7b:f5:4c:27:d8:01:af:76:99:75:93:67:c2:69: 6c:17:a2:85:99:57:c5:b9:c9:97:be:3a:8c:fc:09:cc:58:6d: ce:2d:01:41 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUWfHVHpABlq2lqeOlahmRuLfIu4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBEQUU4Q0REMzIwNjAzMjE4QjZCRTM3RDQ4NENEMEI0 OTJBOUU5NDAeFw0yNTExMjAyMDU1MjFaFw0yNjExMTkyMTAwMjFaMDMxMTAvBgNV BAMTKDQ0QkZDMjhDOEQ4NUMyNkQ3MEVFQTFGNkYyODBGMjc0RTNFRTIxQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAq6iymfolFbVm67iLxwKjjd0 yn646/SypLpXyj/fgoYPDFaEHYpOc8/qXvW2gR0I6e+NpWvYzZ0Qj8Z3R21SmCHO 1dM5hCcU81ejaY8Kev+QR0zSa2P1qiCOKZ+M6RHaydQLfBFJTUZmSZ/BXaQjRoBn JVA5GIfrmGb3JY6g2Lulv69Hfdg/hi3ACT9dphVBundh08zAgJzOt7vsKnX6XiSx mkQKGC9/9zW5mljWKispWOQvAZV9YIRin+g1U6yyExP2Kfq/4DrmSUia4uLYwymA 6MW+j4ovpmNU75Ojv01g3Aai+wKk9lWQ/ngvXkAhBM11G1zSiQS0gBaoRgflAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQURL/CjI2Fwm1w7qH28oDydOPuIakwHwYDVR0j BBgwFoAUoNrozdMgYDIYtr431ITNC0kqnpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmk1N2JwdDJLTGNyS2h3WUZvZlVKYnFnaTI2cTJEcWRqdUpWUldmWGRa UDcvMC9BMERBRThDREQzMjA2MDMyMThCNkJFMzdENDg0Q0QwQjQ5MkE5RTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwREFFOENERDMyMDYwMzIx OEI2QkUzN0Q0ODRDRDBCNDkyQTlFOTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JpNTdicHQyS0xjcktod1lGb2ZVSmJxZ2kyNnEyRHFkanVKVlJXZlhkWlA3LzAv MzIzODMwMzQzYTMzMzg2MjM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM2 MzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQ4uDANBgkqhkiG9w0BAQsFAAOCAQEAdFhl8GZL oxBvmuVtsK8ssIHGXyhzQFNnZZQ+oUyuvUk3BLBqPLpUHmmwLPnM97BjkQB5gwrL d/nfJr0MalD9g/mtf3CVvYUGzMUUkQpXdeYdrJ0GjjNRWJrSSzsE8jPuinoWA/Mh UKOnoiwBbyrr03sKFdZyHdGj3uEGslWIrpmGRh7D9n9OD7Qy5wmDUhTWI5v3V8ab MfxLqE2xFpAP6VNxajzxfkZlC438JDtia+q5x8SaoxcbDMjtS/nCfSPQeOPYVfEl aqI4+flHPUufcZTy9XpNwvCe0w3mqnv1TCfYAa92mXWTZ8JpbBeihZlXxbnJl746 jPwJzFhtzi0BQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:21 2025 by rpki-client