This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/323830343a3964633a3a2f33322d3332203d3e20323632393938.roa File: 323830343a3964633a3a2f33322d3332203d3e20323632393938.roa (raw, json) Hash identifier: bzzRVplRzXW60NTyOCB+K8geet/OkJXFRMgfhWt3u08= Subject key identifier: FB:4A:F9:7A:62:FB:E3:33:28:77:EB:D6:BC:99:EC:3A:5D:0A:9D:80 Certificate issuer: /CN=2431B5DDF8166029A0033562C55895BEC665B28A Certificate serial: 549CD8D73E0C0E0EA4E95C35AB98BDBF390DCEC1 Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer Subject info access: rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/323830343a3964633a3a2f33322d3332203d3e20323632393938.roa Signing time: Thu 06 Nov 2025 13:37:24 +0000 ROA not before: Thu 06 Nov 2025 13:32:24 +0000 ROA not after: Thu 05 Nov 2026 13:37:24 +0000 asID: 262998 IP address blocks: 2804:9dc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 13:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9c:d8:d7:3e:0c:0e:0e:a4:e9:5c:35:ab:98:bd:bf:39:0d:ce:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A Validity Not Before: Nov 6 13:32:24 2025 GMT Not After : Nov 5 13:37:24 2026 GMT Subject: CN=FB4AF97A62FBE3332877EBD6BC99EC3A5D0A9D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bb:fe:30:c5:85:73:ac:0c:fa:e4:65:0f:41: 29:9d:94:34:f9:60:32:e1:4e:a4:00:b9:c3:0d:b6: 62:d1:ad:bc:a3:30:17:0b:de:3e:4e:22:c9:6b:cf: fa:53:2c:a6:56:14:2c:8f:1a:f6:24:a3:e5:29:45: 46:17:52:5a:fd:6e:24:26:9a:ad:07:34:5f:6c:4a: bd:d7:65:07:ce:c4:8d:6d:8d:a6:0c:ee:cf:e9:a0: 8c:d8:58:4e:9f:47:18:88:95:00:e3:d5:90:d7:8f: 73:a3:ba:7d:22:ad:5f:f2:49:75:94:da:91:88:12: ae:f3:ec:6b:d6:7d:39:03:35:18:92:75:91:07:3c: 34:61:c4:4e:c8:c8:89:e3:68:ff:b5:c9:c9:df:79: 80:c9:ff:1e:13:60:35:ac:a9:15:e4:05:65:01:bd: 05:dd:bb:29:11:72:14:71:ac:a7:04:7b:67:8e:2a: 62:b2:95:6e:52:18:36:67:5b:3c:74:b0:a6:a8:79: 9c:a9:64:cf:cd:31:54:cb:1f:3a:36:ea:83:9e:a9: 12:de:2e:14:69:0b:b3:7a:af:39:9a:64:3d:ee:d5: a9:39:99:0e:e0:be:66:26:f6:66:7c:97:19:e7:5e: b9:a3:b5:69:78:6d:00:65:fa:96:2d:b6:9c:72:e8: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4A:F9:7A:62:FB:E3:33:28:77:EB:D6:BC:99:EC:3A:5D:0A:9D:80 X509v3 Authority Key Identifier: keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/323830343a3964633a3a2f33322d3332203d3e20323632393938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9dc::/32 Signature Algorithm: sha256WithRSAEncryption 65:21:fb:de:4c:9d:b4:5e:52:fb:11:eb:7c:99:32:7e:8a:ea: 3a:b3:aa:88:a5:83:a2:16:e2:46:82:eb:63:77:17:f4:4b:65: