This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a3a2f33332d3333203d3e20323639343131.roa File: 323830343a363432633a3a2f33332d3333203d3e20323639343131.roa (raw, json) Hash identifier: JyB6Cm96d5FIRK8EZu50sXclPg9IguTKmCtdJc0uzNk= Subject key identifier: BE:8F:0F:0F:4E:2D:51:10:BD:A9:87:98:38:7D:0C:1E:A9:43:B2:13 Certificate issuer: /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Certificate serial: 3426F15DE8B7E28CCD97A2BA731A36B53C418EC3 Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a3a2f33332d3333203d3e20323639343131.roa Signing time: Wed 12 Nov 2025 02:08:53 +0000 ROA not before: Wed 12 Nov 2025 02:03:53 +0000 ROA not after: Wed 11 Nov 2026 02:08:53 +0000 asID: 269411 IP address blocks: 2804:642c::/33 maxlen: 33 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 34:26:f1:5d:e8:b7:e2:8c:cd:97:a2:ba:73:1a:36:b5:3c:41:8e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Validity Not Before: Nov 12 02:03:53 2025 GMT Not After : Nov 11 02:08:53 2026 GMT Subject: CN=BE8F0F0F4E2D5110BDA98798387D0C1EA943B213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:8a:cf:3d:71:7e:da:0c:e1:33:54:9f:8a: 49:61:11:8c:72:57:29:4f:a4:25:f7:b1:4e:9d:8e: 70:d1:d5:6f:11:d2:73:93:18:e7:53:20:8c:6c:53: 58:58:1f:11:72:a4:c8:8c:c0:2b:85:0a:6c:16:f6: d9:10:82:4f:b9:cb:c8:0d:ff:91:bb:c2:78:93:4e: 51:a7:00:6d:1f:17:42:19:48:64:ac:d1:a9:f5:c3: 09:d6:49:fe:15:02:09:1f:58:ff:00:10:a8:45:dc: 37:d1:59:b5:36:c1:9d:78:ff:e2:52:c0:44:40:aa: 1b:4a:7e:ff:1c:8c:16:30:74:58:94:36:06:e7:d5: bc:af:05:20:70:8a:8c:9d:3f:bd:7e:05:3b:32:85: 88:be:fb:c6:97:83:ad:76:e0:83:c1:cd:60:d1:a0: 6c:0d:60:71:77:9b:11:ab:14:00:2c:1e:85:3d:1b: bb:04:99:48:06:4a:f8:de:2b:d7:6e:24:93:e6:44: 49:48:09:b0:43:6a:42:61:cb:f5:d1:0f:60:c2:57: 34:2b:1f:93:8f:49:65:6c:44:b4:83:f1:0c:b2:6c: 21:3e:78:b5:28:c6:71:1e:37:cd:1c:59:1a:cc:34: 48:da:31:9a:eb:89:39:51:2b:e3:96:7c:03:5d:44: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8F:0F:0F:4E:2D:51:10:BD:A9:87:98:38:7D:0C:1E:A9:43:B2:13 X509v3 Authority Key Identifier: keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a3a2f33332d3333203d3e20323639343131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:642c::/33 Signature Algorithm: sha256WithRSAEncryption 06:8e:3a:98:2a:58:11:c4:c6:c2:ab:24:b6:9f:fe:02:b9:34: a2:25:33:7f:1b:1b:f3:57:30:ac:32:1b:fc:8a:83:c0:ef:32: ea:94:05:2c:78:76:3e:13:e3:64:58:1d:83:36:98:09:6f:2c: b0:8e:3c:f5:a4:7a:cb:56:72:4c:0d:a9:20:c2:e8:59:32:b4: a1:32:08:2c:8f:65:a0:35:f0:c3:b9:97:7e:c7:a3:b1:17:54: 43:8a:64:34:16:c8:b6:07:06:f6:27:5d:6f:17:a3:7c:f6:39: cf:59:1b:12:21:21:7c:2e:df:bf:23:38:3f:c4:5f:d8:d8:20: d9:02:31:95:e7:dd:fd:ce:db:d7:c0:81:aa:8b:ef:0e:a3:f1: 92:c7:b3:69:67:ca:df:c6:0e:c7:88:87:1c:1f:71:c5:fa:78: da:e1:9d:52:17:d6:44:9d:75:bf:69:ae:4c:90:12:4a:66:82: 75:be:43:97:60:4b:3f:c8:c5:c8:ce:8b:5b:7e:ff:6b:12:0c: e5:b9:7d:9a:31:f1:ec:52:48:30:50:aa:f8:16:5d:c0:4f:08: 53:97:87:63:55:81:9b:e2:31:8c:ce:a1:3d:ac:44:a9:b9:e4: 59:c2:81:cd:1a:5e:f3:6e:7b:75:b9:36:9b:6f:d8:10:d4:be: 5f:2b:dd:0a -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUNCbxXei34ozNl6K6cxo2tTxBjsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzMTBDQ0I1MkFEODQ1RkI4MEMxNjQ2QTQ1QUY2Q0I0 MjAzRTIyRTAeFw0yNTExMTIwMjAzNTNaFw0yNjExMTEwMjA4NTNaMDMxMTAvBgNV BAMTKEJFOEYwRjBGNEUyRDUxMTBCREE5ODc5ODM4N0QwQzFFQTk0M0IyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOKorPPXF+2gzhM1SfiklhEYxy VylPpCX3sU6djnDR1W8R0nOTGOdTIIxsU1hYHxFypMiMwCuFCmwW9tkQgk+5y8gN /5G7wniTTlGnAG0fF0IZSGSs0an1wwnWSf4VAgkfWP8AEKhF3DfRWbU2wZ14/+JS wERAqhtKfv8cjBYwdFiUNgbn1byvBSBwioydP71+BTsyhYi++8aXg6124IPBzWDR oGwNYHF3mxGrFAAsHoU9G7sEmUgGSvjeK9duJJPmRElICbBDakJhy/XRD2DCVzQr H5OPSWVsRLSD8QyybCE+eLUoxnEeN80cWRrMNEjaMZrriTlRK+OWfANdRBCvAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUvo8PD04tURC9qYeYOH0MHqlDshMwHwYDVR0j BBgwFoAU3DEMy1KthF+4DBZGpFr2y0ID4i4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR eEUvMi9EQzMxMENDQjUyQUQ4NDVGQjgwQzE2NDZBNDVBRjZDQjQyMDNFMjJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzEwQ0NCNTJBRDg0NUZC ODBDMTY0NkE0NUFGNkNCNDIwM0UyMkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzIv MzIzODMwMzQzYTM2MzQzMjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5 MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYHKARkLAAwDQYJKoZIhvcNAQELBQADggEBAAaOOpgq WBHExsKrJLaf/gK5NKIlM38bG/NXMKwyG/yKg8DvMuqUBSx4dj4T42RYHYM2mAlv LLCOPPWkestWckwNqSDC6FkytKEyCCyPZaA18MO5l37Ho7EXVEOKZDQWyLYHBvYn XW8Xo3z2Oc9ZGxIhIXwu378jOD/EX9jYINkCMZXn3f3O29fAgaqL7w6j8ZLHs2ln yt/GDseIhxwfccX6eNrhnVIX1kSddb9prkyQEkpmgnW+Q5dgSz/IxcjOi1t+/2sS DOW5fZox8exSSDBQqvgWXcBPCFOXh2NVgZviMYzOoT2sRKm55FnCgc0aXvNue3W5 Nptv2BDUvl8r3Qo= -----END CERTIFICATE-----Generated at Sat Dec 6 15:51:37 2025 by rpki-client