This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/323830343a373537303a3a2f33322d313238203d3e20323731303436.roa File: 323830343a373537303a3a2f33322d313238203d3e20323731303436.roa (raw, json) Hash identifier: 6DSDUnpoFmrNLsVs1Sf9RxTkGv4y89CkqsJFexmrz9g= Subject key identifier: 04:A7:EA:55:6F:89:C1:2D:B3:CD:3D:DE:C9:26:27:B4:71:BA:95:6B Certificate issuer: /CN=DFCCDF5F8AC5C763B5218011C9AC6FF566C78511 Certificate serial: 6CCE839CF01C94562D9F55F9C29E22FE32FBDD43 Authority key identifier: DF:CC:DF:5F:8A:C5:C7:63:B5:21:80:11:C9:AC:6F:F5:66:C7:85:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.cer Subject info access: rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/323830343a373537303a3a2f33322d313238203d3e20323731303436.roa Signing time: Wed 10 Dec 2025 20:04:46 +0000 ROA not before: Wed 10 Dec 2025 19:59:46 +0000 ROA not after: Wed 09 Dec 2026 20:04:46 +0000 asID: 271046 IP address blocks: 2804:7570::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.crl rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 04:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ce:83:9c:f0:1c:94:56:2d:9f:55:f9:c2:9e:22:fe:32:fb:dd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFCCDF5F8AC5C763B5218011C9AC6FF566C78511 Validity Not Before: Dec 10 19:59:46 2025 GMT Not After : Dec 9 20:04:46 2026 GMT Subject: CN=04A7EA556F89C12DB3CD3DDEC92627B471BA956B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:ca:9a:78:01:10:0c:70:aa:57:d4:79:9e: 19:39:3c:5d:08:79:3a:f5:d9:36:c2:da:1c:1d:09: e2:b6:f2:6e:62:96:49:1f:ca:f4:87:d2:f4:18:23: b3:2c:35:d9:01:d9:ad:a2:39:16:b5:22:f7:c6:21: d3:77:3e:4c:ee:f7:42:ce:5a:40:e7:44:00:89:2d: 32:52:9a:85:cf:d0:10:74:9e:14:63:6d:38:d9:de: 7c:df:29:90:54:fc:3a:61:0f:f1:3a:19:77:cf:10: a8:9c:9b:ff:64:aa:ac:ed:8b:b8:a4:ab:3e:68:9b: bd:8f:6f:e7:cf:c7:39:ea:65:01:4b:0f:37:67:b7: 32:eb:1b:f0:0e:d0:be:49:73:74:8c:e3:52:be:0e: 08:42:60:18:a9:1d:6f:f4:db:c3:25:ed:7a:b9:5c: 4c:6f:c1:85:9a:fe:50:d7:97:49:f5:62:09:74:d9: 2c:e3:99:37:5f:c0:bd:00:33:7e:2e:19:af:98:fd: 48:13:72:89:52:d7:e0:4c:04:5f:4b:d8:f1:2f:d6: 7d:d5:f5:91:3a:f9:e9:40:6c:6b:2a:8d:24:01:3b: 31:99:34:d0:67:d5:aa:36:b6:0e:c2:61:d4:79:41: 71:fb:26:ee:e6:23:a9:8e:70:97:1e:4f:60:3c:37: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A7:EA:55:6F:89:C1:2D:B3:CD:3D:DE:C9:26:27:B4:71:BA:95:6B X509v3 Authority Key Identifier: keyid:DF:CC:DF:5F:8A:C5:C7:63:B5:21:80:11:C9:AC:6F:F5:66:C7:85:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFCCDF5F8AC5C763B5218011C9AC6FF566C78511.