This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa File: 323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (raw, json) Hash identifier: 9ovo1Ce+Kis2wysgBAJ4x6E8k6WfsbCS+XtsnXzHmKQ= Subject key identifier: C8:A3:8F:E3:97:2D:8D:E3:63:37:2A:5F:80:9D:C2:9D:ED:0F:6F:27 Certificate issuer: /CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74 Certificate serial: 5C66B29CABE9FE4DF3E91E666AA49083783FDFDD Authority key identifier: 17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa Signing time: Mon 10 Nov 2025 21:05:51 +0000 ROA not before: Mon 10 Nov 2025 21:00:51 +0000 ROA not after: Mon 09 Nov 2026 21:05:51 +0000 asID: 273728 IP address blocks: 2804:8b5c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:66:b2:9c:ab:e9:fe:4d:f3:e9:1e:66:6a:a4:90:83:78:3f:df:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74 Validity Not Before: Nov 10 21:00:51 2025 GMT Not After : Nov 9 21:05:51 2026 GMT Subject: CN=C8A38FE3972D8DE363372A5F809DC29DED0F6F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:19:76:c1:24:27:71:d7:c1:97:cf:c3:d7:25: db:2f:58:e0:de:cd:21:2d:14:75:18:eb:2f:ae:df: 5d:b8:e5:67:a9:21:ec:60:02:a4:db:df:b5:d3:70: a6:93:5c:2d:25:77:71:7d:c0:69:de:9c:c3:44:82: 99:65:cf:41:3e:a6:88:9a:68:a1:75:3f:0f:b5:82: b8:77:ef:0d:13:1f:fe:52:2d:60:62:b2:3a:9e:aa: 60:91:ae:8e:eb:22:3f:f9:c6:7f:1e:1c:93:11:bc: 55:3f:a2:16:af:eb:7a:cf:83:04:4e:32:ee:c6:d0: cf:3f:3e:b6:32:32:3b:d9:f0:3b:7b:74:6d:68:3d: da:d2:87:dc:85:d8:ab:e4:55:1d:6d:61:c3:6b:21: 56:cd:16:49:fb:fa:63:e4:d5:a3:9e:60:3a:07:23: 18:b4:c2:a4:10:e6:19:a2:6b:f1:3e:93:ef:8d:59: 8a:74:fe:0c:6e:01:22:b2:9a:65:9b:89:0e:3c:24: 3e:9c:fc:35:2d:a7:65:db:4c:6c:4c:a4:0d:61:bd: 2d:3d:01:86:34:c3:18:c4:6a:60:2a:1b:64:b6:66: 2e:c2:5d:73:6b:fa:62:5a:90:51:52:20:11:44:34: 8d:42:c2:14:d3:d9:49:2d:71:95:37:9c:02:95:09: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A3:8F:E3:97:2D:8D:E3:63:37:2A:5F:80:9D:C2:9D:ED:0F:6F:27 X509v3 Authority Key Identifier: keyid:17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8b5c::/32 Signature Algorithm: sha256WithRSAEncryption 19:31:ee:e8:ba:22:2c:db:79:55:6b:62:c0:13:e2:bc:b9:f0: c3:8a:c2:ef:de:97:13:0e:2d:d3:98:a6:47:f3:23:32:fe:0e: db:47:37:30:3a:b1:77:83:94:da:c5:aa:fe:39:dc:74:b3:6d: 83:b5:d5:36:e8:ee:e8:c0:e7:5a:95:d0:c7:03:ff:84:05:c1: 9e:a4:f1:40:fd:4b:18:b0:11:83:40:b3:87:35:d0:e3:02:35: 02:98:cc:a1:42:03:a1:1b:be:cb:33:a0:2d:28:72:54:81:b5: e1:37:d6:ea:10:0e:cd:fd:e7:b4:2d:ba:80:ea:e5:f4:b6:22: 06:ed:2a:cb:e2:f6:1a:c9:12:3a:76:38:7b:21:21:ea:16:a0: 14:21:d0:a7:fb:2c:97:34:77:2f:a6:9c:22:38:07:ab:45:2f: d8:99:21:0d:2c:ed:5d:ff:56:ff:e7:95:51:68:9f:9d:9e:3b: 64:d3:91:1a:7f:34:1d:11:3a:d7:8f:f6:b7:40:37:15:fe:31: 6f:e2:6c:fa:2b:a9:bd:41:4c:01:fe:ab:49:ba:df:c6:d1:17: e2:08:60:9c:8b:cc:a4:31:2d:be:fe:b5:82:3e:da:c3:37:81: 2a:c3:d6:f6:ee:6b:0e:28:58:41:90:06:83:41:dd:e3:a7:05: 4e:90:e9:9e -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUXGaynKvp/k3z6R5maqSQg3g/390wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBQTY0RUI4RDAwODRDRkVFODlCRjYxOTM3MUJEQ0RC NDFGREI3NDAeFw0yNTExMTAyMTAwNTFaFw0yNjExMDkyMTA1NTFaMDMxMTAvBgNV BAMTKEM4QTM4RkUzOTcyRDhERTM2MzM3MkE1RjgwOURDMjlERUQwRjZGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrGXbBJCdx18GXz8PXJdsvWODe zSEtFHUY6y+u31245WepIexgAqTb37XTcKaTXC0ld3F9wGnenMNEgpllz0E+poia aKF1Pw+1grh37w0TH/5SLWBisjqeqmCRro7rIj/5xn8eHJMRvFU/ohav63rPgwRO Mu7G0M8/PrYyMjvZ8Dt7dG1oPdrSh9yF2KvkVR1tYcNrIVbNFkn7+mPk1aOeYDoH Ixi0wqQQ5hmia/E+k++NWYp0/gxuASKymmWbiQ48JD6c/DUtp2XbTGxMpA1hvS09 AYY0wxjEamAqG2S2Zi7CXXNr+mJakFFSIBFENI1CwhTT2UktcZU3nAKVCYX/AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUyKOP45ctjeNjNypfgJ3Cne0PbycwHwYDVR0j BBgwFoAUF6pk640AhM/uib9hk3G9zbQf23QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR Wm8vMC8xN0FBNjRFQjhEMDA4NENGRUU4OUJGNjE5MzcxQkRDREI0MUZEQjc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QUE2NEVCOEQwMDg0Q0ZF RTg5QkY2MTkzNzFCRENEQjQxRkRCNzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzAv MzIzODMwMzQzYTM4NjIzNTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz MzczMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASLXDANBgkqhkiG9w0BAQsFAAOCAQEAGTHu6Loi LNt5VWtiwBPivLnww4rC796XEw4t05imR/MjMv4O20c3MDqxd4OU2sWq/jncdLNt g7XVNuju6MDnWpXQxwP/hAXBnqTxQP1LGLARg0CzhzXQ4wI1ApjMoUIDoRu+yzOg LShyVIG14TfW6hAOzf3ntC26gOrl9LYiBu0qy+L2GskSOnY4eyEh6hagFCHQp/ss lzR3L6acIjgHq0Uv2JkhDSztXf9W/+eVUWifnZ47ZNORGn80HRE614/2t0A3Ff4x b+Js+iupvUFMAf6rSbrfxtEX4ghgnIvMpDEtvv61gj7awzeBKsPW9u5rDihYQZAG g0Hd46cFTpDpng== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:25 2025 by rpki-client