This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/323830343a333164383a3a2f33322d3438203d3e20323635303430.roa File: 323830343a333164383a3a2f33322d3438203d3e20323635303430.roa (raw, json) Hash identifier: d463inaSqi8cEP0H22wM2q7jfmBx4foWzgca0Odb8wc= Subject key identifier: 0B:09:69:F0:6D:14:B1:C8:0F:02:2B:D5:92:BB:19:CE:EA:D3:87:46 Certificate issuer: /CN=74B4D9CCACE5EBC39D44C9D28083DE584050B06A Certificate serial: 0A22B680D4AE5567849BDD9FA1C0C0404B053505 Authority key identifier: 74:B4:D9:CC:AC:E5:EB:C3:9D:44:C9:D2:80:83:DE:58:40:50:B0:6A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74B4D9CCACE5EBC39D44C9D28083DE584050B06A.cer Subject info access: rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/323830343a333164383a3a2f33322d3438203d3e20323635303430.roa Signing time: Wed 12 Nov 2025 12:57:36 +0000 ROA not before: Wed 12 Nov 2025 12:52:36 +0000 ROA not after: Wed 11 Nov 2026 12:57:36 +0000 asID: 265040 IP address blocks: 2804:31d8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/74B4D9CCACE5EBC39D44C9D28083DE584050B06A.crl rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/74B4D9CCACE5EBC39D44C9D28083DE584050B06A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74B4D9CCACE5EBC39D44C9D28083DE584050B06A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:22:b6:80:d4:ae:55:67:84:9b:dd:9f:a1:c0:c0:40:4b:05:35:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74B4D9CCACE5EBC39D44C9D28083DE584050B06A Validity Not Before: Nov 12 12:52:36 2025 GMT Not After : Nov 11 12:57:36 2026 GMT Subject: CN=0B0969F06D14B1C80F022BD592BB19CEEAD38746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:69:5e:91:0a:27:e3:d0:18:57:3c:f7:85: ae:9e:95:b9:e6:26:9c:05:08:72:b0:1e:d9:b7:11: 15:c3:a8:84:87:31:00:6b:d3:b5:e3:e7:cf:84:9c: 7d:56:ee:b1:bc:d4:be:72:95:88:ae:37:fe:b3:8c: c9:2a:46:3b:4a:2e:80:e4:0e:8a:aa:c7:f9:cb:72: 23:f9:51:16:11:53:c4:8c:32:c4:89:a9:d2:62:71: 03:86:15:04:41:41:8f:44:85:13:fa:74:bf:f5:5f: 5c:9d:b9:ee:30:db:70:7d:47:2b:65:60:84:3e:c9: 18:17:bf:23:63:9d:11:b4:1a:f8:82:b9:64:26:fd: 37:b2:58:47:02:a4:fd:28:d3:9a:1f:31:0c:54:e2: 89:31:c8:91:cf:62:37:42:47:eb:37:88:70:00:e7: 29:14:e2:06:bb:7e:b7:4f:d9:73:b3:cc:00:c4:03: fa:7b:bb:1c:e6:10:3d:d5:e7:76:c9:f3:77:48:1a: 27:50:a8:d8:db:83:cd:da:c5:e5:c8:1e:8a:64:ec: 90:6a:88:91:ef:f6:46:70:3d:b4:51:b2:40:c2:83: bf:d2:d8:ea:f0:28:df:a9:e2:61:51:4f:2a:77:99: dd:8f:7e:93:77:96:36:af:11:5b:f7:98:46:d8:96: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:09:69:F0:6D:14:B1:C8:0F:02:2B:D5:92:BB:19:CE:EA:D3:87:46 X509v3 Authority Key Identifier: keyid:74:B4:D9:CC:AC:E5:EB:C3:9D:44:C9:D2:80:83:DE:58:40:50:B0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/74B4D9CCACE5EBC39D44C9D28083DE584050B06A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74B4D9CCACE5EBC39D44C9D28083DE584050B06A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/323830343a333164383a3a2f33322d3438203d3e20323635303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:31d8::/32 