This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/323830343a373730633a3a2f33322d313238203d3e20323731313531.roa File: 323830343a373730633a3a2f33322d313238203d3e20323731313531.roa (raw, json) Hash identifier: 48UGaUhw5lOAFlcmdxaBBOibUkrTKasIL2u+nKYFpVk= Subject key identifier: 06:C2:84:98:47:D0:09:8D:32:D8:4A:F3:3C:DF:BB:65:8E:1C:20:9F Certificate issuer: /CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8 Certificate serial: 5E09387E120941BF3FD30FC2C7F5C21C23426D3C Authority key identifier: 71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/323830343a373730633a3a2f33322d313238203d3e20323731313531.roa Signing time: Tue 18 Nov 2025 19:00:12 +0000 ROA not before: Tue 18 Nov 2025 18:55:12 +0000 ROA not after: Tue 17 Nov 2026 19:00:12 +0000 asID: 271151 IP address blocks: 2804:770c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:09:38:7e:12:09:41:bf:3f:d3:0f:c2:c7:f5:c2:1c:23:42:6d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8 Validity Not Before: Nov 18 18:55:12 2025 GMT Not After : Nov 17 19:00:12 2026 GMT Subject: CN=06C2849847D0098D32D84AF33CDFBB658E1C209F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:ce:e4:86:25:10:3d:4f:17:c1:89:77:23: 86:90:fe:7c:28:54:35:cd:6c:73:21:ad:01:cb:9d: c3:d5:6e:b6:4c:07:3c:3c:21:05:ae:6d:f5:20:d1: 11:51:87:3c:b2:dc:5a:ab:92:1e:3b:18:dd:5e:50: 24:26:eb:db:03:b3:3f:71:1b:a9:19:f8:a4:be:de: 2a:b3:65:ac:d7:9f:b0:b4:d5:ea:3c:22:cf:d4:51: bb:9d:2b:b0:df:ae:5c:ba:68:8c:fb:7e:90:b0:8d: c0:9c:96:cc:e4:8d:fb:8a:1a:a1:08:8c:8a:17:a1: 60:67:5e:ae:af:a9:e4:28:9a:1a:7d:7b:92:33:cd: c4:ec:b9:89:0e:cd:87:9b:cb:c7:22:07:5b:7d:3b: e3:ef:d2:27:0b:f9:19:31:e7:91:f5:ab:c4:12:cb: 58:8f:06:d6:ad:15:dd:7b:e0:20:5e:0f:c0:d0:0c: 90:bf:82:30:4b:6c:a7:ab:c8:b1:32:95:f6:2f:76: d7:97:7d:80:af:98:c7:bf:b6:b2:79:66:9a:56:63: d9:63:6b:b6:59:b4:09:6d:64:84:6b:5f:25:1b:c3: 73:86:b2:25:98:8f:69:e3:53:42:d2:df:1d:97:dc: e3:2e:0b:63:92:89:7c:14:8a:7f:68:f3:35:05:21: 32:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C2:84:98:47:D0:09:8D:32:D8:4A:F3:3C:DF:BB:65:8E:1C:20:9F X509v3 Authority Key Identifier: keyid:71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/323830343a373730633a3a2f33322d313238203d3e20323731313531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:770c::/32 Signature Algorithm: sha256WithRSAEncryption 6e:02:52:be:0d:aa:98:7a:8e:75:c9:87:89:5a:bd:a7:00:3b: 54:97:a2:35:93:57:7b:51:ca:3c:59:30:27:3e:98:25:d2:88: 87:fb:de:bf:21:23:2d:8b:78:16:04:c5:48:94:ab:c6:0b:79: 