This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3334203d3e20323637313238.roa File: 323830343a343838633a3a2f33322d3334203d3e20323637313238.roa (raw, json) Hash identifier: cUYNifrK3rrFDUoC2Fzt7iekuy/6S45UGfm5rXWuMC4= Subject key identifier: E6:0F:46:9A:D2:0E:6A:67:0C:E0:3E:AE:C3:80:09:A4:70:FA:F7:2E Certificate issuer: /CN=6DF742314460043E383DDE058976EAE11908B136 Certificate serial: 4FE877F06B80383C0C5FF8855F057EC268883BAF Authority key identifier: 6D:F7:42:31:44:60:04:3E:38:3D:DE:05:89:76:EA:E1:19:08:B1:36 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF742314460043E383DDE058976EAE11908B136.cer Subject info access: rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3334203d3e20323637313238.roa Signing time: Mon 24 Nov 2025 13:25:10 +0000 ROA not before: Mon 24 Nov 2025 13:20:10 +0000 ROA not after: Mon 23 Nov 2026 13:25:10 +0000 asID: 267128 IP address blocks: 2804:488c::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/6DF742314460043E383DDE058976EAE11908B136.crl rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/6DF742314460043E383DDE058976EAE11908B136.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF742314460043E383DDE058976EAE11908B136.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e8:77:f0:6b:80:38:3c:0c:5f:f8:85:5f:05:7e:c2:68:88:3b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF742314460043E383DDE058976EAE11908B136 Validity Not Before: Nov 24 13:20:10 2025 GMT Not After : Nov 23 13:25:10 2026 GMT Subject: CN=E60F469AD20E6A670CE03EAEC38009A470FAF72E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:f9:0b:d5:fb:08:33:f2:22:34:60:da:b8: af:10:f8:ea:ff:bc:87:b4:4d:c3:dd:b5:4b:62:ab: 17:30:0f:ad:fa:a0:1c:4f:74:7a:01:ed:a4:be:a6: 8b:e4:31:6c:5f:00:ea:5e:10:16:a5:1a:92:4f:79: c0:ad:f4:ba:93:52:f3:a7:ff:d2:f2:7b:ef:c8:bc: d1:4a:99:aa:af:0c:ec:9d:d5:dc:9c:b3:41:11:bb: af:73:a6:e2:d8:da:f5:ea:38:c3:57:7f:a1:f4:9c: f0:e5:3f:96:b1:28:fd:9b:66:67:9f:da:a1:53:ad: f4:e5:d4:19:ff:d1:9b:c0:f1:ef:54:d9:6f:36:4d: 81:41:1c:d7:43:bf:6d:41:fb:0a:b0:75:70:96:11: 15:1f:6d:8a:c3:5a:43:54:bb:8c:34:cb:44:65:98: 3f:b4:3d:8b:27:67:6b:86:f5:5b:e7:fb:52:41:7c: 18:95:e4:ee:cc:f7:e5:17:78:a7:53:cb:69:5a:c0: 4e:6a:c0:4f:d4:c4:66:99:f4:6f:44:1e:c1:8c:c8: 09:27:d9:33:cf:be:83:d8:b8:a2:d3:e9:c2:a4:b3: e9:88:44:aa:48:2e:43:2c:fd:df:b2:f9:02:8e:2c: 47:1f:2b:6d:aa:66:1e:c5:cd:0c:0f:95:ae:67:0b: 89:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0F:46:9A:D2:0E:6A:67:0C:E0:3E:AE:C3:80:09:A4:70:FA:F7:2E X509v3 Authority Key Identifier: keyid:6D:F7:42:31:44:60:04:3E:38:3D:DE:05:89:76:EA:E1:19:08:B1:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/6DF742314460043E383DDE058976EAE11908B136.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF742314460043E383DDE058976EAE11908B136.