Signature Algorithm: sha256WithRSAEncryption 42:ad:5a:65:68:05:c2:73:6e:88:50:35:d3:66:1c:e4:55:67: 52:c7:89:95:aa:ba:b5:f6:24:54:71:b6:ed:3b:4d:2e:f1:85: 3d:44:7e:9a:15:f7:e1:76:4d:bc:67:39:09:49:c2:08:f7:7c: db:5f:82:78:36:ed:76:89:86:e3:b0:7d:ef:0f:b3:fc:17:42: f2:2d:b3:62:9d:9d:a0:35:35:db:a0:60:b9:9f:99:2a:7d:dc: 2d:7c:3d:ed:df:24:5c:20:a7:47:79:cb:09:45:ef:d9:f5:6b: 2d:cd:ad:9d:6b:48:70:24:da:23:1e:85:0c:94:ac:01:c0:5e: 22:e4:f5:3d:a3:56:43:7c:ec:1e:dd:c8:9b:46:5c:4c:d9:71: 99:a0:b4:07:1b:b2:82:ea:32:e9:c0:5c:8d:d5:ea:f5:a1:1b: ae:83:ac:f5:47:bf:0f:af:c9:41:32:1b:71:f8:60:7c:06:f5: 99:77:7b:b9:de:7a:0c:76:ff:de:c2:67:ba:4e:6c:9f:4e:14: 1c:50:8f:6e:a1:5e:89:e9:56:4e:eb:1f:3d:f7:38:c5:4e:1b: 38:5b:53:9b:45:04:ff:00:25:0b:07:06:ac:de:4e:c1:5b:86: 1b:6f:a6:92:46:ea:4d:dc:0a:1f:c1:e5:d7:70:18:fc:76:1d: c9:6a:0e:e2 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUCiK2gNSuVWeEm92focDAQEsFNQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRCNEQ5Q0NBQ0U1RUJDMzlENDRDOUQyODA4M0RFNTg0 MDUwQjA2QTAeFw0yNTExMTIxMjUyMzZaFw0yNjExMTExMjU3MzZaMDMxMTAvBgNV BAMTKDBCMDk2OUYwNkQxNEIxQzgwRjAyMkJENTkyQkIxOUNFRUFEMzg3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtWlekQon49AYVzz3ha6elbnm JpwFCHKwHtm3ERXDqISHMQBr07Xj58+EnH1W7rG81L5ylYiuN/6zjMkqRjtKLoDk Doqqx/nLciP5URYRU8SMMsSJqdJicQOGFQRBQY9EhRP6dL/1X1ydue4w23B9Rytl YIQ+yRgXvyNjnRG0GviCuWQm/TeyWEcCpP0o05ofMQxU4okxyJHPYjdCR+s3iHAA 5ykU4ga7frdP2XOzzADEA/p7uxzmED3V53bJ83dIGidQqNjbg83axeXIHopk7JBq iJHv9kZwPbRRskDCg7/S2OrwKN+p4mFRTyp3md2PfpN3ljavEVv3mEbYluYFAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUCwlp8G0UscgPAivVkrsZzurTh0YwHwYDVR0j BBgwFoAUdLTZzKzl68OdRMnSgIPeWEBQsGowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzRtUWlrVHB1Wks5akFuU21Td3N6QzVvRVNIYmZIVUxTSGNjWlgxeGZz TDQvMC83NEI0RDlDQ0FDRTVFQkMzOUQ0NEM5RDI4MDgzREU1ODQwNTBCMDZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0QjREOUNDQUNFNUVCQzM5 RDQ0QzlEMjgwODNERTU4NDA1MEIwNkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M0bVFpa1RwdVpLOWpBblNtU3dzekM1b0VTSGJmSFVMU0hjY1pYMXhmc0w0LzAv MzIzODMwMzQzYTMzMzE2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1 MzAzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQx2DANBgkqhkiG9w0BAQsFAAOCAQEAQq1aZWgF wnNuiFA102Yc5FVnUseJlaq6tfYkVHG27TtNLvGFPUR+mhX34XZNvGc5CUnCCPd8 21+CeDbtdomG47B97w+z/BdC8i2zYp2doDU126BguZ+ZKn3cLXw97d8kXCCnR3nL CUXv2fVrLc2tnWtIcCTaIx6FDJSsAcBeIuT1PaNWQ3zsHt3Im0ZcTNlxmaC0Bxuy guoy6cBcjdXq9aEbroOs9Ue/D6/JQTIbcfhgfAb1mXd7ud56DHb/3sJnuk5sn04U HFCPbqFeielWTusfPfc4xU4bOFtTm0UE/wAlCwcGrN5OwVuGG2+mkkbqTdwKH8Hl 13AY/HYdyWoO4g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:55:34 2025 by rpki-client