This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa File: 323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa (raw, json) Hash identifier: pxjCqcYWpj2Vj3+oe5LsPF6duy7OZ4g0G8ixxf5r474= Subject key identifier: 14:9B:D3:C6:7F:AA:B4:5E:40:4E:1D:9D:D4:2D:71:F7:56:C9:7D:DD Certificate issuer: /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400 Certificate serial: 2CF1B4C95919D5BF9A441183E5546413B170ED79 Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer Subject info access: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa Signing time: Fri 14 Nov 2025 15:53:57 +0000 ROA not before: Fri 14 Nov 2025 15:48:57 +0000 ROA not after: Fri 13 Nov 2026 15:53:57 +0000 asID: 271478 IP address blocks: 2804:7c24:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f1:b4:c9:59:19:d5:bf:9a:44:11:83:e5:54:64:13:b1:70:ed:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400 Validity Not Before: Nov 14 15:48:57 2025 GMT Not After : Nov 13 15:53:57 2026 GMT Subject: CN=149BD3C67FAAB45E404E1D9DD42D71F756C97DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:e1:8f:a2:cd:23:07:05:00:2d:a9:fd:0b: 84:56:04:06:43:ac:97:b0:ad:67:49:7e:30:fc:61: 6b:33:1d:68:db:a9:f6:67:32:d5:ab:e4:a0:60:cc: 10:d4:2f:11:b2:ed:db:96:ba:ef:28:22:b7:d1:18: 65:3c:5b:e3:9d:6a:0e:62:c0:05:b9:2d:bb:ae:6f: 56:c1:93:9d:40:a4:1d:85:29:d1:ac:e0:13:85:dd: 7a:45:b9:7d:72:27:41:c9:97:35:f6:de:92:15:18: c3:46:98:97:f8:ab:30:c1:47:4d:ab:5d:65:8f:e6: c8:c9:e1:63:ca:27:6e:30:ab:7c:5d:14:5a:83:cc: 84:6a:b3:59:11:6f:3c:f0:9e:a7:a9:63:22:c9:44: 14:aa:c8:4d:c3:1d:9a:80:8a:12:5f:ec:e1:ac:b6: 99:42:29:7a:8f:15:9f:b1:3b:d1:df:0e:f5:a8:1e: 1b:d9:33:82:57:fc:7e:b7:27:6d:51:0a:cb:68:03: 24:be:86:75:50:9f:8a:09:31:31:ca:c1:1b:b4:e2: 83:8f:e0:e9:db:87:ba:3c:30:81:31:77:46:c0:4a: c7:6f:0e:40:49:9a:ba:c6:8b:53:ac:96:83:e4:a9: eb:b9:6a:39:b8:b3:30:61:d2:83:01:4b:f0:79:74: 93:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9B:D3:C6:7F:AA:B4:5E:40:4E:1D:9D:D4:2D:71:F7:56:C9:7D:DD X509v3 Authority Key Identifier: keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7c24:d000::/36 Signature Algorithm: sha256WithRSAEncryption 59:43:21:7f:b5:40:38:7e:f7:fa:33:0c:17:54:67:94:f7:7f: 1e:af:0e:63:97:58:c3:3a:b4:25:a6:3b:d0:37:d1:d3:ad:be: 24:84:72:18:58:35:a6:df:1f:55:e5:05:73:8c:e7:9d:7a:91: 6d:6a:ff:c4:51:9c:a5:4c:f0:f2:79:97:9f:0e:22:f3:b1:e1: 