This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a643030303a3a2f34332d3433203d3e20323633363431.roa File: 323830343a313039343a643030303a3a2f34332d3433203d3e20323633363431.roa (raw, json) Hash identifier: mM63ElPuIs9zSnlcOiFGACUq/0/TbzlbuaApqau32Wo= Subject key identifier: 50:DC:7D:27:37:B4:DE:BB:CE:0F:61:0C:1E:21:E5:BD:8E:13:56:3E Certificate issuer: /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Certificate serial: 5A20DB031EF611A4A95604FD65BF614C29582E97 Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a643030303a3a2f34332d3433203d3e20323633363431.roa Signing time: Thu 20 Nov 2025 16:07:30 +0000 ROA not before: Thu 20 Nov 2025 16:02:30 +0000 ROA not after: Thu 19 Nov 2026 16:07:30 +0000 asID: 263641 IP address blocks: 2804:1094:d000::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 22:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:20:db:03:1e:f6:11:a4:a9:56:04:fd:65:bf:61:4c:29:58:2e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F Validity Not Before: Nov 20 16:02:30 2025 GMT Not After : Nov 19 16:07:30 2026 GMT Subject: CN=50DC7D2737B4DEBBCE0F610C1E21E5BD8E13563E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:a1:8d:7d:c8:fc:84:8c:94:a7:10:f4:d0: 36:85:bc:be:b6:25:6b:25:10:7b:b0:ed:d9:32:0b: e5:8d:09:9f:ae:67:10:5a:06:20:58:11:a0:74:4f: 9a:ce:00:98:de:dc:11:61:09:c9:26:2b:18:ac:bf: a5:19:d0:7d:b0:cc:ae:ec:9a:f7:79:b7:b8:34:f5: 50:51:b2:21:59:87:f7:6b:16:18:33:b9:0a:7d:51: 97:e8:2e:6c:32:bc:2e:3f:50:6d:28:c3:e6:93:3e: ed:4d:d2:53:b9:bf:e6:e2:93:60:25:7b:38:0d:4b: cf:1b:91:0f:a0:54:21:77:69:49:ae:46:72:de:99: 30:0b:f1:5b:d8:8b:11:eb:7b:bd:98:5a:53:c8:08: 08:39:1e:01:ec:cb:d4:e2:a8:5e:65:4b:7d:bd:d8: 78:bd:77:89:c1:96:3a:72:e2:a9:50:67:51:bb:1d: 2d:ae:d9:e8:c9:84:5a:7b:35:d4:7b:7d:94:75:77: cf:71:ba:1c:c4:0a:e9:bd:17:db:19:66:4a:42:1b: bf:5c:05:b1:a7:25:06:ee:1d:0c:fe:02:41:61:32: fe:98:87:fb:75:9e:23:06:d4:85:e1:07:4c:b3:42: 75:75:31:55:a4:89:fe:06:52:dc:27:5b:46:94:2f: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DC:7D:27:37:B4:DE:BB:CE:0F:61:0C:1E:21:E5:BD:8E:13:56:3E X509v3 Authority Key Identifier: keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a643030303a3a2f34332d3433203d3e20323633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1094:d000::/43 Signature Algorithm: sha256WithRSAEncryption 6d:a5:d5:ca:8c:25:14:05:9b:66:1f:e5:96:17:c4:c8:75:64: 1d:63:80:38:87:63:da:9b:bc:3c:81:2c:f4:6a:34:7a:8c:d5: