This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/323830343a373865633a313030303a3a2f33362d3336203d3e20323731323734.roa File: 323830343a373865633a313030303a3a2f33362d3336203d3e20323731323734.roa (raw, json) Hash identifier: w/ttojJgIZcqEiQAlXRIgGEwx/SyE+eV3XcDR+wm3Ec= Subject key identifier: 1F:C7:34:B0:F9:93:3A:0D:81:F1:2C:67:17:34:0A:C4:C9:8F:E5:2E Certificate issuer: /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Certificate serial: 083D4C48E03914DF603DAAA1AF013E146388F076 Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject info access: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/323830343a373865633a313030303a3a2f33362d3336203d3e20323731323734.roa Signing time: Thu 11 Dec 2025 12:56:21 +0000 ROA not before: Thu 11 Dec 2025 12:51:21 +0000 ROA not after: Thu 10 Dec 2026 12:56:21 +0000 asID: 271274 IP address blocks: 2804:78ec:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 02:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3d:4c:48:e0:39:14:df:60:3d:aa:a1:af:01:3e:14:63:88:f0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478 Validity Not Before: Dec 11 12:51:21 2025 GMT Not After : Dec 10 12:56:21 2026 GMT Subject: CN=1FC734B0F9933A0D81F12C6717340AC4C98FE52E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:11:db:2e:7d:e4:8d:3a:e4:83:10:f4:74: 63:6f:10:26:32:ed:93:82:09:40:80:24:62:ec:ee: 06:a2:8b:4e:21:13:5a:8a:9f:98:7a:f3:74:e4:59: 94:5a:32:c9:f2:1f:0f:8b:96:34:5f:cb:c7:fe:a7: d7:82:4a:ed:7e:74:92:34:a2:32:6f:2d:50:60:02: e8:0f:06:6c:b6:8c:cf:cc:14:31:3c:b4:38:ea:71: ef:a9:e8:be:1f:1a:21:37:ff:68:21:6e:80:48:83: 44:48:01:b8:79:77:1a:d2:d2:23:99:d6:52:19:36: c0:ef:ed:39:4f:f6:87:aa:1a:49:36:bc:80:4f:c3: d7:4a:03:2c:a5:22:bb:2c:ba:06:93:56:38:cf:39: 05:e3:82:af:9d:5f:a4:8c:95:e5:ef:fa:b3:6a:7e: 88:19:2e:7a:1a:db:3e:02:ad:99:71:8b:90:34:da: 6c:e2:34:d7:7e:ac:f3:4a:0a:ad:12:f9:ba:9e:70: 67:e9:03:81:5f:a5:40:c6:82:29:e9:42:ee:08:e0: 99:88:9f:e7:30:49:3f:d5:fe:0c:5d:67:0c:61:75: ca:5c:c5:e0:37:6d:18:0c:99:da:cd:69:55:09:f9: 6d:92:06:6c:ea:e3:3c:94:a7:de:29:63:5f:af:7a: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C7:34:B0:F9:93:3A:0D:81:F1:2C:67:17:34:0A:C4:C9:8F:E5:2E X509v3 Authority Key Identifier: keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/323830343a373865633a313030303a3a2f33362d3336203d3e20323731323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:78ec:1000::/36 Signature Algorithm: sha256WithRSAEncryption 14:cb:a5:42:ea:54:0c:4e:3e:00:2f:e2:5f:3c:89:c2:84:b7: