This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa File: 323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa (raw, json) Hash identifier: HuHWlrj9YPpeT0JOJqNZdC8cA+ajSY+foMkfOn3oEwQ= Subject key identifier: 86:56:42:C0:49:53:3E:61:17:A6:96:B0:6B:2E:F7:75:6E:42:B3:8C Certificate issuer: /CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A Certificate serial: 71EF486D67C7A8F6E0982F13148B62DE964E177F Authority key identifier: 41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa Signing time: Fri 18 Jul 2025 14:06:21 +0000 ROA not before: Fri 18 Jul 2025 14:01:21 +0000 ROA not after: Fri 17 Jul 2026 14:06:21 +0000 asID: 270595 IP address blocks: 2804:6e68:8000::/34 maxlen: 34 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 71:ef:48:6d:67:c7:a8:f6:e0:98:2f:13:14:8b:62:de:96:4e:17:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A Validity Not Before: Jul 18 14:01:21 2025 GMT Not After : Jul 17 14:06:21 2026 GMT Subject: CN=865642C049533E6117A696B06B2EF7756E42B38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e7:d2:b9:3e:ef:97:64:19:8f:bd:11:0c:cf: 92:87:fb:2a:93:94:11:a5:6a:01:2f:0e:43:08:64: a9:d3:0c:0a:f1:80:c7:7b:35:38:1d:17:81:9d:00: da:b4:f2:93:54:0d:91:3c:22:e4:e2:58:ce:f7:93: 03:5e:ee:ab:d0:ca:4c:d2:a0:82:00:1c:b5:ea:57: 68:3e:c7:51:82:b0:dd:2d:0f:82:6d:21:27:77:b1: 38:a7:dc:6b:1d:d2:f5:be:df:84:36:9a:1a:b4:33: ee:ef:bc:8c:16:1f:1e:59:7b:81:f3:f9:db:98:bb: 4a:b5:fc:b5:50:14:61:34:cb:ad:48:fd:05:99:f7: 97:00:d2:ba:0b:17:66:7c:83:e3:77:30:f9:3c:5c: 39:e2:98:9e:b6:e2:f4:09:26:65:c1:06:8f:7d:57: ed:9c:d4:f0:a9:c1:2c:b2:3e:7d:a4:0f:96:22:f6: a9:39:6a:a1:25:fd:52:d2:ef:b3:57:43:9b:e3:ac: 19:33:8a:38:8e:e0:57:71:58:f9:6c:cd:53:be:57: 36:8c:fc:95:43:9a:2f:47:6e:68:1a:14:e3:7d:d0: 45:f8:1c:d5:35:38:21:27:dc:7d:74:c1:1b:3c:31: c9:9b:68:2a:4a:5f:4e:2b:38:36:3e:30:63:ce:2b: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:42:C0:49:53:3E:61:17:A6:96:B0:6B:2E:F7:75:6E:42:B3:8C X509v3 Authority Key Identifier: keyid:41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6e68:8000::/34 Signature Algorithm: sha256WithRSAEncryption 88:3b:c7:80:2e:31:03:3c:51:d0:49:f4:43:e0:3f:fc:28:a7: 37:d6:6c:4f:70:61:29:bd:f4:74:ba:4c:e0:22:cf:51:4f:01: d8:01:fc:a6:18:f3:6a:0c:99:5e:c2:c1:99:10:68:ea:07:0f: d4:c4:f4:96:b6:50:78:a9:b7:f6:f4:2d:b0:c7:e7:fb:1b:1b: 