This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/323830343a3638343a313a3a2f34382d3438203d3e203533313037.roa File: 323830343a3638343a313a3a2f34382d3438203d3e203533313037.roa (raw, json) Hash identifier: Md3BEvJCvGUi5kd/TuYfoszkm73WahsjFANpl2PxR0Y= Subject key identifier: 49:A3:9A:15:8C:C0:80:A1:FE:0F:D7:0E:74:CA:75:17:F2:D7:B3:40 Certificate issuer: /CN=CA79EC19D05A9E6082E976C95B92CAA0660C3D77 Certificate serial: 13F72D8D7D860FCB2C48352EBBC9B770D8F906BC Authority key identifier: CA:79:EC:19:D0:5A:9E:60:82:E9:76:C9:5B:92:CA:A0:66:0C:3D:77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer Subject info access: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/323830343a3638343a313a3a2f34382d3438203d3e203533313037.roa Signing time: Thu 04 Dec 2025 19:24:25 +0000 ROA not before: Thu 04 Dec 2025 19:19:25 +0000 ROA not after: Thu 03 Dec 2026 19:24:25 +0000 asID: 53107 IP address blocks: 2804:684:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.crl rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 03:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f7:2d:8d:7d:86:0f:cb:2c:48:35:2e:bb:c9:b7:70:d8:f9:06:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA79EC19D05A9E6082E976C95B92CAA0660C3D77 Validity Not Before: Dec 4 19:19:25 2025 GMT Not After : Dec 3 19:24:25 2026 GMT Subject: CN=49A39A158CC080A1FE0FD70E74CA7517F2D7B340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:6f:2b:b1:d7:a8:32:1b:87:f6:8e:0f:45: 7c:90:81:11:97:e5:40:46:88:6a:4a:de:53:bb:80: 68:75:85:24:fd:aa:31:20:35:72:1f:34:a0:d0:fb: ab:62:5c:22:57:05:e9:16:07:5d:08:b7:9f:00:ab: 3d:ba:0d:35:50:94:d9:8a:2d:1d:04:28:29:37:32: 0b:9d:f7:a9:f8:51:50:e6:c4:42:7a:d2:40:9d:0a: e7:39:f5:fd:01:c1:be:1f:1e:f3:7e:09:01:11:c3: 78:84:8a:55:c1:91:ff:36:9b:2d:be:40:f3:d1:ef: 86:55:92:d5:ca:dd:21:16:e4:b8:11:c7:50:71:ba: 20:20:f4:84:6d:57:6a:fb:0d:36:f7:ee:7d:44:1b: 11:cf:d5:fa:a1:36:cd:68:86:dc:3a:78:80:42:6b: 93:44:2d:d1:e7:2d:37:8d:57:cc:70:93:5c:2c:c6: d3:3e:6d:fe:ad:de:15:53:16:95:a2:40:06:a4:7d: 07:39:f2:4c:b9:25:a7:e4:96:1d:5a:13:01:77:5c: 12:a3:de:20:b9:65:6c:7d:b0:55:78:d5:1b:0f:1c: fc:1c:83:38:6e:0f:62:7e:4e:b7:00:b6:6d:d7:51: f2:0c:d6:7c:a6:52:f2:9a:0d:25:61:06:1b:76:a4: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A3:9A:15:8C:C0:80:A1:FE:0F:D7:0E:74:CA:75:17:F2:D7:B3:40 X509v3 Authority Key Identifier: keyid:CA:79:EC:19:D0:5A:9E:60:82:E9:76:C9:5B:92:CA:A0:66:0C:3D:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/323830343a3638343a313a3a2f34382d3438203d3e203533313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:684:1::/48 Signature Algorithm: sha256WithRSAEncryption 