This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa File: 323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa (raw, json) Hash identifier: 7rZSd5drgMS6B2pAKp+4HnFmSqXHrfH93HpqhocOQo0= Subject key identifier: FB:D1:B1:B6:F2:54:23:A3:DF:0F:E2:55:3F:12:C4:3E:54:01:A5:39 Certificate issuer: /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400 Certificate serial: 3AB695290F2DF0BF8021C8766A30FA03B49D8654 Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer Subject info access: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa Signing time: Fri 14 Nov 2025 15:54:00 +0000 ROA not before: Fri 14 Nov 2025 15:49:00 +0000 ROA not after: Fri 13 Nov 2026 15:54:00 +0000 asID: 271478 IP address blocks: 2804:7c24:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b6:95:29:0f:2d:f0:bf:80:21:c8:76:6a:30:fa:03:b4:9d:86:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400 Validity Not Before: Nov 14 15:49:00 2025 GMT Not After : Nov 13 15:54:00 2026 GMT Subject: CN=FBD1B1B6F25423A3DF0FE2553F12C43E5401A539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:73:dd:42:fb:6c:ba:e8:e3:80:25:3e:b4:b6: 1e:95:e8:64:7b:88:53:8d:f6:19:44:c2:e0:b4:ea: 26:c5:af:f2:bc:40:04:36:1e:07:93:3c:b3:f6:20: 6f:54:99:e0:ce:a2:43:e1:cc:ae:32:bc:7a:95:dc: 72:a2:cc:8d:6f:51:85:a1:e1:d9:63:f4:18:26:a3: 62:01:dd:53:11:59:68:04:39:a9:de:83:40:73:a6: 00:8c:29:84:b3:58:3e:17:3a:63:b1:00:85:f0:54: 6d:03:0b:5d:4d:8b:27:05:be:c0:a7:5a:75:04:9e: 3d:07:9f:8f:f9:8f:c8:e4:ad:17:3b:a3:de:ef:29: 0f:f5:df:84:d6:f7:91:2d:04:b8:6d:37:e4:77:ac: 85:0f:4b:ef:f4:e5:74:db:54:bb:02:ce:aa:87:d2: bc:99:d7:71:b3:ac:f8:2d:cf:3f:0a:b2:20:7f:07: 3e:e9:6e:9b:4d:26:f2:e9:b8:05:77:98:62:fe:4f: 23:df:f2:ba:30:d6:c2:50:d1:55:5f:10:f4:4d:b6: e0:f1:c6:8a:5d:51:b0:c7:9d:22:d1:a0:14:c9:8e: 75:ba:80:ff:0c:60:8d:1e:75:1e:9e:97:cb:0d:0a: 9f:69:5f:ff:16:6f:0b:de:d0:5e:ac:e0:fb:9b:95: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D1:B1:B6:F2:54:23:A3:DF:0F:E2:55:3F:12:C4:3E:54:01:A5:39 X509v3 Authority Key Identifier: keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7c24:8000::/34 Signature Algorithm: sha256WithRSAEncryption ef:57:bb:bc:79:6b:dc:da:c2:e2:a2:8d:3b:97:72:53:db:c6: d5:02:72:0f:6c:ed:98:15:f3:a5:33:c5:c9:6d:ad:48:57:c7: 63:4d:e5:ca:e7:54:c7:75:46:5e:43:45:0a:5c:cb:42:e8:53: 8c:30:02:43:c9:fe:77:d7:1c:1a:a2:ec:eb:55:93:d6:b7:41: 