c8:c9:30:17:6e:3c:64:fb:c5:20:3c:00:a2:ba:41:23:92:c3: 09:59:93:18:3b:2c:42:12:3c:d0:fe:7b:28:0b:b3:5e:f2:ec: 59:4f:51:2f:c1:77:38:94:ad:66:4e:15:5a:b6:11:95:57:8c: 1d:2a:00:de:42:b2:18:a6:52:33:86:6b:ab:15:bc:a7:31:bc: 18:4a:08:ad:3d:aa:67:aa:6e:56:ad:81:78:5d:31:8a:e1:49: 0e:8c:0c:73:61:93:17:33:12:82:a0:3b:5a:5f:8d:f2:b1:1c: e3:ea:17:20:2d:63:13:a1:35:ef:9f:46:87:2b:03:e3:01:c9: 1a:c2:f0:77:43:b2:e7:0c:25:87:61:1a:55:18:73:5d:3d:44: e7:cc:e2:8f:70:76:16:ca:7d:6c:a1:b6:8b:76:a7:11:b6:78: d3:f6:a1:fe:95:59:45:a0:ef:49:28:5c:9f:40:21:5e:a2:b6: 49:85:da:7c:5d:f7:c7:12:68:c1:a1:80:fd:ad:1d:aa:b5:8f: 5a:73:65:a7:f3:60:1b:52:52:eb:58:7a:9c:29:fa:40:cf:e2: 38:49:4b:52:97:52:bd:8e:00:cf:7b:26:95:ff:6c:70:45:0f: 0d:11:95:13 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUCD1MSOA5FN9gPaqhrwE+FGOI8HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFDQzg4QzdGRDQ5RUVCNDE2OUJDQzdGQzM2NkREQUQ3 NTBDMTQ3ODAeFw0yNTEyMTExMjUxMjFaFw0yNjEyMTAxMjU2MjFaMDMxMTAvBgNV BAMTKDFGQzczNEIwRjk5MzNBMEQ4MUYxMkM2NzE3MzQwQUM0Qzk4RkU1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pRHbLn3kjTrkgxD0dGNvECYy 7ZOCCUCAJGLs7gaii04hE1qKn5h683TkWZRaMsnyHw+LljRfy8f+p9eCSu1+dJI0 ojJvLVBgAugPBmy2jM/MFDE8tDjqce+p6L4fGiE3/2ghboBIg0RIAbh5dxrS0iOZ 1lIZNsDv7TlP9oeqGkk2vIBPw9dKAyylIrssugaTVjjPOQXjgq+dX6SMleXv+rNq fogZLnoa2z4CrZlxi5A02mziNNd+rPNKCq0S+bqecGfpA4FfpUDGginpQu4I4JmI n+cwST/V/gxdZwxhdcpcxeA3bRgMmdrNaVUJ+W2SBmzq4zyUp94pY1+vejZhAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUH8c0sPmTOg2B8SxnFzQKxMmP5S4wHwYDVR0j BBgwFoAUocyIx/1J7rQWm8x/w2bdrXUMFHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGZoVDdqSjJDbVk5NEdFVkt4OGd5bVNDUDg0SGRQazhUa0VTRXNaWlFh N3UvMC9BMUNDODhDN0ZENDlFRUI0MTY5QkNDN0ZDMzY2RERBRDc1MEMxNDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQ0M4OEM3RkQ0OUVFQjQx NjlCQ0M3RkMzNjZEREFENzUwQzE0NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RmaFQ3akoyQ21ZOTRHRVZLeDhneW1TQ1A4NEhkUGs4VGtFU0VzWlpRYTd1LzAv MzIzODMwMzQzYTM3Mzg2NTYzM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzczMTMyMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEeOwQMA0GCSqGSIb3DQEBCwUA A4IBAQAUy6VC6lQMTj4AL+JfPInChLfIyTAXbjxk+8UgPACiukEjksMJWZMYOyxC EjzQ/nsoC7Ne8uxZT1EvwXc4lK1mThVathGVV4wdKgDeQrIYplIzhmurFbynMbwY SgitPapnqm5WrYF4XTGK4UkOjAxzYZMXMxKCoDtaX43ysRzj6hcgLWMToTXvn0aH KwPjAckawvB3Q7LnDCWHYRpVGHNdPUTnzOKPcHYWyn1sobaLdqcRtnjT9qH+lVlF oO9JKFyfQCFeorZJhdp8XffHEmjBoYD9rR2qtY9ac2Wn82AbUlLrWHqcKfpAz+I4 SUtSl1K9jgDPeyaV/2xwRQ8NEZUT -----END CERTIFICATE-----Generated at Mon Dec 22 05:19:01 2025 by rpki-client