41:9c:47:10:74:b1:45:da:85:4a:b0:57:98:cb:84:d4:47:7e: 24:22:4d:da:a5:85:69:e1:c6:c3:4b:91:1d:62:94:a5:53:89: 2e:e7:9c:aa:61:49:af:fb:6e:dd:05:65:bb:d7:6c:87:b8:08: 98:82:54:9a:48:13:d3:c8:62:82:5d:73:5e:e3:13:01:7f:8d: 38:cf:8c:bb:d8:dc:cf:07:6c:d8:da:1e:0c:12:7e:25:12:38: 0e:4d:65:56:d4:f0:4f:ee:c6:fd:29:3f:89:90:71:bf:fa:f7: eb:8d:d1:8d:f8:d0:b3:84:cd:65:32:12:9a:0d:2f:0b:a7:26: f0:f5:e6:d4:f4:19:0e:7b:be:55:7d:63:15:3c:06:bb:83:75: 2b:3b:76:14:a2:80:d3:fb:04:51:e1:ed:0e:0e:e6:47:5e:b2: e0:7f:71:22:2f:d8:b1:63:fd:96:28:24:10:2f:9a:20:ac:df: df:a9:26:64 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIULPG0yVkZ1b+aRBGD5VRkE7Fw7XkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMkM2QjNEQzhBREFFMTk2RkY3MEEwQzc3Mzk5MDAx RjVBNzQwMDAeFw0yNTExMTQxNTQ4NTdaFw0yNjExMTMxNTUzNTdaMDMxMTAvBgNV BAMTKDE0OUJEM0M2N0ZBQUI0NUU0MDRFMUQ5REQ0MkQ3MUY3NTZDOTdEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyOGPos0jBwUALan9C4RWBAZD rJewrWdJfjD8YWszHWjbqfZnMtWr5KBgzBDULxGy7duWuu8oIrfRGGU8W+Odag5i wAW5Lbuub1bBk51ApB2FKdGs4BOF3XpFuX1yJ0HJlzX23pIVGMNGmJf4qzDBR02r XWWP5sjJ4WPKJ24wq3xdFFqDzIRqs1kRbzzwnqepYyLJRBSqyE3DHZqAihJf7OGs tplCKXqPFZ+xO9HfDvWoHhvZM4JX/H63J21RCstoAyS+hnVQn4oJMTHKwRu04oOP 4Onbh7o8MIExd0bASsdvDkBJmrrGi1OsloPkqeu5ajm4szBh0oMBS/B5dJMTAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUFJvTxn+qtF5ATh2d1C1x91bJfd0wHwYDVR0j BBgwFoAU5MLGs9yK2uGW/3Cgx3OZAB9adAAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG9ENHoxa1FLRnJDOW1kaWtYVm5TTGttdmNCWjN1bW45TDNmZ1FDcGZS UHcvMC9FNEMyQzZCM0RDOEFEQUUxOTZGRjcwQTBDNzczOTkwMDFGNUE3NDAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QzJDNkIzREM4QURBRTE5 NkZGNzBBMEM3NzM5OTAwMUY1QTc0MDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RvRDR6MWtRS0ZyQzltZGlrWFZuU0xrbXZjQlozdW1uOUwzZmdRQ3BmUlB3LzAv MzIzODMwMzQzYTM3NjMzMjM0M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzczMTM0MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEfCTQMA0GCSqGSIb3DQEBCwUA A4IBAQBZQyF/tUA4fvf6MwwXVGeU938erw5jl1jDOrQlpjvQN9HTrb4khHIYWDWm 3x9V5QVzjOedepFtav/EUZylTPDyeZefDiLzseFBnEcQdLFF2oVKsFeYy4TUR34k Ik3apYVp4cbDS5EdYpSlU4ku55yqYUmv+27dBWW712yHuAiYglSaSBPTyGKCXXNe 4xMBf404z4y72NzPB2zY2h4MEn4lEjgOTWVW1PBP7sb9KT+JkHG/+vfrjdGN+NCz hM1lMhKaDS8Lpybw9ebU9BkOe75VfWMVPAa7g3UrO3YUooDT+wRR4e0ODuZHXrLg f3EiL9ixY/2WKCQQL5ogrN/fqSZk -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:33 2025 by rpki-client