This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa File: 323830343a313131633a3a2f33322d313238203d3e203532383138.roa (raw, json) Hash identifier: 5KNPCFzdFdX6UAkOorFdPv5xlNbe8CBYvX2EE36DsPk= Subject key identifier: C8:47:67:20:64:FB:F4:97:90:E3:FC:BD:DA:85:BA:94:34:11:59:5D Certificate issuer: /CN=3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42 Certificate serial: 5E6E0E538497F1CDDA94BBA18D7DC19D4AB8CA03 Authority key identifier: 3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer Subject info access: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa Signing time: Wed 26 Nov 2025 17:28:41 +0000 ROA not before: Wed 26 Nov 2025 17:23:41 +0000 ROA not after: Wed 25 Nov 2026 17:28:41 +0000 asID: 52818 IP address blocks: 2804:111c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.crl rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 20:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6e:0e:53:84:97:f1:cd:da:94:bb:a1:8d:7d:c1:9d:4a:b8:ca:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42 Validity Not Before: Nov 26 17:23:41 2025 GMT Not After : Nov 25 17:28:41 2026 GMT Subject: CN=C847672064FBF49790E3FCBDDA85BA943411595D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:de:f3:7d:7c:35:8e:30:3b:bd:58:af:4b: e1:63:d0:8b:f0:f0:38:f7:42:cc:83:7d:bf:3f:4b: 5e:2f:48:a5:1f:c3:04:9d:f8:f7:c1:a0:c9:91:b7: 33:a5:3f:13:df:4c:d3:11:77:f0:5c:0d:e8:8c:55: 84:13:0b:3d:b9:5f:b3:17:ff:08:97:40:91:05:12: 05:74:4e:a6:e2:ef:2d:da:d6:02:df:bf:81:3e:0b: 7a:c6:98:41:85:33:1a:09:0e:c0:69:76:55:29:4a: f2:b1:58:c3:76:b5:9b:b3:a0:f1:22:d8:0d:52:ee: f7:4a:4d:bf:f5:46:91:f1:52:3f:d9:d4:94:1b:e6: be:cf:f2:79:6f:7d:e5:12:fe:29:cb:c2:7a:f5:f8: 6e:d8:10:b9:88:d6:00:48:59:57:a9:cd:ef:7e:f6: fb:e7:c6:9a:75:b9:81:2d:1d:51:b0:ed:bf:59:9b: 7e:7e:0b:d0:ed:f8:2a:f9:c5:ad:97:1f:6e:d9:60: c7:a1:af:de:46:0e:e8:a8:ab:56:82:83:63:ce:14: 80:af:b5:35:36:ec:b7:13:66:52:8a:b5:75:34:54: 24:03:d1:05:7b:d0:00:dc:08:6b:34:a4:2a:ce:0d: c5:90:7d:43:d9:81:4c:c0:ef:c6:cd:20:7d:c8:a9: 02:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:47:67:20:64:FB:F4:97:90:E3:FC:BD:DA:85:BA:94:34:11:59:5D X509v3 Authority Key Identifier: keyid:3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:111c::/32 Signature Algorithm: sha256WithRSAEncryption b2:52:51:4f:4d:0e:92:32:c1:b0:ee:f6:85:d3:c5:e3:3b:62: cb:e2:1d:12:c7:81:31:d3:12:26:46:d0:16:a1:10:a4:32:78: 