This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d313238203d3e20323636303439.roa File: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (raw, json) Hash identifier: D9DppFrtJlT7hHTV3DkiAc9Ngx7Jz5WP2m/IH2qpUZc= Subject key identifier: 3F:EB:62:5D:21:96:10:7D:D9:3C:BC:09:DC:4B:6F:EA:05:E6:76:2C Certificate issuer: /CN=334DE88ED00C8E5D1131E1ED355103A232E40FE0 Certificate serial: 6F998AC4280586AA1AFD2277AADB8338034BE723 Authority key identifier: 33:4D:E8:8E:D0:0C:8E:5D:11:31:E1:ED:35:51:03:A2:32:E4:0F:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d313238203d3e20323636303439.roa Signing time: Wed 24 Dec 2025 13:39:06 +0000 ROA not before: Wed 24 Dec 2025 13:34:06 +0000 ROA not after: Wed 23 Dec 2026 13:39:06 +0000 asID: 266049 IP address blocks: 2804:39c4::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 Jan 2026 04:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:99:8a:c4:28:05:86:aa:1a:fd:22:77:aa:db:83:38:03:4b:e7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334DE88ED00C8E5D1131E1ED355103A232E40FE0 Validity Not Before: Dec 24 13:34:06 2025 GMT Not After : Dec 23 13:39:06 2026 GMT Subject: CN=3FEB625D2196107DD93CBC09DC4B6FEA05E6762C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:a0:1a:24:40:4c:6b:78:92:43:d4:e1:d8: c9:3a:6c:b3:38:0b:0b:11:e5:88:d9:2b:e7:97:ed: 37:de:47:2f:e3:b4:51:4a:5d:31:7b:30:8d:70:ea: 5d:97:b1:a0:46:69:fc:b7:17:68:59:ca:91:06:3b: c9:5a:f6:8c:6e:0c:0b:6c:92:e2:f6:ec:95:ba:7e: 3a:65:a5:e5:47:67:f3:fa:56:e9:65:52:04:c5:b1: b2:a5:1f:c7:91:4d:ce:a8:0a:13:fe:47:38:0a:b3: 0a:a7:97:fe:e3:19:d5:32:a5:bc:c4:42:ec:27:a0: bc:14:24:9b:6a:61:db:1d:b4:3a:53:8d:6e:65:ee: d9:30:13:10:60:01:aa:71:54:e9:3e:9a:d0:dc:f8: d2:df:62:de:eb:3c:5d:8a:7f:cb:cb:3f:06:58:9f: 3d:d1:12:d9:52:f5:15:df:e8:44:ee:19:9e:c3:5e: 1e:ca:d4:80:b8:1d:db:8e:88:df:80:b8:3a:3e:72: df:59:23:0f:fb:e2:cf:88:1c:89:dc:e3:e4:b0:05: d5:f7:7d:bd:0a:a3:5f:a0:ad:7b:d6:78:d9:5d:97: b6:df:b4:fe:4d:1a:b1:59:41:1d:2c:8f:b6:10:c1: ac:f9:cf:54:43:9d:66:0a:35:94:73:c2:7c:c9:db: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EB:62:5D:21:96:10:7D:D9:3C:BC:09:DC:4B:6F:EA:05:E6:76:2C X509v3 Authority Key Identifier: keyid:33:4D:E8:8E:D0:0C:8E:5D:11:31:E1:ED:35:51:03:A2:32:E4:0F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d313238203d3e20323636303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:39c4::/32 Signature Algorithm: sha256WithRSAEncryption 88:72:99:fa:99:1e:58:1d:4d:dd:94:d0:20:5c:79:50:ee:8e: