This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a323030303a3a2f33362d3336203d3e20323633353834.roa File: 323830343a6636383a323030303a3a2f33362d3336203d3e20323633353834.roa (raw, json) Hash identifier: uYq8Z2eSQOmRiD5ILvx6fyjRk9b9+qtvQGSCE7Ep2e8= Subject key identifier: EE:C1:76:2E:4E:B6:81:85:84:FE:C5:54:C2:5E:36:0D:93:FB:DE:EA Certificate issuer: /CN=BA3E764B84DA8622ADE38A43DC527A79F7881585 Certificate serial: 5EE91D796356FC0655ECDD4F96202DAE673DF34E Authority key identifier: BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a323030303a3a2f33362d3336203d3e20323633353834.roa Signing time: Mon 24 Nov 2025 23:09:27 +0000 ROA not before: Mon 24 Nov 2025 23:04:27 +0000 ROA not after: Mon 23 Nov 2026 23:09:27 +0000 asID: 263584 IP address blocks: 2804:f68:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 09:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e9:1d:79:63:56:fc:06:55:ec:dd:4f:96:20:2d:ae:67:3d:f3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3E764B84DA8622ADE38A43DC527A79F7881585 Validity Not Before: Nov 24 23:04:27 2025 GMT Not After : Nov 23 23:09:27 2026 GMT Subject: CN=EEC1762E4EB6818584FEC554C25E360D93FBDEEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:32:69:b6:d2:77:3b:4b:73:25:c0:40:ed: e1:50:3a:c7:c1:93:d1:be:5b:12:af:9b:1e:82:a3: bb:48:25:bb:21:b7:b1:a0:37:6f:f9:a2:72:f5:fc: af:80:ab:c6:7f:f0:5f:45:cf:88:9e:e1:09:69:27: 1d:fb:de:21:09:b3:61:6d:90:50:da:4b:18:23:26: 9a:f8:51:ad:e9:20:ff:4b:17:58:65:e2:17:14:42: bd:ed:c6:ab:f1:f6:94:3e:54:20:b2:9b:2b:40:cd: 63:55:08:94:17:ce:6d:ee:1d:b4:f0:59:0e:56:d6: fe:6e:cd:f6:57:46:c2:52:dc:40:ca:6f:03:53:6b: 8b:f6:19:f5:37:30:46:04:a6:29:f1:0e:f9:a2:50: 8e:64:51:cf:9a:3b:35:61:7a:1d:91:58:00:4f:4c: 82:f0:a2:fe:b6:e7:26:4b:ea:c0:d8:b2:da:f4:36: f8:76:11:54:c6:55:4a:52:2a:01:f7:ac:e7:25:e6: 25:b7:7a:a9:c6:f3:46:6b:bd:92:ce:95:25:f7:da: 13:8d:99:ee:1f:cf:fe:37:df:86:81:a3:65:d1:f2: 13:96:89:de:63:d2:b9:ec:1e:fe:9d:a8:bf:2b:ed: c0:ba:ae:3f:cd:78:10:d1:05:0f:c3:dd:a7:9d:51: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C1:76:2E:4E:B6:81:85:84:FE:C5:54:C2:5E:36:0D:93:FB:DE:EA X509v3 Authority Key Identifier: keyid:BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a323030303a3a2f33362d3336203d3e20323633353834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:f68:2000::/36 Signature Algorithm: sha256WithRSAEncryption 30:fa:07:09:1e:bf:19:c0:00:73:e7:b4:55:2c:aa:06:c5:c4: 