This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa File: 323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (raw, json) Hash identifier: saP2raSwjjUMU6Gw2e967qD4bKy9XfiBZPNhMImeILc= Subject key identifier: F1:88:F6:B3:0C:2E:B7:F4:C2:0D:36:03:CF:52:0E:D3:D6:C3:D3:5E Certificate issuer: /CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74 Certificate serial: 67E60FE858C0CBAD05C8EA358967AB9B3B97660D Authority key identifier: 17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa Signing time: Mon 10 Nov 2025 21:05:51 +0000 ROA not before: Mon 10 Nov 2025 21:00:51 +0000 ROA not after: Mon 09 Nov 2026 21:05:51 +0000 asID: 273728 IP address blocks: 2804:8b5c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e6:0f:e8:58:c0:cb:ad:05:c8:ea:35:89:67:ab:9b:3b:97:66:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74 Validity Not Before: Nov 10 21:00:51 2025 GMT Not After : Nov 9 21:05:51 2026 GMT Subject: CN=F188F6B30C2EB7F4C20D3603CF520ED3D6C3D35E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:44:b7:48:6c:40:38:ea:46:7a:5c:7a:dd: f4:ae:2c:0b:c2:28:ed:aa:b6:83:9f:c3:e8:fa:94: 83:69:11:fb:af:99:c5:5d:70:13:e1:5d:34:6a:97: 19:d3:f1:9e:c6:7e:e5:c5:0f:76:ff:25:6e:df:50: bd:54:f8:f8:85:97:d4:23:f6:f0:a5:45:4f:dd:16: ee:d4:f7:b3:4b:91:7d:15:f8:79:6a:da:0d:42:0e: 55:f4:93:17:ed:29:e9:ab:ad:10:34:9e:f6:a0:4e: dc:b1:2d:fe:3e:fc:33:0d:d0:54:93:62:fa:8f:3a: d4:fd:51:e6:fd:ed:92:1f:a3:10:36:3b:0e:0a:d2: 94:bb:c3:6e:ca:72:c3:0d:df:6a:f4:70:ba:bd:26: 80:55:fe:4a:47:fd:19:bd:1d:0f:d7:0a:df:5b:46: 91:57:94:14:10:8c:2f:60:a0:03:70:b0:6f:84:12: 96:6a:fd:5d:b5:2c:d2:88:9c:09:fc:ec:fb:e4:02: d9:41:62:e4:3d:49:d6:bc:f6:3f:5b:e0:7a:9c:da: e2:d8:7f:39:6e:a0:1b:e1:9b:f7:e7:cf:7b:b2:a8: dc:d5:d1:df:f7:24:26:51:a5:ee:90:30:d0:34:a2: 60:53:03:18:cb:3f:29:3f:2d:ad:1a:b8:b2:8d:68: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:88:F6:B3:0C:2E:B7:F4:C2:0D:36:03:CF:52:0E:D3:D6:C3:D3:5E X509v3 Authority Key Identifier: keyid:17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8b5c:4000::/34 Signature Algorithm: sha256WithRSAEncryption 47:33:ad:31:84:55:7a:82:06:7d:bf:8e:e5:41:5b:fa:f8:2b: 6a:f3:80:9c:38:a1:26:d2:6a:0a:d6:6c:5f:98:ff:e7:23:61: 6e:b8:ab:3e:74:9c:b2:5d:7a:8d:c7:8d:08:5a:17:e5:eb:05: 3c:1f:9a:c2:37:ea:27:07:c8:be:81:b0:ab:f5:96:80:0f:f5: 6d:8f:cb:45:43:69:3b:dd:70:f5:33:cb:9a:c8:8a:13:bd:8b: 02:13:c7:2b:ed:e9:20:8f:0c:47:56:92:10:a6:80:6d:50:87: a9:98:39:04:ff:2a:26:9c:c3:73:28:25:05:76:6c:9f:a6:70: 33:d1:13:66:31:07:f8:6c:13:f7:bb:8a:34:66:f6:c1:95:d7: f7:7f:dd:e2:c4:0b:ba:13:36:61:aa:bd:1b:db:7d:e3:c0:31: 65:4b:f8:0f:aa:ee:4c:00:63:a6:70:16:9e:52:b4:7f:e4:94: 90:32:c5:6c:6c:c4:c5:34:cf:58:d5:60:84:ec:a5:c2:15:4d: 15:78:39:f6:6a:5e:f3:6d:f7:45:2b:1a:c1:8c:74:7b:b3:86: 5c:46:eb:86:d9:c8:23:8a:73:2d:78:9e:c4:97:35:d0:c8:d0: 08:37:03:96:51:a0:bd:d5:2f:1d:4d:4f:d4:98:81:fb:d0:e7: 7b:5f:90:8b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUZ+YP6FjAy60FyOo1iWermzuXZg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBQTY0RUI4RDAwODRDRkVFODlCRjYxOTM3MUJEQ0RC NDFGREI3NDAeFw0yNTExMTAyMTAwNTFaFw0yNjExMDkyMTA1NTFaMDMxMTAvBgNV BAMTKEYxODhGNkIzMEMyRUI3RjRDMjBEMzYwM0NGNTIwRUQzRDZDM0QzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1z0S3SGxAOOpGelx63fSuLAvC KO2qtoOfw+j6lINpEfuvmcVdcBPhXTRqlxnT8Z7GfuXFD3b/JW7fUL1U+PiFl9Qj 9vClRU/dFu7U97NLkX0V+Hlq2g1CDlX0kxftKemrrRA0nvagTtyxLf4+/DMN0FST YvqPOtT9Ueb97ZIfoxA2Ow4K0pS7w27KcsMN32r0cLq9JoBV/kpH/Rm9HQ/XCt9b RpFXlBQQjC9goANwsG+EEpZq/V21LNKInAn87PvkAtlBYuQ9Sda89j9b4Hqc2uLY fzluoBvhm/fnz3uyqNzV0d/3JCZRpe6QMNA0omBTAxjLPyk/La0auLKNaH9PAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU8Yj2swwut/TCDTYDz1IO09bD014wHwYDVR0j BBgwFoAUF6pk640AhM/uib9hk3G9zbQf23QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR Wm8vMC8xN0FBNjRFQjhEMDA4NENGRUU4OUJGNjE5MzcxQkRDREI0MUZEQjc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QUE2NEVCOEQwMDg0Q0ZF RTg5QkY2MTkzNzFCRENEQjQxRkRCNzQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzAv MzIzODMwMzQzYTM4NjIzNTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMzM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEi1xAMA0GCSqGSIb3DQEBCwUA A4IBAQBHM60xhFV6ggZ9v47lQVv6+Ctq84CcOKEm0moK1mxfmP/nI2FuuKs+dJyy XXqNx40IWhfl6wU8H5rCN+onB8i+gbCr9ZaAD/Vtj8tFQ2k73XD1M8uayIoTvYsC E8cr7ekgjwxHVpIQpoBtUIepmDkE/yomnMNzKCUFdmyfpnAz0RNmMQf4bBP3u4o0 ZvbBldf3f93ixAu6EzZhqr0b233jwDFlS/gPqu5MAGOmcBaeUrR/5JSQMsVsbMTF NM9Y1WCE7KXCFU0VeDn2al7zbfdFKxrBjHR7s4ZcRuuG2cgjinMteJ7ElzXQyNAI NwOWUaC91S8dTU/UmIH70Od7X5CL -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:53 2025 by rpki-client