This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a3a2f33342d3334203d3e20323639343131.roa File: 323830343a363432633a3a2f33342d3334203d3e20323639343131.roa (raw, json) Hash identifier: Iys2adFPyH1J2AHIapYn2aSoKMJpROl/w8iv4QBbmIY= Subject key identifier: C0:45:98:E7:59:B4:3A:33:33:48:0D:D2:5C:7B:71:24:CE:07:4E:04 Certificate issuer: /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Certificate serial: 3CB6F193646440794967B7D9F6EA390F3B533B0A Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a3a2f33342d3334203d3e20323639343131.roa Signing time: Wed 12 Nov 2025 02:08:49 +0000 ROA not before: Wed 12 Nov 2025 02:03:49 +0000 ROA not after: Wed 11 Nov 2026 02:08:49 +0000 asID: 269411 IP address blocks: 2804:642c::/34 maxlen: 34 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b6:f1:93:64:64:40:79:49:67:b7:d9:f6:ea:39:0f:3b:53:3b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Validity Not Before: Nov 12 02:03:49 2025 GMT Not After : Nov 11 02:08:49 2026 GMT Subject: CN=C04598E759B43A3333480DD25C7B7124CE074E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:df:1a:0e:6c:24:50:9b:a0:0c:98:cf:30: 33:90:f6:3d:f7:01:fe:d9:a0:bf:3c:52:4f:00:b7: 85:7c:9d:a8:91:a3:29:d4:47:c7:93:15:9e:81:41: f7:20:6a:59:18:3f:c0:00:be:a3:5e:ee:ec:1e:29: a5:e6:1f:63:51:06:a4:a5:ac:82:0d:1b:36:b9:e5: 21:61:1c:14:db:80:c6:e4:9c:66:7e:6f:c4:d6:ef: 44:fd:10:8d:1c:85:40:61:89:30:02:cd:e4:56:a9: bd:1c:34:81:9a:97:a8:01:f5:d1:26:4a:ab:82:23: 2d:bd:de:ee:e2:05:ee:c7:f2:1a:83:a4:44:d4:19: 70:9c:63:c7:2f:64:52:84:06:19:76:0e:eb:b3:0d: ff:a4:33:66:a5:83:dc:ef:77:df:dc:2d:ee:3d:5b: d6:ca:f4:41:4a:a9:54:c3:0a:47:39:c8:ec:6a:be: da:b0:b2:16:e8:4a:b0:82:9d:07:c6:ae:35:92:cb: 7e:30:62:dd:4f:f7:d5:0a:38:97:80:48:4b:63:d3: 7b:ab:cc:11:b2:7b:6c:16:f6:53:49:bb:b9:19:45: 88:c1:27:0c:c9:f1:51:cb:81:05:45:26:38:47:4c: 2d:02:9b:fd:da:f4:0f:b7:d4:c0:02:07:df:fb:fa: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:45:98:E7:59:B4:3A:33:33:48:0D:D2:5C:7B:71:24:CE:07:4E:04 X509v3 Authority Key Identifier: keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/323830343a363432633a3a2f33342d3334203d3e20323639343131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:642c::/34 Signature Algorithm: sha256WithRSAEncryption 5a:46:69:14:62:47:e2:91:d2:63:91:19:51:e7:9e:9c:54:f6: a2:46:37:fd:45:7b:9b:65:dc:35:73:4e:21:25:ae:71:fb:73: 92:4f:3a:c6:b0:ba:4e:d6:70:70:13:7b:09:56:7a:cc:0d:5b: 5b:5f:0d:44:eb:34:24:53:05:53:13:c4:90:87:9a:35:c2:6a: 27:53:69:ea:c1:e2:18:e7:26:65:8c:d2:89:92:9c:1b:fd:9f: e1:77:a0:9c:e0:a5:34:59:09:20:54:c2:fc:77:c0:08:39:e0: b0:7e:9a:28:e9:fb:9d:60:71:e3:4d:1a:5f:3b:bd:78:ee:63: b9:8e:20:a0:7a:ac:7a:26:81:60:f6:4f:e4:4c:f4:ad:0f:4e: 98:82:0a:3a:9d:89:9e:1a:12:a2:94:1d:d4:d5:ee:3c:02:4f: bd:34:88:a2:4b:a3:21:ab:cd:3c:79:ae:17:70:cf:63:cd:9a: 88:25:55:58:7d:0b:b8:3d:b9:13:b6:57:a8:11:4a:f4:34:11: a2:6d:5b:de:70:e2:43:f2:a7:40:2d:cb:a7:f9:20:01:64:b8: e4:3a:a9:a1:4e:f6:1d:24:ce:f0:21:e0:95:cb:b7:bd:d5:3f: d5:39:df:7d:35:fc:81:1a:45:1e:f2:37:8a:84:99:99:6e:14: 5d:b4:71:d8 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUPLbxk2RkQHlJZ7fZ9uo5DztTOwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzMTBDQ0I1MkFEODQ1RkI4MEMxNjQ2QTQ1QUY2Q0I0 MjAzRTIyRTAeFw0yNTExMTIwMjAzNDlaFw0yNjExMTEwMjA4NDlaMDMxMTAvBgNV BAMTKEMwNDU5OEU3NTlCNDNBMzMzMzQ4MEREMjVDN0I3MTI0Q0UwNzRFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVd8aDmwkUJugDJjPMDOQ9j33 Af7ZoL88Uk8At4V8naiRoynUR8eTFZ6BQfcgalkYP8AAvqNe7uweKaXmH2NRBqSl rIINGza55SFhHBTbgMbknGZ+b8TW70T9EI0chUBhiTACzeRWqb0cNIGal6gB9dEm SquCIy293u7iBe7H8hqDpETUGXCcY8cvZFKEBhl2DuuzDf+kM2alg9zvd9/cLe49 W9bK9EFKqVTDCkc5yOxqvtqwshboSrCCnQfGrjWSy34wYt1P99UKOJeASEtj03ur zBGye2wW9lNJu7kZRYjBJwzJ8VHLgQVFJjhHTC0Cm/3a9A+31MACB9/7+vpvAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUwEWY51m0OjMzSA3SXHtxJM4HTgQwHwYDVR0j BBgwFoAU3DEMy1KthF+4DBZGpFr2y0ID4i4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR eEUvMi9EQzMxMENDQjUyQUQ4NDVGQjgwQzE2NDZBNDVBRjZDQjQyMDNFMjJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzEwQ0NCNTJBRDg0NUZC ODBDMTY0NkE0NUFGNkNCNDIwM0UyMkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzIv MzIzODMwMzQzYTM2MzQzMjYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5 MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYGKARkLAAwDQYJKoZIhvcNAQELBQADggEBAFpGaRRi R+KR0mORGVHnnpxU9qJGN/1Fe5tl3DVzTiElrnH7c5JPOsawuk7WcHATewlWeswN W1tfDUTrNCRTBVMTxJCHmjXCaidTaerB4hjnJmWM0omSnBv9n+F3oJzgpTRZCSBU wvx3wAg54LB+mijp+51gceNNGl87vXjuY7mOIKB6rHomgWD2T+RM9K0PTpiCCjqd iZ4aEqKUHdTV7jwCT700iKJLoyGrzTx5rhdwz2PNmoglVVh9C7g9uRO2V6gRSvQ0 EaJtW95w4kPyp0Aty6f5IAFkuOQ6qaFO9h0kzvAh4JXLt73VP9U53301/IEaRR7y N4qEmZluFF20cdg= -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:04 2025 by rpki-client