This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a3a2f33322d3332203d3e20323632373937.roa File: 323830343a3233633a3a2f33322d3332203d3e20323632373937.roa (raw, json) Hash identifier: SyU4hMnMhGTjSY7NZerhRNnytXcUDqvSMTR9IhX72aw= Subject key identifier: 6E:A7:39:A9:D8:84:90:31:C5:B9:6F:DE:57:59:CC:CF:D5:4E:02:42 Certificate issuer: /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B Certificate serial: 2DBEF8B4AC5F912F676D3EEBA6DEAA9D3843F12F Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a3a2f33322d3332203d3e20323632373937.roa Signing time: Thu 23 Oct 2025 14:13:13 +0000 ROA not before: Thu 23 Oct 2025 14:08:13 +0000 ROA not after: Thu 22 Oct 2026 14:13:13 +0000 asID: 262797 IP address blocks: 2804:23c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:be:f8:b4:ac:5f:91:2f:67:6d:3e:eb:a6:de:aa:9d:38:43:f1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B Validity Not Before: Oct 23 14:08:13 2025 GMT Not After : Oct 22 14:13:13 2026 GMT Subject: CN=6EA739A9D8849031C5B96FDE5759CCCFD54E0242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ad:dd:4d:72:cb:b8:de:03:7a:0a:88:5d:3e: 3b:42:c6:83:03:fe:86:87:ba:d6:dd:10:66:8f:c2: 8f:f3:71:46:0d:a4:7c:f5:78:4e:83:f7:9b:85:cd: e8:9d:96:f4:22:c3:27:24:76:85:6d:0b:c4:c1:86: f5:c0:69:c1:26:96:10:2e:ea:5a:5d:b6:ba:ce:30: 9a:b5:29:54:9c:d9:12:92:c1:60:17:2f:aa:43:d1: 8a:fa:f9:62:9f:ff:16:0b:81:8f:1d:d2:f5:80:f3: 72:11:5e:2f:c3:1d:18:b0:62:54:44:43:58:09:5b: 40:ee:ee:ca:03:7f:21:70:aa:f5:98:d9:80:96:3c: 8d:8c:fc:44:78:de:68:c2:df:a4:37:32:9c:fd:ff: 3b:2c:6b:97:65:71:d1:71:04:4a:70:44:e1:87:45: a8:d2:19:5f:89:a2:2b:cc:3f:18:bb:56:21:f7:be: eb:da:14:42:d4:7f:46:2f:35:0f:ca:d1:58:da:9f: 86:cd:3b:1d:67:3e:78:85:77:73:d8:d0:ae:90:e4: 23:68:33:b3:45:7c:4c:d1:a5:70:c1:bf:87:43:50: cf:28:26:a3:9c:d2:58:f4:8f:b2:bc:2b:53:a2:bf: 14:c8:ac:83:e3:91:28:5e:6f:a2:b7:f2:ab:c0:a3: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A7:39:A9:D8:84:90:31:C5:B9:6F:DE:57:59:CC:CF:D5:4E:02:42 X509v3 Authority Key Identifier: keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a3a2f33322d3332203d3e20323632373937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:23c::/32 Signature Algorithm: sha256WithRSAEncryption 0a:2f:14:f1:a4:54:36:e4:1e:b3:78:fd:d2:76:85:63:29:37: 67:45:dc:6e:7c:26:f2:e3:ee:69:6a:52:68:51:22:cb:48:f6: 62:9f:28:22:c2:58:1b:47:df:3b:2f:1d:e4:43:19:c9:e5:d9: bb:5c:3b:38:1d:69:f5:91:1b:eb:f7:05:e5:d7:fa:02:95:44: 35:3c:d9:37:42:53:33:2c:46:fd:3e:06:e3:9e:0f:23:00:5d: 88:38:c5:c1:90:66:65:42:46:32:35:56:27:c7:c8:8e:80:e6: d6:a5:9d:5e:3f:57:ab:e6:0d:51:08:42:7c:64:c2:ce:fb:58: 48:75:2b:5b:37:a1:7f:58:22:40:78:18:53:bf:73:cf:77:30: 1b:f8:9f:bd:39:60:92:32:d8:40:b6:23:c8:05:f2:93:e9:30: b4:41:71:59:c7:a8:2d:81:ef:8e:c8:02:51:20:09:97:18:a2: 59:c5:19:16:67:d2:6d:7d:e4:5d:12:10:e6:3c:22:a9:31:44: bf:da:cf:aa:40:bb:a7:8c:32:66:c8:fe:9c:3d:f6:1e:5c:aa: b7:c1:70:d9:ae:26:84:d9:d4:2e:a3:41:4a:ba:ae:ce:af:be: 01:8b:d7:79:c5:16:e2:cb:7c:45:10:53:68:80:62:31:a1:88: 46:ed:e2:e5 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIULb74tKxfkS9nbT7rpt6qnThD8S8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYyQ0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNC RTkwQzIwQjAeFw0yNTEwMjMxNDA4MTNaFw0yNjEwMjIxNDEzMTNaMDMxMTAvBgNV BAMTKDZFQTczOUE5RDg4NDkwMzFDNUI5NkZERTU3NTlDQ0NGRDU0RTAyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrd1Ncsu43gN6CohdPjtCxoMD /oaHutbdEGaPwo/zcUYNpHz1eE6D95uFzeidlvQiwyckdoVtC8TBhvXAacEmlhAu 6lpdtrrOMJq1KVSc2RKSwWAXL6pD0Yr6+WKf/xYLgY8d0vWA83IRXi/DHRiwYlRE Q1gJW0Du7soDfyFwqvWY2YCWPI2M/ER43mjC36Q3Mpz9/zssa5dlcdFxBEpwROGH RajSGV+JoivMPxi7ViH3vuvaFELUf0YvNQ/K0Vjan4bNOx1nPniFd3PY0K6Q5CNo M7NFfEzRpXDBv4dDUM8oJqOc0lj0j7K8K1OivxTIrIPjkSheb6K38qvAoyQhAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUbqc5qdiEkDHFuW/eV1nMz9VOAkIwHwYDVR0j BBgwFoAUpizaSuS1ytc7Boz2HS7oLL6QwgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO UFMvMi9BNjJDREE0QUU0QjVDQUQ3M0IwNjhDRjYxRDJFRTgyQ0JFOTBDMjBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MkNEQTRBRTRCNUNBRDcz QjA2OENGNjFEMkVFODJDQkU5MEMyMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIv MzIzODMwMzQzYTMyMzM2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM3 MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEAjwwDQYJKoZIhvcNAQELBQADggEBAAovFPGkVDbk HrN4/dJ2hWMpN2dF3G58JvLj7mlqUmhRIstI9mKfKCLCWBtH3zsvHeRDGcnl2btc OzgdafWRG+v3BeXX+gKVRDU82TdCUzMsRv0+BuOeDyMAXYg4xcGQZmVCRjI1VifH yI6A5talnV4/V6vmDVEIQnxkws77WEh1K1s3oX9YIkB4GFO/c893MBv4n705YJIy 2EC2I8gF8pPpMLRBcVnHqC2B747IAlEgCZcYolnFGRZn0m195F0SEOY8IqkxRL/a z6pAu6eMMmbI/pw99h5cqrfBcNmuJoTZ1C6jQUq6rs6vvgGL13nFFuLLfEUQU2iA YjGhiEbt4uU= -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:46 2025 by rpki-client