This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/323830343a3638343a323030303a3a2f33352d3335203d3e20323632353930.roa File: 323830343a3638343a323030303a3a2f33352d3335203d3e20323632353930.roa (raw, json) Hash identifier: ufi7TMyfZnS7AjoitPHi0ao9i/8nGh2AgCmNwtEu72A= Subject key identifier: 2F:D3:27:19:2E:2B:3C:21:81:B4:BC:9B:18:07:F2:E4:0C:1E:E0:A4 Certificate issuer: /CN=CA79EC19D05A9E6082E976C95B92CAA0660C3D77 Certificate serial: 7D3855DD179C465230B3A65534177CBA1C682C18 Authority key identifier: CA:79:EC:19:D0:5A:9E:60:82:E9:76:C9:5B:92:CA:A0:66:0C:3D:77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer Subject info access: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/323830343a3638343a323030303a3a2f33352d3335203d3e20323632353930.roa Signing time: Thu 04 Dec 2025 19:24:23 +0000 ROA not before: Thu 04 Dec 2025 19:19:23 +0000 ROA not after: Thu 03 Dec 2026 19:24:23 +0000 asID: 262590 IP address blocks: 2804:684:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.crl rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 03:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:38:55:dd:17:9c:46:52:30:b3:a6:55:34:17:7c:ba:1c:68:2c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA79EC19D05A9E6082E976C95B92CAA0660C3D77 Validity Not Before: Dec 4 19:19:23 2025 GMT Not After : Dec 3 19:24:23 2026 GMT Subject: CN=2FD327192E2B3C2181B4BC9B1807F2E40C1EE0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:b2:ae:a0:a4:cb:2d:80:fc:73:17:80:d5: f2:d9:4c:84:8b:2e:22:df:4a:51:7a:6b:91:8d:97: a5:4c:08:ba:58:a2:d7:75:9a:10:84:4b:c9:88:ba: 56:82:05:ac:5c:17:9e:42:69:a8:bb:63:90:52:84: 35:19:83:ff:47:2b:0b:28:5f:78:da:b9:6a:4f:84: 15:22:e0:ca:b8:37:5c:ed:4d:bd:c4:5a:7f:29:30: 9d:6f:6c:02:8f:8d:0f:03:d3:8e:68:79:99:30:5a: 72:ef:ac:62:fb:7c:92:f5:9e:7e:c7:7a:e4:b2:fc: 37:b6:87:a9:d3:b1:22:f5:26:2e:69:9c:08:89:6a: c4:15:d8:02:01:c7:8f:b9:4a:6b:d2:43:1a:5f:64: 2d:32:78:94:eb:a0:10:b1:b0:0f:3c:23:57:c5:a9: 72:e4:47:69:19:77:12:a3:c4:bb:92:28:d0:8b:b2: 68:60:11:bd:ab:73:ce:e7:f2:62:be:d2:80:cc:73: 15:e4:5c:43:79:c6:ea:7d:3c:24:4d:b6:d2:53:1e: 25:4e:b8:36:9b:02:9c:fc:f2:45:df:64:7e:75:59: f5:94:78:03:36:d8:fa:3d:3d:db:43:9f:50:47:89: f3:c4:e8:a0:a0:29:93:16:cb:35:20:dc:fb:a0:ee: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D3:27:19:2E:2B:3C:21:81:B4:BC:9B:18:07:F2:E4:0C:1E:E0:A4 X509v3 Authority Key Identifier: keyid:CA:79:EC:19:D0:5A:9E:60:82:E9:76:C9:5B:92:CA:A0:66:0C:3D:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA79EC19D05A9E6082E976C95B92CAA0660C3D77.