4d:94:f1:86:47:38:1e:5f:91:b1:7a:db:20:9b:7f:de:96:21: 96:93:b7:dd:7a:cb:94:ed:6f:5e:8f:cc:40:97:8a:94:bf:c6: fb:78:0b:69:96:a4:35:2d:90:0c:ea:93:ab:2b:50:4c:22:ad: 23:25:73:8f:1c:f3:91:fb:88:dc:3a:28:15:cf:15:ac:47:50: a9:1b:96:8a:7a:cc:6b:59:b0:41:fa:fe:83:2b:f3:dd:d5:87: ab:ab:e0:7f:de:db:f7:0c:69:38:ba:72:8a:60:12:60:6a:82: f7:88:57:c0:bd:e9:75:3b:78:db:08:5f:95:08:26:45:13:92: b8:35:99:38:ff:c1:cc:bc:b2:7d:0f:3c:71:1e:b7:43:bc:c5: d2:39:9f:d1:57:9b:77:c5:87:f2:b5:46:7c:88:59:1a:c5:61: 42:be:ee:93:65:24:3a:7f:da:54:68:0c:a2:fc:90:07:72:cc: 71:da:1a:07:de:fa:fe:45:40:c5:32:9f:c0:b0:7d:88:4d:d4: 32:d5:78:c5:dc:98:7e:22:66:88:96:02:86:ed:44:0f:14:41: f4:01:2e:47:d8:a2:4c:df:8d:09:c7:59:18:f1:84:22:5d:fc: 32:f8:0a:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXukdeWNW/AZV7N1PliAtrmc9804wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzRTc2NEI4NERBODYyMkFERTM4QTQzREM1MjdBNzlG Nzg4MTU4NTAeFw0yNTExMjQyMzA0MjdaFw0yNjExMjMyMzA5MjdaMDMxMTAvBgNV BAMTKEVFQzE3NjJFNEVCNjgxODU4NEZFQzU1NEMyNUUzNjBEOTNGQkRFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBTJpttJ3O0tzJcBA7eFQOsfB k9G+WxKvmx6Co7tIJbsht7GgN2/5onL1/K+Aq8Z/8F9Fz4ie4QlpJx373iEJs2Ft kFDaSxgjJpr4Ua3pIP9LF1hl4hcUQr3txqvx9pQ+VCCymytAzWNVCJQXzm3uHbTw WQ5W1v5uzfZXRsJS3EDKbwNTa4v2GfU3MEYEpinxDvmiUI5kUc+aOzVheh2RWABP TILwov625yZL6sDYstr0Nvh2EVTGVUpSKgH3rOcl5iW3eqnG80ZrvZLOlSX32hON me4fz/4334aBo2XR8hOWid5j0rnsHv6dqL8r7cC6rj/NeBDRBQ/D3aedUUm3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7sF2Lk62gYWE/sVUwl42DZP73uowHwYDVR0j BBgwFoAUuj52S4TahiKt44pD3FJ6efeIFYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS Q3EvMC9CQTNFNzY0Qjg0REE4NjIyQURFMzhBNDNEQzUyN0E3OUY3ODgxNTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBM0U3NjRCODREQTg2MjJB REUzOEE0M0RDNTI3QTc5Rjc4ODE1ODUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv MzIzODMwMzQzYTY2MzYzODNhMzIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl MjAzMjM2MzMzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBA9oIDANBgkqhkiG9w0BAQsFAAOC AQEAMPoHCR6/GcAAc+e0VSyqBsXETZTxhkc4Hl+RsXrbIJt/3pYhlpO33XrLlO1v Xo/MQJeKlL/G+3gLaZakNS2QDOqTqytQTCKtIyVzjxzzkfuI3DooFc8VrEdQqRuW inrMa1mwQfr+gyvz3dWHq6vgf97b9wxpOLpyimASYGqC94hXwL3pdTt42whflQgm RROSuDWZOP/BzLyyfQ88cR63Q7zF0jmf0Vebd8WH8rVGfIhZGsVhQr7uk2UkOn/a VGgMovyQB3LMcdoaB976/kVAxTKfwLB9iE3UMtV4xdyYfiJmiJYChu1EDxRB9AEu R9iiTN+NCcdZGPGEIl38MvgKPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:41 2025 by rpki-client