This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/323830343a323365383a3a2f33322d313238203d3e20323632383535.roa File: 323830343a323365383a3a2f33322d313238203d3e20323632383535.roa (raw, json) Hash identifier: +7mbvrvyaXCfD9f1T1Vn20aYpSu6OLMcSl5d3Rysl5Q= Subject key identifier: AD:88:1E:24:F3:2A:13:75:79:61:56:B2:1E:FF:CC:15:D8:8A:D8:09 Certificate issuer: /CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116 Certificate serial: 627D2DC6333EF1D4A49F1BC6316C6F50B7DC7BF2 Authority key identifier: B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer Subject info access: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/323830343a323365383a3a2f33322d313238203d3e20323632383535.roa Signing time: Tue 16 Dec 2025 18:23:11 +0000 ROA not before: Tue 16 Dec 2025 18:18:11 +0000 ROA not after: Tue 15 Dec 2026 18:23:11 +0000 asID: 262855 IP address blocks: 2804:23e8::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 21:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7d:2d:c6:33:3e:f1:d4:a4:9f:1b:c6:31:6c:6f:50:b7:dc:7b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8362D1C87DF5F3604DCC583DC8F78E84B46C116 Validity Not Before: Dec 16 18:18:11 2025 GMT Not After : Dec 15 18:23:11 2026 GMT Subject: CN=AD881E24F32A1375796156B21EFFCC15D88AD809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:16:0f:53:32:53:73:e6:00:c8:57:f1:45: 4f:1c:ef:21:cc:03:23:3b:b0:89:ae:aa:d4:ac:f1: ec:60:0c:96:76:11:2c:15:58:16:42:77:3c:b9:3b: 62:28:96:36:84:a1:9a:9e:a0:3c:aa:cc:ef:c4:ea: 47:ff:5e:5d:da:b5:51:53:9c:74:f7:f3:0c:a1:31: df:23:18:e6:d1:2b:51:c6:f7:ec:bb:44:21:1f:f6: ab:93:e1:cc:da:a3:cc:98:e5:73:25:fd:8b:49:af: 8f:0a:59:42:77:c8:1e:38:aa:f7:2f:41:f5:ef:c9: b1:c6:f8:e3:5f:8b:51:98:53:14:af:45:cb:1b:40: 3a:47:41:e0:03:b3:99:4d:4c:30:67:00:89:23:22: 54:92:ae:a2:26:64:79:62:52:85:26:86:ad:3f:f8: 03:2f:41:a0:b7:22:2b:93:b9:79:06:e3:83:9f:fb: a8:77:ad:0a:39:0e:15:b9:e5:75:d3:43:14:44:bc: 07:5d:00:2a:6b:7f:a2:fc:f5:0e:b0:3e:67:44:4f: da:96:bc:de:f1:2d:3c:39:84:ad:45:af:26:8b:1f: e1:14:ae:84:77:d0:cd:2b:d3:44:d7:57:7d:79:a0: 78:5f:66:31:a7:d5:6a:5a:ed:46:eb:91:5c:d8:4e: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:88:1E:24:F3:2A:13:75:79:61:56:B2:1E:FF:CC:15:D8:8A:D8:09 X509v3 Authority Key Identifier: keyid:B8:36:2D:1C:87:DF:5F:36:04:DC:C5:83:DC:8F:78:E8:4B:46:C1:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8362D1C87DF5F3604DCC583DC8F78E84B46C116.