c0:fa:c2:57:0f:34:75:89:97:63:d2:69:56:6e:71:d9:25:46: 0e:04:bb:47:6b:15:52:a1:88:c5:a5:ac:a5:62:8f:5a:b7:65: 1c:b7:c5:a1:5e:e4:f6:fa:fb:bb:6c:94:66:b9:e7:ed:b6:1c: c0:ea:d3:e5:52:99:55:4e:2f:3f:f1:bf:2c:2a:0c:99:46:e5: 6f:91:1d:e7:49:b0:ce:ee:00:81:6f:4f:b4:9a:52:c4:d1:fa: 40:58:d2:b8:12:25:55:be:e0:e0:9e:1c:cb:e4:d4:84:d7:2b: b2:76:ec:02:5d:98:d8:a1:39:44:86:b3:48:7d:f6:bb:c7:1c: 29:15:00:eb:c6:c4:42:3f:a3:61:95:db:59:9e:a3:e4:ff:4b: 2e:61:c9:72:30:22:9a:1e:da:3c:e0:2f:33:27:0d:55:c0:ba: df:d0:59:98:45:71:fd:40:84:7e:0e:ed:da:8f:95:48:55:31: 41:96:3a:15:42:e3:24:c7:f4:09:0d:c1:16:f8:5c:1e:0d:f5: e6:3c:e7:25:04:c9:7e:a5:f8:73:4f:77:fd:41:df:63:e9:e2: 38:e7:ba:e0:6e:98:12:24:91:99:fb:e8:1d:52:5a:f4:1b:23: 7e:e3:ea:0b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUb5mKxCgFhqoa/SJ3qtuDOANL5yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM0REU4OEVEMDBDOEU1RDExMzFFMUVEMzU1MTAzQTIz MkU0MEZFMDAeFw0yNTEyMjQxMzM0MDZaFw0yNjEyMjMxMzM5MDZaMDMxMTAvBgNV BAMTKDNGRUI2MjVEMjE5NjEwN0REOTNDQkMwOURDNEI2RkVBMDVFNjc2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppKAaJEBMa3iSQ9Th2Mk6bLM4 CwsR5YjZK+eX7TfeRy/jtFFKXTF7MI1w6l2XsaBGafy3F2hZypEGO8la9oxuDAts kuL27JW6fjplpeVHZ/P6VullUgTFsbKlH8eRTc6oChP+RzgKswqnl/7jGdUypbzE QuwnoLwUJJtqYdsdtDpTjW5l7tkwExBgAapxVOk+mtDc+NLfYt7rPF2Kf8vLPwZY nz3REtlS9RXf6ETuGZ7DXh7K1IC4HduOiN+AuDo+ct9ZIw/74s+IHInc4+SwBdX3 fb0Ko1+grXvWeNldl7bftP5NGrFZQR0sj7YQwaz5z1RDnWYKNZRzwnzJ28uXAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUP+tiXSGWEH3ZPLwJ3Etv6gXmdiwwHwYDVR0j BBgwFoAUM03ojtAMjl0RMeHtNVEDojLkD+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RL cjQvMC8zMzRERTg4RUQwMEM4RTVEMTEzMUUxRUQzNTUxMDNBMjMyRTQwRkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNERFODhFRDAwQzhFNUQx MTMxRTFFRDM1NTEwM0EyMzJFNDBGRTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJCbThUVFJMTEgyNXJmVzh3bU5MYVo0Z2FpR2FQdlBQNnBCWkZ3WTNkS3I0LzAv MzIzODMwMzQzYTMzMzk2MzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzYzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBDnEMA0GCSqGSIb3DQEBCwUAA4IBAQCIcpn6 mR5YHU3dlNAgXHlQ7o7A+sJXDzR1iZdj0mlWbnHZJUYOBLtHaxVSoYjFpaylYo9a t2Uct8WhXuT2+vu7bJRmueftthzA6tPlUplVTi8/8b8sKgyZRuVvkR3nSbDO7gCB b0+0mlLE0fpAWNK4EiVVvuDgnhzL5NSE1yuyduwCXZjYoTlEhrNIffa7xxwpFQDr xsRCP6NhldtZnqPk/0suYclyMCKaHto84C8zJw1VwLrf0FmYRXH9QIR+Du3aj5VI VTFBljoVQuMkx/QJDcEW+FweDfXmPOclBMl+pfhzT3f9Qd9j6eI457rgbpgSJJGZ ++gdUlr0GyN+4+oL -----END CERTIFICATE-----Generated at Wed Jan 7 22:15:02 2026 by rpki-client