8d:76:b3:f7:0b:d3:3b:6b:9e:0a:ed:f4:a8:d7:86:83:ba:ff: dc:45:ce:38:38:27:e6:cc:f8:12:0f:3d:27:32:5b:4a:03:e6: 0f:9e:7b:5b:ff:e0:ff:49:ed:46:42:2f:76:c1:69:7d:84:50: b0:aa:a6:26:dd:6c:53:86:97:c9:1c:4c:6f:5f:cf:a3:89:c3: 12:c9:99:9f:46:d1:4d:52:09:1d:55:cb:28:96:be:c9:a8:8d: c6:33:ec:af:f4:c4:e3:8c:ea:6e:51:3c:9c:42:90:f7:53:5c: 2a:4b:6b:f7:f2:7c:97:8f:d7:ce:20:3c:15:81:04:4c:8e:85: 14:fe:e1:93:e4:cb:7a:6e:4b:3a:b8:ba:68:5c:1d:a5:6a:b3: 70:05:6e:6d:0e:15:e7:86:05:0d:48:1d:5a:51:93:e4:db:f4: c7:29:c3:4e:ac:c5:d8:2d:82:2f:1b:18:b1:4d:69:7b:0c:67: 47:80:d8:e0:3b:54:7b:32:a8:e5:b9:1b:db:7d:83:83:8e:3e: 28:b1:fd:93:dd:ef:8c:cc:68:d6:3f:02:b1:06:b1:38:08:6c: c8:77:94:6d -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUXm4OU4SX8c3alLuhjX3BnUq4ygMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyODdDNjNEQkIzRUQwRDA5RURCNzBBMzQ5M0IwMkQ2 Q0ZERkI0MjAeFw0yNTExMjYxNzIzNDFaFw0yNjExMjUxNzI4NDFaMDMxMTAvBgNV BAMTKEM4NDc2NzIwNjRGQkY0OTc5MEUzRkNCRERBODVCQTk0MzQxMTU5NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8d7zfXw1jjA7vVivS+Fj0Ivw 8Dj3QsyDfb8/S14vSKUfwwSd+PfBoMmRtzOlPxPfTNMRd/BcDeiMVYQTCz25X7MX /wiXQJEFEgV0Tqbi7y3a1gLfv4E+C3rGmEGFMxoJDsBpdlUpSvKxWMN2tZuzoPEi 2A1S7vdKTb/1RpHxUj/Z1JQb5r7P8nlvfeUS/inLwnr1+G7YELmI1gBIWVepze9+ 9vvnxpp1uYEtHVGw7b9Zm35+C9Dt+Cr5xa2XH27ZYMehr95GDuioq1aCg2POFICv tTU27LcTZlKKtXU0VCQD0QV70ADcCGs0pCrODcWQfUPZgUzA78bNIH3IqQIvAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUyEdnIGT79JeQ4/y92oW6lDQRWV0wHwYDVR0j BBgwFoAUPih8Y9uz7Q0J7bcKNJOwLWz9+0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGhZTTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2Ey TXIvMC8zRTI4N0M2M0RCQjNFRDBEMDlFREI3MEEzNDkzQjAyRDZDRkRGQjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjg3QzYzREJCM0VEMEQw OUVEQjcwQTM0OTNCMDJENkNGREZCNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hoWU01ajdZOFg3WGFvUTZzUG1yTHRGU1RaWWlaRXBQZHN6OUV6ZmNhMk1yLzAv MzIzODMwMzQzYTMxMzEzMTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQRHDANBgkqhkiG9w0BAQsFAAOCAQEAslJRT00O kjLBsO72hdPF4ztiy+IdEseBMdMSJkbQFqEQpDJ4jXaz9wvTO2ueCu30qNeGg7r/ 3EXOODgn5sz4Eg89JzJbSgPmD557W//g/0ntRkIvdsFpfYRQsKqmJt1sU4aXyRxM b1/Po4nDEsmZn0bRTVIJHVXLKJa+yaiNxjPsr/TE44zqblE8nEKQ91NcKktr9/J8 l4/XziA8FYEETI6FFP7hk+TLem5LOri6aFwdpWqzcAVubQ4V54YFDUgdWlGT5Nv0 xynDTqzF2C2CLxsYsU1pewxnR4DY4DtUezKo5bkb232Dg44+KLH9k93vjMxo1j8C sQaxOAhsyHeUbQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:28 2025 by rpki-client