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3334203d3e20323637313238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:488c::/32 Signature Algorithm: sha256WithRSAEncryption c0:a1:95:b8:dd:c4:54:d4:8f:a2:9f:f2:9a:ee:2a:94:c3:2a: 38:5b:ef:0a:60:dd:c3:92:dc:f8:d0:c2:40:3b:d3:d9:fc:7e: 03:93:e4:99:57:9c:6f:e1:c0:51:cf:83:df:56:68:5e:58:46: d1:6e:e4:3d:45:3a:c0:cf:85:7b:51:ec:7f:40:9b:31:32:99: 67:2e:c0:8a:d0:b9:a1:aa:88:4d:c5:3e:14:a3:5c:12:9e:37: b0:84:c3:36:7b:a0:c1:35:33:9f:1c:6f:c1:e9:a0:5a:ea:1f: c7:4b:4f:be:5d:f8:f5:14:f4:76:9a:24:e0:15:0f:c0:a5:21: a6:f0:38:6e:52:8a:be:bf:0b:11:81:50:23:3e:df:9a:dc:e8: 82:4c:ab:77:7a:8a:58:0d:76:89:42:cc:e5:6f:92:67:17:de: 61:2a:25:8d:4a:7d:ab:bd:fe:3a:d2:1a:36:d9:a0:f2:fc:30: 1e:61:3c:58:8e:e7:3a:d1:da:7d:2b:92:a1:3c:16:53:ba:18: 88:cc:ea:b3:6b:60:df:94:b7:91:12:a0:04:da:4a:1e:85:59: e5:2d:35:cd:8b:12:b9:80:cf:0a:39:42:de:1d:72:f6:95:b0: 6d:b1:fe:6c:a2:a7:5e:3c:3d:4c:af:25:cb:f8:89:a3:34:fa: df:98:1a:1e -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUT+h38GuAODwMX/iFXwV+wmiIO68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGNzQyMzE0NDYwMDQzRTM4M0RERTA1ODk3NkVBRTEx OTA4QjEzNjAeFw0yNTExMjQxMzIwMTBaFw0yNjExMjMxMzI1MTBaMDMxMTAvBgNV BAMTKEU2MEY0NjlBRDIwRTZBNjcwQ0UwM0VBRUMzODAwOUE0NzBGQUY3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sPkL1fsIM/IiNGDauK8Q+Or/ vIe0TcPdtUtiqxcwD636oBxPdHoB7aS+povkMWxfAOpeEBalGpJPecCt9LqTUvOn /9Lye+/IvNFKmaqvDOyd1dycs0ERu69zpuLY2vXqOMNXf6H0nPDlP5axKP2bZmef 2qFTrfTl1Bn/0ZvA8e9U2W82TYFBHNdDv21B+wqwdXCWERUfbYrDWkNUu4w0y0Rl mD+0PYsnZ2uG9Vvn+1JBfBiV5O7M9+UXeKdTy2lawE5qwE/UxGaZ9G9EHsGMyAkn 2TPPvoPYuKLT6cKks+mIRKpILkMs/d+y+QKOLEcfK22qZh7FzQwPla5nC4kbAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU5g9GmtIOamcM4D6uw4AJpHD69y4wHwYDVR0j BBgwFoAUbfdCMURgBD44Pd4FiXbq4RkIsTYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3pGbWdZSzJaVnRzV2g0d05ZUDVkSkt2b1hCeHpEOU5ybk52eEgyb1Ra ZmsvMC82REY3NDIzMTQ0NjAwNDNFMzgzRERFMDU4OTc2RUFFMTE5MDhCMTM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZERjc0MjMxNDQ2MDA0M0Uz ODNEREUwNTg5NzZFQUUxMTkwOEIxMzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0N6Rm1nWUsyWlZ0c1doNHdOWVA1ZEpLdm9YQnh6RDlOcm5OdnhIMm9UWmZrLzAv MzIzODMwMzQzYTM0MzgzODYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM3 MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARIjDANBgkqhkiG9w0BAQsFAAOCAQEAwKGVuN3E VNSPop/ymu4qlMMqOFvvCmDdw5Lc+NDCQDvT2fx+A5PkmVecb+HAUc+D31ZoXlhG 0W7kPUU6wM+Fe1Hsf0CbMTKZZy7AitC5oaqITcU+FKNcEp43sITDNnugwTUznxxv wemgWuofx0tPvl349RT0dpok4BUPwKUhpvA4blKKvr8LEYFQIz7fmtzogkyrd3qK WA12iULM5W+SZxfeYSoljUp9q73+OtIaNtmg8vwwHmE8WI7nOtHafSuSoTwWU7oY iMzqs2tg35S3kRKgBNpKHoVZ5S01zYsSuYDPCjlC3h1y9pWwbbH+bKKnXjw9TK8l y/iJozT635gaHg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:15 2025 by rpki-client