This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d313238203d3e20323635323639.roa File: 323830343a326434303a3a2f33322d313238203d3e20323635323639.roa (raw, json) Hash identifier: UblZM4f0pv2hQ1nv6nm9Uaetor2nisZckhAIoNk6Ol0= Subject key identifier: 53:A4:84:A6:A1:79:0E:DC:A6:88:9E:FC:7B:0C:E6:F5:2E:D3:20:FC Certificate issuer: /CN=B990507C540B7B058E64E10FCBAEAF4DF59A8231 Certificate serial: 2044981E3912D83E3B2BC6768CE0AD5E4D072082 Authority key identifier: B9:90:50:7C:54:0B:7B:05:8E:64:E1:0F:CB:AE:AF:4D:F5:9A:82:31 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B990507C540B7B058E64E10FCBAEAF4DF59A8231.cer Subject info access: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d313238203d3e20323635323639.roa Signing time: Wed 17 Dec 2025 20:55:27 +0000 ROA not before: Wed 17 Dec 2025 20:50:27 +0000 ROA not after: Wed 16 Dec 2026 20:55:27 +0000 asID: 265269 IP address blocks: 2804:2d40::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/B990507C540B7B058E64E10FCBAEAF4DF59A8231.crl rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/B990507C540B7B058E64E10FCBAEAF4DF59A8231.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B990507C540B7B058E64E10FCBAEAF4DF59A8231.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 17:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:44:98:1e:39:12:d8:3e:3b:2b:c6:76:8c:e0:ad:5e:4d:07:20:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B990507C540B7B058E64E10FCBAEAF4DF59A8231 Validity Not Before: Dec 17 20:50:27 2025 GMT Not After : Dec 16 20:55:27 2026 GMT Subject: CN=53A484A6A1790EDCA6889EFC7B0CE6F52ED320FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:f3:c1:93:01:47:b8:9f:5f:1a:cc:de:60: 2d:14:0e:2c:ff:b4:de:24:fe:19:f3:2c:77:0d:5d: 75:9c:40:01:34:a5:5b:cc:f9:76:3b:73:02:69:f8: bb:dc:da:3b:c2:02:16:12:f8:75:22:cc:53:e7:23: ed:01:a9:af:8b:47:fd:bc:37:31:d6:92:a0:7d:56: cf:5e:64:a1:cf:fc:7e:2b:c5:ce:80:69:61:c2:6f: f2:53:92:de:e0:0d:b2:f5:80:c0:51:d8:92:89:eb: 31:b9:b1:90:d0:76:dc:07:b6:99:ec:8a:86:7b:e0: af:df:c8:17:ef:cf:6f:4b:ee:af:70:4f:52:2f:7a: 16:76:15:33:80:40:cf:dc:cd:cf:d3:9a:a6:00:d5: 3d:83:76:76:cf:54:c9:7e:76:be:69:ac:eb:69:e8: 12:15:1c:eb:69:76:e9:23:3c:a1:ce:56:89:93:04: 41:8c:bd:d4:92:47:61:df:07:00:1c:4a:33:cf:a2: 1b:ca:c7:5c:28:09:79:73:1b:d9:bf:31:b5:ef:48: 46:b2:35:4f:42:40:b9:5b:b5:df:de:d4:ff:ed:0a: 9b:e3:e9:c8:a9:52:ae:ad:fb:cb:d8:91:50:e2:00: d9:7f:e1:ef:97:74:6c:01:a9:0d:d7:7c:a4:2b:06: 32:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A4:84:A6:A1:79:0E:DC:A6:88:9E:FC:7B:0C:E6:F5:2E:D3:20:FC X509v3 Authority Key Identifier: keyid:B9:90:50:7C:54:0B:7B:05:8E:64:E1:0F:CB:AE:AF:4D:F5:9A:82:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/B990507C540B7B058E64E10FCBAEAF4DF59A8231.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B990507C540B7B058E64E10FCBAEAF4DF59A8231.