7b:5c:5b:bc:af:cb:17:f4:4f:e0:ee:52:e8:c0:a1:b1:fa:ad: da:48:11:2e:b5:f3:89:4d:23:f3:93:d9:6f:cc:b5:d7:f8:9e: 33:8e:c6:6f:25:28:c9:8a:db:35:df:9b:b4:5a:0b:b8:3f:86: 87:f2:b6:86:4a:01:80:2b:c6:a2:bf:42:a7:2d:14:eb:98:6f: a3:1c:44:4f:66:4d:c1:8e:6c:b4:77:3f:3c:64:35:fe:f3:42: 6b:be:22:10:0d:93:39:6c:1c:1e:ec:32:67:3a:e2:3c:ed:ed: ed:47:35:8c:0a:60:2e:dd:72:3a:53:5d:44:d9:de:65:0c:5a: 1e:21:19:f6:5f:25:14:6c:1d:c3:88:8c:ba:69:98:25:77:46: 8b:a7:50:c6:a5:01:df:61:2b:2c:bf:e0:7c:5d:35:2f:c8:d0: c5:36:85:12:0e:af:3f:46:48:09:10:36:5e:7c:7a:d4:5f:cb: dc:e8:ff:0d:3c:c7:be:4f:5a:0c:8b:b6:ed:c5:5e:1f:bb:51: 59:32:da:d2:c6:ee:dc:ed:30:ab:b6:e6:c1:68:54:fd:cb:05: 3f:a3:5f:38:b1:e3:b3:db:3d:94:60:cb:dd:7f:cc:a5:79:ea: af:1b:71:50:42:30:a8:c6:57:2d:fc:7e:9b:45:ad:2a:a9:34: 74:1b:8f:b2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUE/ctjX2GD8ssSDUuu8m3cNj5BrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3OUVDMTlEMDVBOUU2MDgyRTk3NkM5NUI5MkNBQTA2 NjBDM0Q3NzAeFw0yNTEyMDQxOTE5MjVaFw0yNjEyMDMxOTI0MjVaMDMxMTAvBgNV BAMTKDQ5QTM5QTE1OENDMDgwQTFGRTBGRDcwRTc0Q0E3NTE3RjJEN0IzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfm8rsdeoMhuH9o4PRXyQgRGX 5UBGiGpK3lO7gGh1hST9qjEgNXIfNKDQ+6tiXCJXBekWB10It58Aqz26DTVQlNmK LR0EKCk3Mgud96n4UVDmxEJ60kCdCuc59f0Bwb4fHvN+CQERw3iEilXBkf82my2+ QPPR74ZVktXK3SEW5LgRx1BxuiAg9IRtV2r7DTb37n1EGxHP1fqhNs1ohtw6eIBC a5NELdHnLTeNV8xwk1wsxtM+bf6t3hVTFpWiQAakfQc58ky5Jafklh1aEwF3XBKj 3iC5ZWx9sFV41RsPHPwcgzhuD2J+TrcAtm3XUfIM1nymUvKaDSVhBht2pO1DAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUSaOaFYzAgKH+D9cOdMp1F/LXs0AwHwYDVR0j BBgwFoAUynnsGdBanmCC6XbJW5LKoGYMPXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTFMMWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpB MUcvMS9DQTc5RUMxOUQwNUE5RTYwODJFOTc2Qzk1QjkyQ0FBMDY2MEMzRDc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNzlFQzE5RDA1QTlFNjA4 MkU5NzZDOTVCOTJDQUEwNjYwQzNENzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0UxTDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzEv MzIzODMwMzQzYTM2MzgzNDNhMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMz MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH AQH/BBMwETAPBAIAAjAJAwcAKAQGhAABMA0GCSqGSIb3DQEBCwUAA4IBAQB7XFu8 r8sX9E/g7lLowKGx+q3aSBEutfOJTSPzk9lvzLXX+J4zjsZvJSjJits135u0Wgu4 P4aH8raGSgGAK8aiv0KnLRTrmG+jHERPZk3Bjmy0dz88ZDX+80JrviIQDZM5bBwe 7DJnOuI87e3tRzWMCmAu3XI6U11E2d5lDFoeIRn2XyUUbB3DiIy6aZgld0aLp1DG pQHfYSssv+B8XTUvyNDFNoUSDq8/RkgJEDZefHrUX8vc6P8NPMe+T1oMi7btxV4f u1FZMtrSxu7c7TCrtubBaFT9ywU/o184seOz2z2UYMvdf8yleeqvG3FQQjCoxlct /H6bRa0qqTR0G4+y -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:27 2025 by rpki-client