This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa File: 323830343a313332343a3a2f33322d3332203d3e20323633353138.roa (raw, json) Hash identifier: gW8ekPbBZpYh1Y2WMFE5qxPAAyCU0HAIe/2CwBdXvIg= Subject key identifier: D4:44:3C:C6:C7:7A:D0:D6:C9:97:FE:1D:17:93:D5:33:F4:EC:DD:84 Certificate issuer: /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27 Certificate serial: 2F0C3F1B258D9D2167C1501B4BC647AE171B1531 Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa Signing time: Mon 01 Dec 2025 23:19:46 +0000 ROA not before: Mon 01 Dec 2025 23:14:46 +0000 ROA not after: Mon 30 Nov 2026 23:19:46 +0000 asID: 263518 IP address blocks: 2804:1324::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 18:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0c:3f:1b:25:8d:9d:21:67:c1:50:1b:4b:c6:47:ae:17:1b:15:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27 Validity Not Before: Dec 1 23:14:46 2025 GMT Not After : Nov 30 23:19:46 2026 GMT Subject: CN=D4443CC6C77AD0D6C997FE1D1793D533F4ECDD84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:08:06:eb:a1:63:fe:b1:74:f5:5c:ea:af:64: f4:58:9c:7c:cf:7d:0d:10:9d:da:5f:36:66:5e:27: 92:a5:15:27:0e:5c:ce:cf:e9:c8:6d:c2:a2:a9:14: 4a:a9:76:09:e9:c3:49:e3:c0:d5:d4:46:c0:85:40: 78:a7:8d:a3:a3:6c:00:04:e4:15:0c:21:ec:16:3a: 1e:c3:a2:93:76:a4:aa:ea:10:a7:14:86:a9:5f:90: 78:40:9e:04:5a:45:8b:5e:7b:f4:79:c2:7f:3e:fd: 09:68:06:07:b6:55:1f:5e:ef:df:11:43:b2:23:34: 81:53:64:22:77:2d:78:44:e4:d4:02:de:43:a6:38: f0:18:55:c8:f9:b6:bd:b0:83:99:a0:4b:4c:ab:b9: cf:c9:bf:5e:19:70:4e:96:91:c5:f9:96:a4:cb:5d: 81:c8:4d:2d:cb:60:08:00:56:10:53:a7:73:07:f9: b9:ef:c7:31:8f:65:19:13:23:af:d1:f9:d8:8a:2f: 36:94:21:1c:3b:38:a1:e0:a6:a0:c4:d8:3f:b9:6d: 1b:3f:5b:5d:cc:a1:d1:98:74:5e:7e:0e:29:42:0c: 3b:4d:4a:5b:98:fa:da:08:d3:6e:a2:c5:2e:a8:3f: b6:95:08:48:63:84:7b:a1:7c:45:15:d0:71:41:0d: a1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:44:3C:C6:C7:7A:D0:D6:C9:97:FE:1D:17:93:D5:33:F4:EC:DD:84 X509v3 Authority Key Identifier: keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1324::/32 Signature Algorithm: sha256WithRSAEncryption 04:e1:85:cd:b4:8b:a5:bf:8c:eb:b5:86:a9:72:7d:9c:40:47: e7:4a:e9:55:2f:58:9a:18:aa:6d:8a:42:a4:b4:91:ac:e3:78: 95:19:6d:d6:73:25:63:be:2b:e5:81:b6:7d:5f:dd:f2:95:e7: 0c:0f:b9:44:31:b8:5d:3e:44:c9:85:3e:ee:28:4f:1c:9e:85: 80:5c:23:53:f7:8b:c5:65:ff:bc:b7:68:8e:c2:83:a9:e8:89: c0:14:43:c0:7b:d9:13:65:60:10:34:a2:4c:05:e6:5e:38:a0: 96:67:a1:20:92:60:4e:87:ee:40:38:9b:1b:a1:b6:72:99:1f: 09:00:68:ba:b4:2b:5d:21:f6:4c:d9:22:5c:f2:9c:50:61:0f: 3c:fa:db:81:fa:d5:88:1d:7d:97:74:a3:1f:ff:d1:c1:9c:ee: e8:a0:f8:21:b5:ea:17:2c:fd:61:89:77:92:db:d5:ce:54:78: e8:b7:72:59:0c:9c:4e:c4:83:e6:12:9e:ec:05:bc:73:55:41: 71:6f:af:9f:2b:1f:86:4a:5b:d1:e2:99:8a:8b:87:82:8b:87: 7d:c8:68:49:96:6e:f3:29:5c:c8:5a:64:75:7e:dc:96:c5:08: ba:16:9b:6a:59:d0:a6:6e:8b:cd:53:16:60:08:37:e9:3c:37: fc:b1:a0:98 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIULww/GyWNnSFnwVAbS8ZHrhcbFTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz ODc3NUUyNzAeFw0yNTEyMDEyMzE0NDZaFw0yNjExMzAyMzE5NDZaMDMxMTAvBgNV BAMTKEQ0NDQzQ0M2Qzc3QUQwRDZDOTk3RkUxRDE3OTNENTMzRjRFQ0REODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRCAbroWP+sXT1XOqvZPRYnHzP fQ0QndpfNmZeJ5KlFScOXM7P6chtwqKpFEqpdgnpw0njwNXURsCFQHinjaOjbAAE 5BUMIewWOh7DopN2pKrqEKcUhqlfkHhAngRaRYtee/R5wn8+/QloBge2VR9e798R Q7IjNIFTZCJ3LXhE5NQC3kOmOPAYVcj5tr2wg5mgS0yruc/Jv14ZcE6WkcX5lqTL XYHITS3LYAgAVhBTp3MH+bnvxzGPZRkTI6/R+diKLzaUIRw7OKHgpqDE2D+5bRs/ W13ModGYdF5+DilCDDtNSluY+toI026ixS6oP7aVCEhjhHuhfEUV0HFBDaFJAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU1EQ8xsd60NbJl/4dF5PVM/Ts3YQwHwYDVR0j BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv MzIzODMwMzQzYTMxMzMzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz MzUzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQTJDANBgkqhkiG9w0BAQsFAAOCAQEABOGFzbSL pb+M67WGqXJ9nEBH50rpVS9YmhiqbYpCpLSRrON4lRlt1nMlY74r5YG2fV/d8pXn DA+5RDG4XT5EyYU+7ihPHJ6FgFwjU/eLxWX/vLdojsKDqeiJwBRDwHvZE2VgEDSi TAXmXjiglmehIJJgTofuQDibG6G2cpkfCQBourQrXSH2TNkiXPKcUGEPPPrbgfrV iB19l3SjH//RwZzu6KD4IbXqFyz9YYl3ktvVzlR46LdyWQycTsSD5hKe7AW8c1VB cW+vnysfhkpb0eKZiouHgouHfchoSZZu8ylcyFpkdX7clsUIuhabalnQpm6LzVMW YAg36Tw3/LGgmA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:58 2025 by rpki-client