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d313238203d3e20323635323639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2d40::/32 Signature Algorithm: sha256WithRSAEncryption b3:66:a8:3d:0f:ce:c4:c1:89:77:a6:4c:1e:cc:86:af:49:36: 0e:77:b0:b9:5a:42:70:ca:69:d5:84:75:e0:6c:65:66:72:a5: dc:4c:a9:47:85:bc:ad:fd:45:f3:68:37:7e:ad:be:a3:b7:46: e5:34:5c:fc:37:c2:32:ff:c9:5e:3a:83:e3:20:f5:62:6f:a1: ab:45:d3:e0:33:12:c2:e7:30:09:c5:29:e4:dd:f0:ef:9e:91: 95:a4:7e:6f:e4:14:d0:72:90:41:4b:d0:2c:9c:c0:cd:1e:04: 0a:51:7d:b3:50:c2:76:ed:c6:bf:16:96:fa:8e:8f:07:da:51: bc:cd:52:e1:95:72:0b:23:02:0a:27:47:88:b2:24:ef:2e:61: f5:a6:39:b7:af:35:b0:6c:19:72:bf:ef:11:ca:71:86:3c:87: f5:e9:5a:05:89:73:7c:35:f0:19:f7:dc:a1:3b:b4:19:d4:3a: 22:0a:00:88:21:0f:21:f8:19:c0:23:31:5c:b0:d5:1e:d1:c1: fe:84:9a:c7:11:9e:ed:41:b0:1b:30:29:11:1e:1b:3f:de:72: 77:f8:d3:89:cf:e3:d1:b0:fa:ba:8e:56:f0:d1:fd:97:86:14: 1c:0c:8d:6a:49:13:33:73:39:10:3d:bf:72:dd:5c:7d:f0:c5: 90:fe:c0:dc -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUIESYHjkS2D47K8Z2jOCtXk0HIIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDUwN0M1NDBCN0IwNThFNjRFMTBGQ0JBRUFGNERG NTlBODIzMTAeFw0yNTEyMTcyMDUwMjdaFw0yNjEyMTYyMDU1MjdaMDMxMTAvBgNV BAMTKDUzQTQ4NEE2QTE3OTBFRENBNjg4OUVGQzdCMENFNkY1MkVEMzIwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHh/PBkwFHuJ9fGszeYC0UDiz/ tN4k/hnzLHcNXXWcQAE0pVvM+XY7cwJp+Lvc2jvCAhYS+HUizFPnI+0Bqa+LR/28 NzHWkqB9Vs9eZKHP/H4rxc6AaWHCb/JTkt7gDbL1gMBR2JKJ6zG5sZDQdtwHtpns ioZ74K/fyBfvz29L7q9wT1IvehZ2FTOAQM/czc/TmqYA1T2DdnbPVMl+dr5prOtp 6BIVHOtpdukjPKHOVomTBEGMvdSSR2HfBwAcSjPPohvKx1woCXlzG9m/MbXvSEay NU9CQLlbtd/e1P/tCpvj6cipUq6t+8vYkVDiANl/4e+XdGwBqQ3XfKQrBjKjAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUU6SEpqF5DtymiJ78ewzm9S7TIPwwHwYDVR0j BBgwFoAUuZBQfFQLewWOZOEPy66vTfWagjEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3JuSHFmcWt4SldNbmIxZWFpNGFxa3JHczVrS1NEaWpmYXBuSk11Mlhv THcvMC9COTkwNTA3QzU0MEI3QjA1OEU2NEUxMEZDQkFFQUY0REY1OUE4MjMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5OTA1MDdDNTQwQjdCMDU4 RTY0RTEwRkNCQUVBRjRERjU5QTgyMzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dybkhxZnFreEpXTW5iMWVhaTRhcWtyR3M1a0tTRGlqZmFwbkpNdTJYb0x3LzAv MzIzODMwMzQzYTMyNjQzNDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzUzMjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBC1AMA0GCSqGSIb3DQEBCwUAA4IBAQCzZqg9 D87EwYl3pkwezIavSTYOd7C5WkJwymnVhHXgbGVmcqXcTKlHhbyt/UXzaDd+rb6j t0blNFz8N8Iy/8leOoPjIPVib6GrRdPgMxLC5zAJxSnk3fDvnpGVpH5v5BTQcpBB S9AsnMDNHgQKUX2zUMJ27ca/Fpb6jo8H2lG8zVLhlXILIwIKJ0eIsiTvLmH1pjm3 rzWwbBlyv+8RynGGPIf16VoFiXN8NfAZ99yhO7QZ1DoiCgCIIQ8h+BnAIzFcsNUe 0cH+hJrHEZ7tQbAbMCkRHhs/3nJ3+NOJz+PRsPq6jlbw0f2XhhQcDI1qSRMzczkQ Pb9y3Vx98MWQ/sDc -----END CERTIFICATE-----Generated at Thu Dec 18 22:11:57 2025 by rpki-client