This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa File: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (raw, json) Hash identifier: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM= Subject key identifier: 7F:D2:12:4A:5C:BE:24:81:9A:8F:AF:23:CE:52:99:4F:1D:E1:86:4E Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Certificate serial: 3B4B4B223ABF84E10BED74C54A294030CB4A3A92 Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa Signing time: Fri 21 Nov 2025 15:20:56 +0000 ROA not before: Fri 21 Nov 2025 15:15:56 +0000 ROA not after: Fri 20 Nov 2026 15:20:56 +0000 asID: 53158 IP address blocks: 2804:d38::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 08:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4b:4b:22:3a:bf:84:e1:0b:ed:74:c5:4a:29:40:30:cb:4a:3a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Validity Not Before: Nov 21 15:15:56 2025 GMT Not After : Nov 20 15:20:56 2026 GMT Subject: CN=7FD2124A5CBE24819A8FAF23CE52994F1DE1864E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:eb:28:31:59:8f:bd:c3:36:78:67:f6:33: 7f:35:71:c4:63:5c:7d:a2:0e:24:cd:b7:44:3e:f3: 72:fe:04:12:b3:a5:9f:2a:c5:7e:55:98:80:68:91: d3:fa:73:26:e6:43:37:ac:83:bb:40:1c:37:ad:ec: 33:64:f4:08:da:d2:40:23:83:e1:d9:fa:fa:ac:ac: 6a:ef:de:3e:2b:d5:ec:18:9e:c4:12:0a:b1:b2:b2: 93:1d:92:b3:80:6b:a5:ee:d2:d5:79:9e:9f:bb:8a: 4e:a8:20:8d:4a:7e:09:be:89:fc:12:1b:1c:5f:c2: 9f:90:fd:02:28:5a:8f:b2:f0:06:9c:83:fd:fa:fe: 9d:d1:c9:dd:02:a7:47:6c:5d:63:31:20:c9:68:75: c7:aa:be:10:11:85:40:4f:33:57:94:bf:0d:e5:43: c6:df:35:eb:8f:02:df:4b:0f:bb:8f:94:b5:36:af: aa:5d:74:10:2f:60:24:70:14:3b:94:5a:55:1a:68: b4:37:3f:c5:1d:8f:c1:89:0d:af:2d:0a:a6:e4:9a: 62:20:fe:b9:16:75:2e:87:ab:76:46:f0:7b:88:42: d2:09:b1:dd:0f:bf:f9:87:e6:04:65:00:e4:28:10: 98:b1:43:06:09:8f:7e:d4:11:85:17:92:92:e2:23: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D2:12:4A:5C:BE:24:81:9A:8F:AF:23:CE:52:99:4F:1D:E1:86:4E X509v3 Authority Key Identifier: keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:d38::/32 Signature Algorithm: sha256WithRSAEncryption 54:62:62:85:63:59:24:19:3a:d7:e9:e2:8e:56:26:d4:dc:c7: 30:7f:b7:f1:f6:c9:da:25:bf:3a:10:66:bf:e3:fa:6e:e9:61: 33:0f:19:21:a4:20:f7:b4:e5:b8:bc:85:eb:e3:0a:2a:d6:62: 85:42:83:65:17:d5:f9:3e:0c:47:b1:93:0e:78:cd:09:41:bc: 3f:0a:7c:da:21:02:02:51:ad:4b:47:c3:7a:dc:30:ed:00:d1: c8:97:06:b0:20:ef:b9:47:7c:52:65:cb:11:d4:5a:7d:41:86: 58:49:21:0a:8f:2d:d5:a7:c8:2b:1c:51:79:00:cb:4d:56:de: 4b:2c:ef:be:1f:39:6e:ba:72:7c:e5:d2:e7:d7:06:22:1c:28: 2b:8e:1e:8c:e0:ac:1f:ec:b9:81:5e:4d:76:19:24:14:8d:11: 85:78:d5:42:6b:fe:90:fa:8c:78:94:c7:d2:77:5e:9a:95:bb: 76:20:a2:43:3b:12:cf:e7:4b:3d:3e:54:70:fd:4e:fc:6c:a0: 08:da:8f:2b:82:39:ca:30:cd:08:29:0f:36:df:9d:f9:37:2c: 23:1d:9c:d2:f1:b0:2f:b8:cf:20:bf:13:89:39:a2:7c:f7:05: e7:1a:b5:b8:f5:1b:b5:19:f0:57:ce:88:8b:34:ef:e6:62:29: 09:23:60:64 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUO0tLIjq/hOEL7XTFSilAMMtKOpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5 NzZCMDcxNzAeFw0yNTExMjExNTE1NTZaFw0yNjExMjAxNTIwNTZaMDMxMTAvBgNV BAMTKDdGRDIxMjRBNUNCRTI0ODE5QThGQUYyM0NFNTI5OTRGMURFMTg2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaM+soMVmPvcM2eGf2M381ccRj XH2iDiTNt0Q+83L+BBKzpZ8qxX5VmIBokdP6cybmQzesg7tAHDet7DNk9Aja0kAj g+HZ+vqsrGrv3j4r1ewYnsQSCrGyspMdkrOAa6Xu0tV5np+7ik6oII1Kfgm+ifwS Gxxfwp+Q/QIoWo+y8Aacg/36/p3Ryd0Cp0dsXWMxIMlodceqvhARhUBPM1eUvw3l Q8bfNeuPAt9LD7uPlLU2r6pddBAvYCRwFDuUWlUaaLQ3P8Udj8GJDa8tCqbkmmIg /rkWdS6Hq3ZG8HuIQtIJsd0Pv/mH5gRlAOQoEJixQwYJj37UEYUXkpLiI/GjAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUf9ISSly+JIGaj68jzlKZTx3hhk4wHwYDVR0j BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n RVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRlLzAvMzIz ODMwMzQzYTY0MzMzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMTM1Mzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAoBA04MA0GCSqGSIb3DQEBCwUAA4IBAQBUYmKFY1kkGTrX6eKO VibU3Mcwf7fx9snaJb86EGa/4/pu6WEzDxkhpCD3tOW4vIXr4woq1mKFQoNlF9X5 PgxHsZMOeM0JQbw/CnzaIQICUa1LR8N63DDtANHIlwawIO+5R3xSZcsR1Fp9QYZY SSEKjy3Vp8grHFF5AMtNVt5LLO++HzluunJ85dLn1wYiHCgrjh6M4Kwf7LmBXk12 GSQUjRGFeNVCa/6Q+ox4lMfSd16albt2IKJDOxLP50s9PlRw/U78bKAI2o8rgjnK MM0IKQ823535NywjHZzS8bAvuM8gvxOJOaJ89wXnGrW49Ru1GfBXzoiLNO/mYikJ I2Bk -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:08 2025 by rpki-client