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QK2jtQsU6uuUpqapRm1EpQh79z9zriJWm8aE5iQ4WqW/0/323830343a323365383a3a2f33322d313238203d3e20323632383535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:23e8::/32 Signature Algorithm: sha256WithRSAEncryption 88:6b:80:00:41:fb:05:94:03:2b:04:e4:c1:42:63:b5:5a:1d: d8:da:ff:5e:93:cf:3a:36:b4:22:6e:17:44:5b:a1:01:0f:63: 8a:64:25:78:43:d1:4f:87:58:3f:03:70:5a:9e:3d:1e:15:0b: 6a:22:dc:ff:02:f6:7f:4c:86:e7:24:ad:d6:83:fc:a7:3a:51: 46:2d:9e:f2:ee:f8:70:6f:08:d3:63:79:3f:25:f7:5e:e6:10: 74:aa:ed:0c:0e:2d:6b:a1:a1:6c:22:1d:3a:3d:92:c4:ce:86: 00:86:75:06:15:c5:ac:c7:fa:39:3c:38:a6:f0:93:9c:cc:0d: 3e:0e:59:6a:6a:2b:35:60:92:22:d5:3c:7a:ed:24:5f:a8:c2: 36:cd:b1:77:f2:e7:8b:9d:d5:82:6d:44:c4:ce:15:fd:1c:f0: f4:2a:4b:dd:e9:31:98:c7:39:70:a8:1b:a3:9d:6f:0e:8c:16: 18:fd:50:73:1e:62:13:a1:25:8d:8f:bf:a7:18:ce:c8:32:c6: 09:6e:82:09:b2:1e:fc:06:31:dc:85:d4:b4:cb:f7:d0:ab:3b: c9:09:63:3b:e9:94:49:86:98:04:17:18:56:1e:82:47:d2:11: 37:6f:f3:b6:8d:84:b7:ca:06:47:aa:1d:1f:57:72:0b:77:4e: 09:27:a6:d4 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUYn0txjM+8dSknxvGMWxvULfce/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNjJEMUM4N0RGNUYzNjA0RENDNTgzREM4Rjc4RTg0 QjQ2QzExNjAeFw0yNTEyMTYxODE4MTFaFw0yNjEyMTUxODIzMTFaMDMxMTAvBgNV BAMTKEFEODgxRTI0RjMyQTEzNzU3OTYxNTZCMjFFRkZDQzE1RDg4QUQ4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTBYPUzJTc+YAyFfxRU8c7yHM AyM7sImuqtSs8exgDJZ2ESwVWBZCdzy5O2IoljaEoZqeoDyqzO/E6kf/Xl3atVFT nHT38wyhMd8jGObRK1HG9+y7RCEf9quT4czao8yY5XMl/YtJr48KWUJ3yB44qvcv QfXvybHG+ONfi1GYUxSvRcsbQDpHQeADs5lNTDBnAIkjIlSSrqImZHliUoUmhq0/ +AMvQaC3IiuTuXkG44Of+6h3rQo5DhW55XXTQxREvAddACprf6L89Q6wPmdET9qW vN7xLTw5hK1FryaLH+EUroR30M0r00TXV315oHhfZjGn1Wpa7UbrkVzYTlKVAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUrYgeJPMqE3V5YVayHv/MFdiK2AkwHwYDVR0j BBgwFoAUuDYtHIffXzYE3MWD3I946EtGwRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlFLMmp0UXNVNnV1VXBxYXBSbTFFcFFoNzl6OXpyaUpXbThhRTVpUTRX cVcvMC9CODM2MkQxQzg3REY1RjM2MDREQ0M1ODNEQzhGNzhFODRCNDZDMTE2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MzYyRDFDODdERjVGMzYw NERDQzU4M0RDOEY3OEU4NEI0NkMxMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJRSzJqdFFzVTZ1dVVwcWFwUm0xRXBRaDc5ejl6cmlKV204YUU1aVE0V3FXLzAv MzIzODMwMzQzYTMyMzM2NTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzIzODM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBCPoMA0GCSqGSIb3DQEBCwUAA4IBAQCIa4AA QfsFlAMrBOTBQmO1Wh3Y2v9ek886NrQibhdEW6EBD2OKZCV4Q9FPh1g/A3Banj0e FQtqItz/AvZ/TIbnJK3Wg/ynOlFGLZ7y7vhwbwjTY3k/Jfde5hB0qu0MDi1roaFs Ih06PZLEzoYAhnUGFcWsx/o5PDim8JOczA0+Dllqais1YJIi1Tx67SRfqMI2zbF3 8ueLndWCbUTEzhX9HPD0Kkvd6TGYxzlwqBujnW8OjBYY/VBzHmIToSWNj7+nGM7I MsYJboIJsh78BjHchdS0y/fQqzvJCWM76ZRJhpgEFxhWHoJH0hE3b/O2jYS3ygZH qh0fV3ILd04JJ6bU -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:43 2025 by rpki-client