This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d3438203d3e203532363934.roa File: 323830343a6335383a3a2f33322d3438203d3e203532363934.roa (raw, json) Hash identifier: kMY9usLpETr/QqdbrzfomafLS8P05TRSv/mCuBTIXDE= Subject key identifier: 43:0F:F7:CD:F0:CC:5A:C8:DD:25:DA:60:66:CB:7C:A5:23:25:48:C0 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 5AE1E89B7DC95A4705A77C1A01FA9C1A686AF9AA Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d3438203d3e203532363934.roa Signing time: Fri 05 Dec 2025 19:47:09 +0000 ROA not before: Fri 05 Dec 2025 19:42:09 +0000 ROA not after: Fri 04 Dec 2026 19:47:09 +0000 asID: 52694 IP address blocks: 2804:c58::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 17:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e1:e8:9b:7d:c9:5a:47:05:a7:7c:1a:01:fa:9c:1a:68:6a:f9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Dec 5 19:42:09 2025 GMT Not After : Dec 4 19:47:09 2026 GMT Subject: CN=430FF7CDF0CC5AC8DD25DA6066CB7CA5232548C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:be:e0:3d:47:27:a2:00:dd:5c:2f:30:e2:31: a4:e2:76:0b:b0:de:73:4c:5d:2f:44:a8:80:31:39: 79:38:af:1e:56:97:54:78:77:87:3e:cd:a5:6c:f1: 2f:02:5f:5e:9a:0d:59:75:6b:55:f0:7e:8f:fe:cf: f1:f5:d8:bb:25:6d:ee:d9:0f:cc:be:75:1b:a6:7f: cf:ac:c9:5d:23:a3:9d:c3:f0:29:79:02:9d:01:1a: 2c:d6:81:53:77:c6:63:c4:16:4f:e8:81:de:71:c4: ff:b5:2b:bd:e4:55:b5:e7:89:ee:01:ca:cc:f8:61: 45:25:a3:bd:70:d8:89:b9:5a:5e:7e:5c:32:9d:c7: 25:6d:8e:07:54:c6:de:5b:50:ad:66:ba:1d:d4:1b: 70:10:3b:64:2b:4d:65:8b:ef:24:b8:db:07:36:3d: 88:cc:9e:ac:92:2b:99:c3:00:2a:8a:17:fd:25:cb: 06:ce:e3:23:a6:16:81:e2:03:e3:5f:40:5b:66:72: 28:d1:35:f9:b0:23:15:13:b4:21:e3:03:af:d0:1f: ac:d9:0b:f9:2f:47:43:71:e6:b6:a9:44:33:97:d3: d1:59:1e:f1:b3:d3:db:26:bc:e8:8c:51:55:df:b3: 08:40:d7:55:13:da:10:73:95:59:94:f2:52:ca:e9: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0F:F7:CD:F0:CC:5A:C8:DD:25:DA:60:66:CB:7C:A5:23:25:48:C0 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/323830343a6335383a3a2f33322d3438203d3e203532363934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:c58::/32 Signature Algorithm: sha256WithRSAEncryption 24:1b:91:fc:d7:5b:91:f1:9c:7a:cb:2a:1c:48:88:20:f0:e2: 1e:66:a9:5d:1b:3c:bb:78:6e:36:32:54:a1:f5:31:82:92:34: 11:08:4b:49:c4:1c:eb:ab:ba:ee:6d:b9:c2:aa:42:5a:c1:f7: d9:ee:09:65:2f:be:d9:c8:71:db:4c:3f:04:a5:fe:af:a7:cb: ac:a0:f3:fc:47:00:b2:0e:a0:0a:d6:1d:2a:c6:47:14:fa:6a: e9:19:c1:ee:db:13:1f:2b:fd:97:ab:fa:dc:7e:e2:73:cd:87: df:b0:67:dc:ef:50:36:4c:25:4e:ac:33:30:6d:2a:e1:97:b8: 5d:12:64:2e:83:fe:25:77:41:13:00:80:80:6a:a3:d9:43:2d: ed:c6:5f:9f:0f:02:c4:42:e7:7f:a9:ab:af:4b:75:34:75:8c: e1:7e:fa:43:78:d7:03:d0:6d:ca:9b:38:56:af:43:5d:f1:9d: d5:61:ab:d4:49:88:79:91:1d:3b:9a:61:f7:01:66:c6:34:71: 15:ce:77:aa:41:3f:b2:67:cf:e4:52:d3:6c:36:56:8d:27:78: 99:af:bb:62:71:de:df:4c:91:6f:23:11:ea:ac:e6:73:14:72: ac:ff:f4:81:17:5b:61:1e:ea:b0:10:7f:73:5a:d4:7e:eb:bd: a8:5e:68:74 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUWuHom33JWkcFp3waAfqcGmhq+aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNTEyMDUxOTQyMDlaFw0yNjEyMDQxOTQ3MDlaMDMxMTAvBgNV BAMTKDQzMEZGN0NERjBDQzVBQzhERDI1REE2MDY2Q0I3Q0E1MjMyNTQ4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMvuA9RyeiAN1cLzDiMaTidguw 3nNMXS9EqIAxOXk4rx5Wl1R4d4c+zaVs8S8CX16aDVl1a1Xwfo/+z/H12Lslbe7Z D8y+dRumf8+syV0jo53D8Cl5Ap0BGizWgVN3xmPEFk/ogd5xxP+1K73kVbXnie4B ysz4YUUlo71w2Im5Wl5+XDKdxyVtjgdUxt5bUK1muh3UG3AQO2QrTWWL7yS42wc2 PYjMnqySK5nDACqKF/0lywbO4yOmFoHiA+NfQFtmcijRNfmwIxUTtCHjA6/QH6zZ C/kvR0Nx5rapRDOX09FZHvGz09smvOiMUVXfswhA11UT2hBzlVmU8lLK6RjJAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUQw/3zfDMWsjdJdpgZst8pSMlSMAwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Y5Njk1WEVua2hWemV1ZFhma1U2RlZQYkdGWDZXVUs3ZXNOQnpoSFJMN3BkLzAv MzIzODMwMzQzYTYzMzUzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNjM5 MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBAxYMA0GCSqGSIb3DQEBCwUAA4IBAQAkG5H811uR8Zx6 yyocSIgg8OIeZqldGzy7eG42MlSh9TGCkjQRCEtJxBzrq7rubbnCqkJawffZ7gll L77ZyHHbTD8Epf6vp8usoPP8RwCyDqAK1h0qxkcU+mrpGcHu2xMfK/2Xq/rcfuJz zYffsGfc71A2TCVOrDMwbSrhl7hdEmQug/4ld0ETAICAaqPZQy3txl+fDwLEQud/ qauvS3U0dYzhfvpDeNcD0G3KmzhWr0Nd8Z3VYavUSYh5kR07mmH3AWbGNHEVzneq QT+yZ8/kUtNsNlaNJ3iZr7ticd7fTJFvIxHqrOZzFHKs//SBF1thHuqwEH9zWtR+ 672oXmh0 -----END CERTIFICATE-----Generated at Sat Dec 6 20:13:59 2025 by rpki-client