de:ca:5a:dc:90:17:45:3f:d6:2d:25:94:bc:22:e3:50:25:77: 77:d5:e1:03:49:ae:bf:1e:b7:b7:3e:a2:e3:65:2e:15:2b:1f: 90:c5:a7:9b:54:69:f4:c2:10:e6:89:15:c8:76:c1:d6:e4:d3: ce:0d:6c:c7:6b:4a:fb:54:a0:ed:73:2c:0c:da:06:ae:c8:04: d1:40:a2:1c:95:a7:a5:b8:11:e9:45:96:1a:df:4b:7f:de:78: 57:4c:42:96:ea:5f:ba:5f:f5:af:bb:53:88:2b:28:91:47:e6: f9:f0:7e:43:c7:d2:ae:4c:43:ff:33:86:cc:1b:e3:40:96:58: f4:1a:f6:76:f3:cb:38:81:90:eb:39:0c:ca:3f:f3:76:bb:35: d7:89:8e:38:3f:39:ac:4c:1b:c4:3f:34:e1:66:23:60:d8:e7: 3c:27:44:5e:fb:5e:86:4c:d9:b6:10:a3:81:a5:b5:6b:7e:6c: 0f:e1:3a:f3:da:1b:75:3e:34:50:f6:51:9b:09:63:87:bd:2f: 48:56:d9:d1:c6:1c:12:3c:a7:6e:92:07:01:dd:82:c7:a6:47: c4:a1:f4:d8 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUWiDbAx72EaSpVgT9Zb9hTClYLpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhEMkQzRDdDMkY3QTczRjhENUQyMkJDNTMwRDAyRjhB MzY0NDYxRjAeFw0yNTExMjAxNjAyMzBaFw0yNjExMTkxNjA3MzBaMDMxMTAvBgNV BAMTKDUwREM3RDI3MzdCNERFQkJDRTBGNjEwQzFFMjFFNUJEOEUxMzU2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBraGNfcj8hIyUpxD00DaFvL62 JWslEHuw7dkyC+WNCZ+uZxBaBiBYEaB0T5rOAJje3BFhCckmKxisv6UZ0H2wzK7s mvd5t7g09VBRsiFZh/drFhgzuQp9UZfoLmwyvC4/UG0ow+aTPu1N0lO5v+bik2Al ezgNS88bkQ+gVCF3aUmuRnLemTAL8VvYixHre72YWlPICAg5HgHsy9TiqF5lS329 2Hi9d4nBljpy4qlQZ1G7HS2u2ejJhFp7NdR7fZR1d89xuhzECum9F9sZZkpCG79c BbGnJQbuHQz+AkFhMv6Yh/t1niMG1IXhB0yzQnV1MVWkif4GUtwnW0aULzmtAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUUNx9Jze03rvOD2EMHiHlvY4TVj4wHwYDVR0j BBgwFoAUaNLT18L3pz+NXSK8Uw0C+KNkRh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm a2EvMC82OEQyRDNEN0MyRjdBNzNGOEQ1RDIyQkM1MzBEMDJGOEEzNjQ0NjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RDJEM0Q3QzJGN0E3M0Y4 RDVEMjJCQzUzMEQwMkY4QTM2NDQ2MUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv MzIzODMwMzQzYTMxMzAzOTM0M2E2NDMwMzAzMDNhM2EyZjM0MzMyZDM0MzMyMDNk M2UyMDMyMzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSgEEJTQADANBgkqhkiG9w0BAQsF AAOCAQEAbaXVyowlFAWbZh/llhfEyHVkHWOAOIdj2pu8PIEs9Go0eozV3spa3JAX RT/WLSWUvCLjUCV3d9XhA0muvx63tz6i42UuFSsfkMWnm1Rp9MIQ5okVyHbB1uTT zg1sx2tK+1Sg7XMsDNoGrsgE0UCiHJWnpbgR6UWWGt9Lf954V0xClupful/1r7tT iCsokUfm+fB+Q8fSrkxD/zOGzBvjQJZY9Br2dvPLOIGQ6zkMyj/zdrs114mOOD85 rEwbxD804WYjYNjnPCdEXvtehkzZthCjgaW1a35sD+E689obdT40UPZRmwljh70v SFbZ0cYcEjynbpIHAd2Cx6ZHxKH02A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:26:24 2025 by rpki-client