4c:13:56:64:ee:93:fd:e5:db:f4:26:8d:d4:4d:32:e2:2a:9f: dc:be:7f:13:e1:4e:50:e8:42:16:f9:11:81:1c:37:59:de:c6: 35:02:b8:ad:79:47:79:80:a5:fd:bb:38:f1:5a:6a:d9:16:89: 0c:65:22:d8:3a:93:7e:48:7e:e8:7d:60:67:d3:05:a5:06:ce: 31:2b:78:13:a5:30:1a:9a:b6:d4:24:91:58:d3:2c:7a:eb:d2: b8:13:3e:33:6a:cf:76:3e:03:5a:20:f4:c5:84:bc:72:51:84: 8d:29:08:5a:f7:27:be:35:3a:c8:16:cf:92:99:12:9a:95:b9: 88:a5:ef:b7:64:fa:9a:ff:04:c5:78:f4:2b:a5:fc:4d:78:9c: 53:a7:13:66:cd:1c:6d:82:d7:31:0f:90:07:32:51:35:95:33: 53:c4:1c:21:cc:95:27:5d:59:cd:37:7d:a5:5d:b5:11:72:47: 80:e7:38:ef -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUOraVKQ8t8L+AIch2ajD6A7SdhlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMkM2QjNEQzhBREFFMTk2RkY3MEEwQzc3Mzk5MDAx RjVBNzQwMDAeFw0yNTExMTQxNTQ5MDBaFw0yNjExMTMxNTU0MDBaMDMxMTAvBgNV BAMTKEZCRDFCMUI2RjI1NDIzQTNERjBGRTI1NTNGMTJDNDNFNTQwMUE1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuc91C+2y66OOAJT60th6V6GR7 iFON9hlEwuC06ibFr/K8QAQ2HgeTPLP2IG9UmeDOokPhzK4yvHqV3HKizI1vUYWh 4dlj9Bgmo2IB3VMRWWgEOaneg0BzpgCMKYSzWD4XOmOxAIXwVG0DC11NiycFvsCn WnUEnj0Hn4/5j8jkrRc7o97vKQ/134TW95EtBLhtN+R3rIUPS+/05XTbVLsCzqqH 0ryZ13GzrPgtzz8KsiB/Bz7pbptNJvLpuAV3mGL+TyPf8row1sJQ0VVfEPRNtuDx xopdUbDHnSLRoBTJjnW6gP8MYI0edR6el8sNCp9pX/8Wbwve0F6s4PublVh7AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU+9GxtvJUI6PfD+JVPxLEPlQBpTkwHwYDVR0j BBgwFoAU5MLGs9yK2uGW/3Cgx3OZAB9adAAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG9ENHoxa1FLRnJDOW1kaWtYVm5TTGttdmNCWjN1bW45TDNmZ1FDcGZS UHcvMC9FNEMyQzZCM0RDOEFEQUUxOTZGRjcwQTBDNzczOTkwMDFGNUE3NDAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QzJDNkIzREM4QURBRTE5 NkZGNzBBMEM3NzM5OTAwMUY1QTc0MDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RvRDR6MWtRS0ZyQzltZGlrWFZuU0xrbXZjQlozdW1uOUwzZmdRQ3BmUlB3LzAv MzIzODMwMzQzYTM3NjMzMjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMTM0MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEfCSAMA0GCSqGSIb3DQEBCwUA A4IBAQDvV7u8eWvc2sLioo07l3JT28bVAnIPbO2YFfOlM8XJba1IV8djTeXK51TH dUZeQ0UKXMtC6FOMMAJDyf531xwaouzrVZPWt0FME1Zk7pP95dv0Jo3UTTLiKp/c vn8T4U5Q6EIW+RGBHDdZ3sY1AriteUd5gKX9uzjxWmrZFokMZSLYOpN+SH7ofWBn 0wWlBs4xK3gTpTAamrbUJJFY0yx669K4Ez4zas92PgNaIPTFhLxyUYSNKQha9ye+ NTrIFs+SmRKalbmIpe+3ZPqa/wTFePQrpfxNeJxTpxNmzRxtgtcxD5AHMlE1lTNT xBwhzJUnXVnNN32lXbURckeA5zjv -----END CERTIFICATE-----Generated at Sat Dec 6 23:59:34 2025 by rpki-client