This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/323830343a6362633a3a2f33352d3335203d3e203532353439.roa File: 323830343a6362633a3a2f33352d3335203d3e203532353439.roa (raw, json) Hash identifier: w4e+ZQxzCyLittgcA02lUy6uAO5AsLZxDCBSB0Y7KqI= Subject key identifier: 71:5B:5B:D7:8C:A3:A1:03:B9:32:07:86:4B:B0:68:84:DA:94:96:46 Certificate issuer: /CN=8C6B0731DF0118BC538E3C43743B0B48B1EE8A30 Certificate serial: 2124D884047584F02F8CE3827AA711D3FCB220D1 Authority key identifier: 8C:6B:07:31:DF:01:18:BC:53:8E:3C:43:74:3B:0B:48:B1:EE:8A:30 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/323830343a6362633a3a2f33352d3335203d3e203532353439.roa Signing time: Mon 17 Nov 2025 17:40:43 +0000 ROA not before: Mon 17 Nov 2025 17:35:43 +0000 ROA not after: Mon 16 Nov 2026 17:40:43 +0000 asID: 52549 IP address blocks: 2804:cbc::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.crl rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:24:d8:84:04:75:84:f0:2f:8c:e3:82:7a:a7:11:d3:fc:b2:20:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B0731DF0118BC538E3C43743B0B48B1EE8A30 Validity Not Before: Nov 17 17:35:43 2025 GMT Not After : Nov 16 17:40:43 2026 GMT Subject: CN=715B5BD78CA3A103B93207864BB06884DA949646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6b:d7:29:96:ef:c3:1a:35:47:fa:10:17:89: 3a:e3:95:b6:a4:3c:7f:75:1b:0d:04:32:f3:3b:2e: 04:5a:37:26:99:af:38:2e:69:4e:f4:cb:f0:7e:56: ee:10:1b:6f:85:77:ac:e6:28:16:a7:3e:c0:e5:ed: 5a:1e:ed:29:e4:d6:a5:3d:a7:95:c4:81:39:2e:29: f9:ba:a9:e8:de:94:a5:f0:12:9c:a5:03:4f:28:ef: b3:90:c0:89:8c:aa:b8:db:fc:4f:7a:d9:96:f7:a7: 9e:fe:f8:31:b9:4a:c0:70:75:6a:9c:41:83:e3:14: 13:bf:dc:95:67:b2:d2:4b:72:6c:e5:ca:43:0d:26: 12:4e:63:e0:bf:41:35:71:42:ff:ac:ef:a6:2e:d0: 3b:e1:85:b6:d8:50:49:8f:c4:7d:31:c4:d8:3a:16: d1:77:ea:d2:56:53:d1:5a:fe:50:34:d0:28:e0:01: a9:fa:bb:d8:12:82:d7:71:19:f8:0b:4b:1d:75:e6: da:bb:9a:7b:80:ee:d8:c3:7c:af:d5:82:82:7d:5d: 31:63:3e:57:5b:ae:9c:6c:50:e2:8f:8c:36:f4:f9: 4b:69:b0:e0:42:9f:25:8c:48:67:13:d6:66:96:bd: 98:7a:c3:54:10:21:a7:c0:da:87:d3:91:df:b2:bc: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5B:5B:D7:8C:A3:A1:03:B9:32:07:86:4B:B0:68:84:DA:94:96:46 X509v3 Authority Key Identifier: keyid:8C:6B:07:31:DF:01:18:BC:53:8E:3C:43:74:3B:0B:48:B1:EE:8A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6B0731DF0118BC538E3C43743B0B48B1EE8A30.