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/1/323830343a3638343a323030303a3a2f33352d3335203d3e20323632353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:684:2000::/35 Signature Algorithm: sha256WithRSAEncryption 9f:b5:53:fa:6a:3d:47:f3:7e:e4:72:6d:71:64:42:08:ef:69: e6:df:07:f7:1b:b0:4c:9c:4d:50:bd:79:1f:f1:e5:04:45:51: 3e:5a:78:18:52:bf:8a:13:3e:c2:8b:98:f4:73:23:eb:15:12: 98:a1:32:9e:ff:86:22:4d:e4:59:ac:4b:1f:3f:11:25:10:2d: 1c:1d:21:11:fd:32:d2:6b:f0:55:18:7d:bb:8c:5c:6d:13:ac: 79:07:75:ef:ab:5f:fc:d3:0f:57:fd:38:fc:84:3b:2c:bc:f6: b7:72:e3:9e:ab:b8:94:55:07:17:8d:59:61:31:ac:74:ae:70: 70:45:0b:db:d1:34:c0:d7:c0:a3:2c:d8:6b:a0:fd:17:92:b0: 02:d7:94:70:28:20:95:bb:08:b7:3a:fe:ee:83:1a:69:4f:ad: e8:0d:eb:3b:f9:3d:d3:28:16:e1:99:be:da:f0:a9:81:95:88: c0:23:b3:fa:1d:e6:e0:b6:8c:3a:6c:2d:e9:ef:4b:93:7b:9b: 90:59:55:00:3e:c0:4d:a4:17:1d:1d:a9:cd:23:3b:24:f4:3f: f0:45:72:82:72:3a:58:5f:b0:26:d2:34:65:9a:da:16:36:92: 67:a8:ea:ec:38:b6:69:b6:e3:e4:c7:5f:d3:3d:ab:d2:4e:e4: 20:64:3a:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfThV3RecRlIws6ZVNBd8uhxoLBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3OUVDMTlEMDVBOUU2MDgyRTk3NkM5NUI5MkNBQTA2 NjBDM0Q3NzAeFw0yNTEyMDQxOTE5MjNaFw0yNjEyMDMxOTI0MjNaMDMxMTAvBgNV BAMTKDJGRDMyNzE5MkUyQjNDMjE4MUI0QkM5QjE4MDdGMkU0MEMxRUUwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5LKuoKTLLYD8cxeA1fLZTISL LiLfSlF6a5GNl6VMCLpYotd1mhCES8mIulaCBaxcF55Caai7Y5BShDUZg/9HKwso X3jauWpPhBUi4Mq4N1ztTb3EWn8pMJ1vbAKPjQ8D045oeZkwWnLvrGL7fJL1nn7H euSy/De2h6nTsSL1Ji5pnAiJasQV2AIBx4+5SmvSQxpfZC0yeJTroBCxsA88I1fF qXLkR2kZdxKjxLuSKNCLsmhgEb2rc87n8mK+0oDMcxXkXEN5xup9PCRNttJTHiVO uDabApz88kXfZH51WfWUeAM22Po9PdtDn1BHifPE6KCgKZMWyzUg3Pug7qMvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUL9MnGS4rPCGBtLybGAfy5Awe4KQwHwYDVR0j BBgwFoAUynnsGdBanmCC6XbJW5LKoGYMPXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTFMMWdyYWt6ZnJlZXB2NVlkb3FuMkpCcld5eVJQdllVSjF2MVhtcnpB MUcvMS9DQTc5RUMxOUQwNUE5RTYwODJFOTc2Qzk1QjkyQ0FBMDY2MEMzRDc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNzlFQzE5RDA1QTlFNjA4 MkU5NzZDOTVCOTJDQUEwNjYwQzNENzcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0UxTDFncmFremZyZWVwdjVZZG9xbjJKQnJXeXlSUHZZVUoxdjFYbXJ6QTFHLzEv MzIzODMwMzQzYTM2MzgzNDNhMzIzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl MjAzMjM2MzIzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAaEIDANBgkqhkiG9w0BAQsFAAOC AQEAn7VT+mo9R/N+5HJtcWRCCO9p5t8H9xuwTJxNUL15H/HlBEVRPlp4GFK/ihM+ wouY9HMj6xUSmKEynv+GIk3kWaxLHz8RJRAtHB0hEf0y0mvwVRh9u4xcbROseQd1 76tf/NMPV/04/IQ7LLz2t3Ljnqu4lFUHF41ZYTGsdK5wcEUL29E0wNfAoyzYa6D9 F5KwAteUcCgglbsItzr+7oMaaU+t6A3rO/k90ygW4Zm+2vCpgZWIwCOz+h3m4LaM Omwt6e9Lk3ubkFlVAD7ATaQXHR2pzSM7JPQ/8EVygnI6WF+wJtI0ZZraFjaSZ6jq 7Di2abbj5Mdf0z2r0k7kIGQ6fw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:08 2025 by rpki-client