This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a3a2f33322d3332203d3e20323639343131.roa File: 323830343a363432633a3a2f33322d3332203d3e20323639343131.roa (raw, json) Hash identifier: +Fol06XfBtjGhA4pWpJacweauMtW5EK/tU1cNt/fg8Y= Subject key identifier: 86:7E:6D:C3:F0:34:97:EB:D9:08:4C:7A:CA:0E:1D:06:4A:21:9B:B5 Certificate issuer: /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Certificate serial: 427019F5E9E37A58F0575FD9EA20D0097ECD0D10 Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a3a2f33322d3332203d3e20323639343131.roa Signing time: Wed 12 Nov 2025 02:08:57 +0000 ROA not before: Wed 12 Nov 2025 02:03:57 +0000 ROA not after: Wed 11 Nov 2026 02:08:57 +0000 asID: 269411 IP address blocks: 2804:642c::/32 maxlen: 32 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 42:70:19:f5:e9:e3:7a:58:f0:57:5f:d9:ea:20:d0:09:7e:cd:0d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Validity Not Before: Nov 12 02:03:57 2025 GMT Not After : Nov 11 02:08:57 2026 GMT Subject: CN=867E6DC3F03497EBD9084C7ACA0E1D064A219BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:75:7e:ab:bb:9c:d7:49:3a:61:ab:ff:43:b1: fd:70:3c:89:c1:68:11:d3:18:42:6b:95:04:1e:91: e3:9f:5a:64:ed:5c:20:b1:39:07:0c:f7:90:3b:b2: 62:8a:76:be:22:e4:c0:72:8f:e6:5f:1f:0b:2b:9b: 8f:9e:79:4f:82:d2:bb:4b:05:1d:c6:c1:1e:21:a1: e6:75:90:33:13:ba:2b:9a:0e:ae:a3:b5:72:4f:d7: e3:6a:ff:05:81:f1:84:fe:13:bf:cf:85:f9:44:b9: 4d:10:ca:a8:5f:f3:fc:6c:5d:e1:89:ae:5e:1a:40: d8:15:ea:21:9e:07:ed:af:32:1e:ff:77:a7:6b:37: 3e:ae:30:18:20:b0:10:e3:03:bb:7e:2b:ed:53:ab: 30:a0:a7:fd:69:43:6c:e9:f9:bd:46:be:a2:0e:f6: 6f:be:76:6f:d3:1b:6a:50:d9:a9:6b:21:b5:9d:32: 0c:a5:51:1a:fc:31:8a:c3:83:c2:f0:41:1c:66:c7: a1:89:a9:6c:2e:12:b9:82:86:59:fc:12:d9:af:3b: 15:fb:d5:79:a3:46:22:73:80:83:a6:ac:ea:50:93: fb:61:00:02:00:28:30:f5:04:2a:8e:97:d6:77:95: d9:9c:60:e2:bd:b1:5f:20:0f:88:6a:30:ce:1b:2d: 71:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7E:6D:C3:F0:34:97:EB:D9:08:4C:7A:CA:0E:1D:06:4A:21:9B:B5 X509v3 Authority Key Identifier: keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a3a2f33322d3332203d3e20323639343131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:642c::/32 Signature Algorithm: sha256WithRSAEncryption a6:57:22:a2:ab:a1:78:51:e7:a9:a3:56:38:31:b5:4d:8d:24: ed:bc:df:2b:c4:0d:08:3a:19:d0:78:8c:db:c9:e6:86:66:68: 63:3b:e0:c7:2a:27:25:5a:6f:40:a0:2b:b5:cf:ca:b6:6c:69: 9b:02:c6:86:0a:c3:8c:ac:6b:20:92:85:03:39:7a:e6:b9:08: 08:50:7f:91:e2:45:95:97:af:ca:f6:16:c4:0e:55:82:1a:9f: 87:b3:c6:3b:b3:11:76:96:61:99:03:f0:a7:82:13:7b:13:4e: 96:3c:5b:24:e8:ed:bf:40:15:72:a3:bb:04:84:dc:17:8f:98: ed:8c:c3:55:b7:5f:55:8f:8c:36:b1:a4:52:33:fa:dc:ae:c8: 9d:34:ec:6f:b4:07:74:fd:77:e2:43:9a:fc:ae:4c:e3:ad:ab: 3d:4e:0e:ce:d8:91:99:c3:46:01:5f:6f:f2:db:65:63:71:5e: bc:f1:44:63:82:4e:f3:26:63:12:2f:5c:48:cd:e6:b6:cd:11: 07:d5:0e:eb:89:31:45:ba:b8:0a:a8:58:d6:61:d3:a4:e1:cb: 61:d9:9a:4e:02:8d:48:eb:b1:80:ae:c9:b1:66:30:ea:d9:37: 2a:e7:a4:ae:ea:16:0b:6b:69:f9:a7:db:d1:a9:d2:52:a4:27: 35:a5:ac:88 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUQnAZ9enjeljwV1/Z6iDQCX7NDRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzMTBDQ0I1MkFEODQ1RkI4MEMxNjQ2QTQ1QUY2Q0I0 MjAzRTIyRTAeFw0yNTExMTIwMjAzNTdaFw0yNjExMTEwMjA4NTdaMDMxMTAvBgNV BAMTKDg2N0U2REMzRjAzNDk3RUJEOTA4NEM3QUNBMEUxRDA2NEEyMTlCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZdX6ru5zXSTphq/9Dsf1wPInB aBHTGEJrlQQekeOfWmTtXCCxOQcM95A7smKKdr4i5MByj+ZfHwsrm4+eeU+C0rtL BR3GwR4hoeZ1kDMTuiuaDq6jtXJP1+Nq/wWB8YT+E7/PhflEuU0Qyqhf8/xsXeGJ rl4aQNgV6iGeB+2vMh7/d6drNz6uMBggsBDjA7t+K+1TqzCgp/1pQ2zp+b1GvqIO 9m++dm/TG2pQ2alrIbWdMgylURr8MYrDg8LwQRxmx6GJqWwuErmChln8EtmvOxX7 1XmjRiJzgIOmrOpQk/thAAIAKDD1BCqOl9Z3ldmcYOK9sV8gD4hqMM4bLXFJAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUhn5tw/A0l+vZCEx6yg4dBkohm7UwHwYDVR0j BBgwFoAU3DEMy1KthF+4DBZGpFr2y0ID4i4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR eEUvMi9EQzMxMENDQjUyQUQ4NDVGQjgwQzE2NDZBNDVBRjZDQjQyMDNFMjJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzEwQ0NCNTJBRDg0NUZC ODBDMTY0NkE0NUFGNkNCNDIwM0UyMkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzIv MzIzODMwMzQzYTM2MzQzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5 MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARkLDANBgkqhkiG9w0BAQsFAAOCAQEAplcioquh eFHnqaNWODG1TY0k7bzfK8QNCDoZ0HiM28nmhmZoYzvgxyonJVpvQKArtc/Ktmxp mwLGhgrDjKxrIJKFAzl65rkICFB/keJFlZevyvYWxA5Vghqfh7PGO7MRdpZhmQPw p4ITexNOljxbJOjtv0AVcqO7BITcF4+Y7YzDVbdfVY+MNrGkUjP63K7InTTsb7QH dP134kOa/K5M462rPU4OztiRmcNGAV9v8ttlY3FevPFEY4JO8yZjEi9cSM3mts0R B9UO64kxRbq4CqhY1mHTpOHLYdmaTgKNSOuxgK7JsWYw6tk3KuekruoWC2tp+afb 0anSUqQnNaWsiA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:51:52 2025 by rpki-client