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/323830343a6362633a3a2f33352d3335203d3e203532353439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:cbc::/35 Signature Algorithm: sha256WithRSAEncryption 94:db:0f:50:43:af:06:f2:c9:67:d7:83:82:cd:a8:69:cd:48: 67:6e:36:aa:37:59:35:de:46:fe:cb:85:e7:dc:9e:84:b6:d5: 6e:e4:cf:a1:15:eb:fe:5c:b8:2f:40:57:1e:a3:bd:ca:1b:3e: e8:23:29:48:9d:b7:d5:7a:af:a7:5c:da:d5:2f:8d:c6:66:7d: 2b:6b:b5:a4:93:ad:9d:3d:26:cd:e5:a8:7f:e1:bc:ab:b7:96: 28:c1:1a:da:4f:c1:d4:6a:b6:d2:1c:9b:3c:38:f1:cc:47:57: 43:2f:0a:1f:5e:ce:8c:48:69:c8:3e:b3:eb:2d:18:15:a8:63: 5c:79:43:74:81:93:df:34:ab:30:c3:47:16:8a:d0:e8:68:04: 53:ab:a6:45:c4:3f:1c:3f:21:d2:53:00:1e:e9:f5:5e:b5:bf: c5:fc:1a:8d:5c:8b:8e:1a:04:80:cc:e3:39:37:49:1f:08:13: 84:9a:96:ec:da:71:19:e6:03:09:ef:b4:c9:a1:26:78:61:e8: c6:e0:13:ff:3b:f3:8b:73:42:ab:f6:ef:35:29:eb:fc:fd:0e: 61:4e:41:bb:24:8d:44:e4:ed:a6:fb:34:6e:14:b5:4b:6d:e7: b4:09:80:e5:a7:9b:d8:37:21:79:4c:ba:6c:84:3d:e9:1e:4e: 3c:32:6c:5f -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUISTYhAR1hPAvjOOCeqcR0/yyINEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjA3MzFERjAxMThCQzUzOEUzQzQzNzQzQjBCNDhC MUVFOEEzMDAeFw0yNTExMTcxNzM1NDNaFw0yNjExMTYxNzQwNDNaMDMxMTAvBgNV BAMTKDcxNUI1QkQ3OENBM0ExMDNCOTMyMDc4NjRCQjA2ODg0REE5NDk2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTa9cplu/DGjVH+hAXiTrjlbak PH91Gw0EMvM7LgRaNyaZrzguaU70y/B+Vu4QG2+Fd6zmKBanPsDl7Voe7Snk1qU9 p5XEgTkuKfm6qejelKXwEpylA08o77OQwImMqrjb/E962Zb3p57++DG5SsBwdWqc QYPjFBO/3JVnstJLcmzlykMNJhJOY+C/QTVxQv+s76Yu0DvhhbbYUEmPxH0xxNg6 FtF36tJWU9Fa/lA00CjgAan6u9gSgtdxGfgLSx115tq7mnuA7tjDfK/VgoJ9XTFj PldbrpxsUOKPjDb0+UtpsOBCnyWMSGcT1maWvZh6w1QQIafA2ofTkd+yvLYRAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUcVtb14yjoQO5MgeGS7BohNqUlkYwHwYDVR0j BBgwFoAUjGsHMd8BGLxTjjxDdDsLSLHuijAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR204TERnTFNXcnY2SG9BWUMxQjJtTUhwRUhQZm5aS21WeEVjcVdjRHY5 cjYvMC84QzZCMDczMURGMDExOEJDNTM4RTNDNDM3NDNCMEI0OEIxRUU4QTMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDNkIwNzMxREYwMTE4QkM1 MzhFM0M0Mzc0M0IwQjQ4QjFFRThBMzAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dtOExEZ0xTV3J2NkhvQVlDMUIybU1IcEVIUGZuWkttVnhFY3FXY0R2OXI2LzAv MzIzODMwMzQzYTYzNjI2MzNhM2EyZjMzMzUyZDMzMzUyMDNkM2UyMDM1MzIzNTM0 Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgUoBAy8ADANBgkqhkiG9w0BAQsFAAOCAQEAlNsPUEOvBvLJ Z9eDgs2oac1IZ242qjdZNd5G/suF59yehLbVbuTPoRXr/ly4L0BXHqO9yhs+6CMp SJ231Xqvp1za1S+NxmZ9K2u1pJOtnT0mzeWof+G8q7eWKMEa2k/B1Gq20hybPDjx zEdXQy8KH17OjEhpyD6z6y0YFahjXHlDdIGT3zSrMMNHForQ6GgEU6umRcQ/HD8h 0lMAHun1XrW/xfwajVyLjhoEgMzjOTdJHwgThJqW7NpxGeYDCe+0yaEmeGHoxuAT /zvzi3NCq/bvNSnr/P0OYU5BuySNROTtpvs0bhS1S23ntAmA5aeb2DcheUy6bIQ9 6R5OPDJsXw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:27 2025 by rpki-client