d8:da:65:52:4b:3e:97:af:55:bd:ab:69:68:95:54:76:04:2a: 18:b7:8c:76:8c:d2:8d:09:d3:b4:2b:13:a8:ba:5e:e6:1a:e8: cf:c7:5e:f6:c3:2f:0b:56:e2:be:9c:3b:b4:be:0d:58:b2:ca: 00:88:13:d7:50:c4:75:87:31:8e:1e:52:61:3d:79:fe:4f:23: 02:8a:b4:d8:c4:ae:31:df:9f:68:bd:2f:1f:56:d8:7f:c9:79: f5:35:e4:cd:92:41:d3:f8:2c:73:b2:c4:65:39:9f:4a:b4:1b: 36:91:cb:3f:00:5d:90:45:23:3f:40:ea:f1:30:6b:8f:e2:e7: 96:61:ca:3b:ad:1f:1e:f4:3f:1d:f3:60:95:ac:7d:54:e1:ec: 95:82:13:0a:6f:04:77:e0:0a:31:57:4d:65:4e:73:d5:03:5e: 2c:c2:cd:c5:b9:df:9a:17:57:78:16:78:5a:a0:e7:33:4a:d1: 18:bd:53:d4:db:08:75:31:0e:16:2e:b6:ae:0e:91:c6:b3:76: cc:7a:de:d4:84:62:63:de:31:70:2a:a5:bb:bf:2d:e1:b9:f2: cc:c8:51:44 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUVJzY1z4MDg6k6Vw1q5i9vzkNzsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMUI1RERGODE2NjAyOUEwMDMzNTYyQzU1ODk1QkVD NjY1QjI4QTAeFw0yNTExMDYxMzMyMjRaFw0yNjExMDUxMzM3MjRaMDMxMTAvBgNV BAMTKEZCNEFGOTdBNjJGQkUzMzMyODc3RUJENkJDOTlFQzNBNUQwQTlEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnu/4wxYVzrAz65GUPQSmdlDT5 YDLhTqQAucMNtmLRrbyjMBcL3j5OIslrz/pTLKZWFCyPGvYko+UpRUYXUlr9biQm mq0HNF9sSr3XZQfOxI1tjaYM7s/poIzYWE6fRxiIlQDj1ZDXj3Ojun0irV/ySXWU 2pGIEq7z7GvWfTkDNRiSdZEHPDRhxE7IyInjaP+1ycnfeYDJ/x4TYDWsqRXkBWUB vQXduykRchRxrKcEe2eOKmKylW5SGDZnWzx0sKaoeZypZM/NMVTLHzo26oOeqRLe LhRpC7N6rzmaZD3u1ak5mQ7gvmYm9mZ8lxnnXrmjtWl4bQBl+pYttpxy6NzFAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU+0r5emL74zMod+vWvJnsOl0KnYAwHwYDVR0j BBgwFoAUJDG13fgWYCmgAzVixViVvsZlsoowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3hnSGJYcXZ2U3I4Q0FKZWNEdDZhN0c3dFNqVzRKYlVmeEZDaXg1amtw UlUvMC8yNDMxQjVEREY4MTY2MDI5QTAwMzM1NjJDNTU4OTVCRUM2NjVCMjhBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MzFCNURERjgxNjYwMjlB MDAzMzU2MkM1NTg5NUJFQzY2NUIyOEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0N4Z0hiWHF2dlNyOENBSmVjRHQ2YTdHN3RTalc0SmJVZnhGQ2l4NWprcFJVLzAv MzIzODMwMzQzYTM5NjQ2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM5 MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgECdwwDQYJKoZIhvcNAQELBQADggEBAGUh+95MnbRe UvsR63yZMn6K6jqzqoilg6IW4kaC62N3F/RLZdjaZVJLPpevVb2raWiVVHYEKhi3 jHaM0o0J07QrE6i6XuYa6M/HXvbDLwtW4r6cO7S+DViyygCIE9dQxHWHMY4eUmE9 ef5PIwKKtNjErjHfn2i9Lx9W2H/JefU15M2SQdP4LHOyxGU5n0q0GzaRyz8AXZBF Iz9A6vEwa4/i55ZhyjutHx70Px3zYJWsfVTh7JWCEwpvBHfgCjFXTWVOc9UDXizC zcW535oXV3gWeFqg5zNK0Ri9U9TbCHUxDhYutq4Okcazdsx63tSEYmPeMXAqpbu/ LeG58szIUUQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:32:27 2025 by rpki-client