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/323830343a373537303a3a2f33322d313238203d3e20323731303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7570::/32 Signature Algorithm: sha256WithRSAEncryption b4:b7:55:8c:f7:26:31:e7:15:27:87:d7:98:c2:04:ce:47:dc: 08:a4:27:50:14:b0:2d:38:01:f9:d2:16:b8:20:0a:7b:d8:46: 6d:18:b2:a9:57:30:26:8d:bd:be:88:f6:39:42:35:79:60:8d: 7d:f3:3f:a0:ff:03:04:3d:ff:8b:3f:9b:19:44:04:04:27:82: e7:ea:b6:10:96:d2:64:2a:68:30:c4:99:5f:d6:e2:5c:1f:a8: fb:d9:fd:0b:26:b1:30:35:67:8e:2a:b4:02:40:b9:18:45:2d: a2:2d:b5:40:f1:87:cc:65:61:05:05:c4:71:4d:66:3b:21:37: 19:3a:a1:0c:51:81:04:0f:bd:ff:7e:77:b3:39:4f:59:9b:df: e4:fa:c1:7d:f4:3f:ec:3d:14:41:1d:d1:04:47:d5:85:93:11: cd:1e:41:d6:76:fa:5d:3d:7a:37:9a:28:63:97:a8:ec:5b:31: 49:3d:db:33:77:fb:e8:49:df:f4:fb:11:b5:b0:11:ca:81:54: 77:9c:11:73:5a:e5:f8:b0:0d:5f:3c:d2:53:fd:f2:89:07:b4: 8a:dd:10:cd:75:31:cb:20:0d:18:82:03:0e:fe:5a:a4:bf:1b: d0:f5:1f:c5:0c:00:d6:d9:c5:cf:cd:5d:98:33:cd:4a:3f:de: 25:0c:73:71 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUbM6DnPAclFYtn1X5wp4i/jL73UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZDQ0RGNUY4QUM1Qzc2M0I1MjE4MDExQzlBQzZGRjU2 NkM3ODUxMTAeFw0yNTEyMTAxOTU5NDZaFw0yNjEyMDkyMDA0NDZaMDMxMTAvBgNV BAMTKDA0QTdFQTU1NkY4OUMxMkRCM0NEM0RERUM5MjYyN0I0NzFCQTk1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy48qaeAEQDHCqV9R5nhk5PF0I eTr12TbC2hwdCeK28m5ilkkfyvSH0vQYI7MsNdkB2a2iORa1IvfGIdN3Pkzu90LO WkDnRACJLTJSmoXP0BB0nhRjbTjZ3nzfKZBU/DphD/E6GXfPEKicm/9kqqzti7ik qz5om72Pb+fPxznqZQFLDzdntzLrG/AO0L5Jc3SM41K+DghCYBipHW/028Ml7Xq5 XExvwYWa/lDXl0n1Ygl02SzjmTdfwL0AM34uGa+Y/UgTcolS1+BMBF9L2PEv1n3V 9ZE6+elAbGsqjSQBOzGZNNBn1ao2tg7CYdR5QXH7Ju7mI6mOcJceT2A8N7rBAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUBKfqVW+JwS2zzT3eySYntHG6lWswHwYDVR0j BBgwFoAU38zfX4rFx2O1IYARyaxv9WbHhREwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2tlVXhTOGVZTTR4NGlFaUxWTkJkaDhZVlVvaDJDcEtNMVZzaXZlWjFQ ZGUvMC9ERkNDREY1RjhBQzVDNzYzQjUyMTgwMTFDOUFDNkZGNTY2Qzc4NTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQ0NERjVGOEFDNUM3NjNC NTIxODAxMUM5QUM2RkY1NjZDNzg1MTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0drZVV4UzhlWU00eDRpRWlMVk5CZGg4WVZVb2gyQ3BLTTFWc2l2ZVoxUGRlLzAv MzIzODMwMzQzYTM3MzUzNzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzEzMDM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBHVwMA0GCSqGSIb3DQEBCwUAA4IBAQC0t1WM 9yYx5xUnh9eYwgTOR9wIpCdQFLAtOAH50ha4IAp72EZtGLKpVzAmjb2+iPY5QjV5 YI198z+g/wMEPf+LP5sZRAQEJ4Ln6rYQltJkKmgwxJlf1uJcH6j72f0LJrEwNWeO KrQCQLkYRS2iLbVA8YfMZWEFBcRxTWY7ITcZOqEMUYEED73/fnezOU9Zm9/k+sF9 9D/sPRRBHdEER9WFkxHNHkHWdvpdPXo3mihjl6jsWzFJPdszd/voSd/0+xG1sBHK gVR3nBFzWuX4sA1fPNJT/fKJB7SK3RDNdTHLIA0YggMO/lqkvxvQ9R/FDADW2cXP zV2YM81KP94lDHNx -----END CERTIFICATE-----Generated at Wed Dec 17 21:44:46 2025 by rpki-client