12:67:e2:0b:fc:7c:15:84:80:81:07:ec:68:87:52:92:b2:1f: 64:c0:dd:84:f7:50:25:9a:a6:f2:e6:19:27:07:7e:41:7f:48: 4a:7f:f1:89:78:9e:61:90:77:4b:ad:26:ec:81:c3:ce:1f:6e: 8d:c5:e1:b5:6b:2f:dc:83:ae:b9:5c:c3:9a:99:b3:92:d6:98: df:75:fc:7f:15:d1:5f:75:cc:77:ae:f6:6a:15:2d:30:69:77: 4d:85:51:ca:20:b7:47:3f:28:6b:13:e2:2e:e3:14:83:b3:e2: 0b:78:f8:91:29:9d:fd:b3:ca:05:09:3a:0d:a4:bc:ab:48:04: b9:8d:64:ca:5e:65:0b:d1:3f:eb:5a:12:17:e9:7c:b9:57:6f: 96:dd:05:1b:63:cc:af:c7:cb:5c:e8:22:64:73:cf:22:18:b6: 5c:85:2c:ca:2a:48:5b:f3:ae:ba:0f:d1:70:56:8e:26:a4:8d: fe:dd:48:f9:6b:3a:81:c7:d4:ce:7b:ff:50:e4:b9:54:9f:2c: c0:24:0b:d4 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUXgk4fhIJQb8/0w/Cx/XCHCNCbTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFENkU4MTU4RjlFRkU5MUU5QUMwNjdGOTlBQUU1QjM0 RkI3QzdBODAeFw0yNTExMTgxODU1MTJaFw0yNjExMTcxOTAwMTJaMDMxMTAvBgNV BAMTKDA2QzI4NDk4NDdEMDA5OEQzMkQ4NEFGMzNDREZCQjY1OEUxQzIwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKjs7khiUQPU8XwYl3I4aQ/nwo VDXNbHMhrQHLncPVbrZMBzw8IQWubfUg0RFRhzyy3Fqrkh47GN1eUCQm69sDsz9x G6kZ+KS+3iqzZazXn7C01eo8Is/UUbudK7Dfrly6aIz7fpCwjcCclszkjfuKGqEI jIoXoWBnXq6vqeQomhp9e5IzzcTsuYkOzYeby8ciB1t9O+Pv0icL+Rkx55H1q8QS y1iPBtatFd174CBeD8DQDJC/gjBLbKeryLEylfYvdteXfYCvmMe/trJ5ZppWY9lj a7ZZtAltZIRrXyUbw3OGsiWYj2njU0LS3x2X3OMuC2OSiXwUin9o8zUFITI/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUBsKEmEfQCY0y2ErzPN+7ZY4cIJ8wHwYDVR0j BBgwFoAUcdboFY+e/pHprAZ/marls0+3x6gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHA4a0F4UUJWc0xnZWdOUTRFdjNleFh4eHN3RUt6QjJXVVROaXptRWV4 TDIvMC83MUQ2RTgxNThGOUVGRTkxRTlBQzA2N0Y5OUFBRTVCMzRGQjdDN0E4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDZFODE1OEY5RUZFOTFF OUFDMDY3Rjk5QUFFNUIzNEZCN0M3QTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hwOGtBeFFCVnNMZ2VnTlE0RXYzZXhYeHhzd0VLekIyV1VUTml6bUVleEwyLzAv MzIzODMwMzQzYTM3MzczMDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzEzMTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBHcMMA0GCSqGSIb3DQEBCwUAA4IBAQBuAlK+ DaqYeo51yYeJWr2nADtUl6I1k1d7Uco8WTAnPpgl0oiH+96/ISMti3gWBMVIlKvG C3kSZ+IL/HwVhICBB+xoh1KSsh9kwN2E91Almqby5hknB35Bf0hKf/GJeJ5hkHdL rSbsgcPOH26NxeG1ay/cg665XMOambOS1pjfdfx/FdFfdcx3rvZqFS0waXdNhVHK ILdHPyhrE+Iu4xSDs+ILePiRKZ39s8oFCToNpLyrSAS5jWTKXmUL0T/rWhIX6Xy5 V2+W3QUbY8yvx8tc6CJkc88iGLZchSzKKkhb8666D9FwVo4mpI3+3Uj5azqBx9TO e/9Q5LlUnyzAJAvU -----END CERTIFICATE-----Generated at Sat Dec 6 13:32:11 2025 by rpki-client