97:55:24:40:e6:76:5f:e9:b5:c3:9a:00:f0:33:f0:08:a1:89: 1e:69:63:31:c0:66:5b:fd:bd:1d:0b:0d:b4:06:f6:0d:5f:23: 08:76:78:07:6c:a4:a7:51:7d:f8:6f:a2:3f:59:de:d1:3a:f4: ac:97:ce:8f:3f:53:e2:70:2f:87:f1:e5:a5:1a:95:0b:2d:7d: 25:f2:20:63:fc:8e:bd:ea:d1:3d:7b:ff:3a:5b:59:fd:2c:bd: 20:91:42:bb:3b:ed:b5:0c:01:8e:8d:d0:78:5c:9e:d2:0a:36: 1c:bd:e4:4c:c0:1c:e6:26:67:ca:99:17:95:98:d7:55:28:81: d3:ef:4e:35:09:95:ec:28:1a:ad:78:5d:70:6d:4b:33:d1:c8: 3c:61:a8:42:73:99:fd:6e:c0:38:bf:ad:a5:eb:e3:ee:e9:00: 19:a8:e4:10:a5:48:c8:d8:db:63:90:4c:da:b2:de:67:1d:7e: c9:d5:cf:a4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUce9IbWfHqPbgmC8TFIti3pZOF38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2QUIwRTUwNUE5QjAyNzlFRjM3RkZBNzg2QTRCQkRG OEJCRkQ0QTAeFw0yNTA3MTgxNDAxMjFaFw0yNjA3MTcxNDA2MjFaMDMxMTAvBgNV BAMTKDg2NTY0MkMwNDk1MzNFNjExN0E2OTZCMDZCMkVGNzc1NkU0MkIzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCB59K5Pu+XZBmPvREMz5KH+yqT lBGlagEvDkMIZKnTDArxgMd7NTgdF4GdANq08pNUDZE8IuTiWM73kwNe7qvQykzS oIIAHLXqV2g+x1GCsN0tD4JtISd3sTin3Gsd0vW+34Q2mhq0M+7vvIwWHx5Ze4Hz +duYu0q1/LVQFGE0y61I/QWZ95cA0roLF2Z8g+N3MPk8XDnimJ624vQJJmXBBo99 V+2c1PCpwSyyPn2kD5Yi9qk5aqEl/VLS77NXQ5vjrBkzijiO4FdxWPlszVO+VzaM /JVDmi9HbmgaFON90EX4HNU1OCEn3H10wRs8McmbaCpKX04rODY+MGPOK/2TAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUhlZCwElTPmEXppaway73dW5Cs4wwHwYDVR0j BBgwFoAUQWqw5QWpsCee83/6eGpLvfi7/UowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhZM1lDRFgzN3g5dkxUR1NNNHhtOHBTcW5GNWdVWjU4d3U1UUhKQ3FS VDgvMC80MTZBQjBFNTA1QTlCMDI3OUVGMzdGRkE3ODZBNEJCREY4QkJGRDRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNkFCMEU1MDVBOUIwMjc5 RUYzN0ZGQTc4NkE0QkJERjhCQkZENEEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RoWTNZQ0RYMzd4OXZMVEdTTTR4bThwU3FuRjVnVVo1OHd1NVFISkNxUlQ4LzAv MzIzODMwMzQzYTM2NjUzNjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMDM1MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEbmiAMA0GCSqGSIb3DQEBCwUA A4IBAQCIO8eALjEDPFHQSfRD4D/8KKc31mxPcGEpvfR0ukzgIs9RTwHYAfymGPNq DJlewsGZEGjqBw/UxPSWtlB4qbf29C2wx+f7GxuXVSRA5nZf6bXDmgDwM/AIoYke aWMxwGZb/b0dCw20BvYNXyMIdngHbKSnUX34b6I/Wd7ROvSsl86PP1PicC+H8eWl GpULLX0l8iBj/I696tE9e/86W1n9LL0gkUK7O+21DAGOjdB4XJ7SCjYcveRMwBzm JmfKmReVmNdVKIHT7041CZXsKBqteF1wbUsz0cg8YahCc5n9bsA4v62l6+Pu6QAZ qOQQpUjI2NtjkEzast5nHX7J1c+k -----END CERTIFICATE-----Generated at Thu Dec 18 22:11:06 2025 by rpki-client