This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/323830343a336339633a3a2f33322d3438203d3e20323636323234.roa File: 323830343a336339633a3a2f33322d3438203d3e20323636323234.roa (raw, json) Hash identifier: lROs3DH7Kbjm+zdA3pXcyqpBhe9buHxTAgOKDxnRtkw= Subject key identifier: 79:D8:73:11:89:95:B3:2D:A4:E3:D9:41:34:2E:11:E4:5F:34:F9:11 Certificate issuer: /CN=28C222B8380EDA26588BC99D18AE110A348BF3D6 Certificate serial: 723497933C9DB7C97D81FD2BD834797FC78D5E84 Authority key identifier: 28:C2:22:B8:38:0E:DA:26:58:8B:C9:9D:18:AE:11:0A:34:8B:F3:D6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer Subject info access: rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/323830343a336339633a3a2f33322d3438203d3e20323636323234.roa Signing time: Fri 19 Dec 2025 19:58:22 +0000 ROA not before: Fri 19 Dec 2025 19:53:22 +0000 ROA not after: Fri 18 Dec 2026 19:58:22 +0000 asID: 266224 IP address blocks: 2804:3c9c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.crl rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 13:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:34:97:93:3c:9d:b7:c9:7d:81:fd:2b:d8:34:79:7f:c7:8d:5e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28C222B8380EDA26588BC99D18AE110A348BF3D6 Validity Not Before: Dec 19 19:53:22 2025 GMT Not After : Dec 18 19:58:22 2026 GMT Subject: CN=79D873118995B32DA4E3D941342E11E45F34F911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:a0:08:c4:9e:3b:98:66:95:a1:39:7f:5d: 4d:49:37:95:c5:58:35:74:fd:79:46:23:77:59:df: 58:aa:82:6f:f2:df:a6:a3:14:5f:a0:50:4c:d3:c5: 6c:d6:01:d7:c2:ad:af:ab:61:99:30:97:2e:fe:dd: 63:10:84:88:ab:88:ee:1e:33:16:42:fe:30:f0:b0: 65:44:08:9e:b3:08:f8:43:db:9f:8e:da:49:97:c3: 8d:1a:71:eb:16:d7:5f:54:a7:8e:3b:1e:ea:08:96: 5a:7e:ca:64:55:62:4e:57:40:e4:00:fd:ae:3c:f5: 21:f7:de:85:15:de:83:dc:d8:42:70:a0:4d:f3:a2: 1a:a1:80:c3:ed:83:f4:21:cd:be:43:a1:a7:27:4a: 03:86:77:f1:13:bd:8a:95:76:cf:df:bb:78:a9:80: c1:a0:87:a9:e9:a8:14:59:e2:52:65:93:a7:ca:b4: 9e:55:d5:cd:c6:23:77:3f:52:d6:c7:77:a3:08:99: 60:e8:d6:3c:0d:80:7c:84:4e:a3:71:80:df:84:90: b3:da:fb:6b:98:78:3f:e3:38:f1:09:f9:13:f0:e1: 34:44:8f:44:b8:e3:18:8c:ea:3f:95:58:29:3b:4f: 00:c3:79:9f:a6:83:43:f1:65:90:6f:fa:b3:50:fb: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D8:73:11:89:95:B3:2D:A4:E3:D9:41:34:2E:11:E4:5F:34:F9:11 X509v3 Authority Key Identifier: keyid:28:C2:22:B8:38:0E:DA:26:58:8B:C9:9D:18:AE:11:0A:34:8B:F3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/323830343a336339633a3a2f33322d3438203d3e20323636323234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3c9c::/32 Signature Algorithm: sha256WithRSAEncryption ba:75:b9:b3:89:a2:68:27:9c:88:ac:ca:7b:45:25:5f:69:9e: 30:58:03:d2:57:99:53:54:db:b2:7f:30:ca:d7:a6:63:2e:55: d4:5d:c6:fa:e2:52:43:1c:77:fd:90:18:9d:bf:d5:39:a2:9f: b5:95:47:1c:33:52:d9:53:77:14:ed:02:c7:6b:5e:d4:b4:34: 84:bd:b3:c4:3e:77:19:c5:40:4c:95:df:96:46:db:a3:ab:d1: ab:0f:ce:99:24:13:2d:df:a4:75:19:be:91:9c:05:eb:b4:41: e4:af:09:5c:06:7b:2c:18:04:95:a2:b4:b7:ef:9d:d0:0c:fe: 28:64:fd:64:50:14:be:26:01:e3:cc:23:95:77:c9:ca:df:dc: c1:5f:f7:70:8b:16:23:5f:a8:48:36:ec:63:78:d9:9b:f3:f9: 93:96:b1:d6:fe:11:a2:45:a9:5b:90:1c:4e:30:bc:e2:f2:56: 01:0a:e0:87:3a:e2:96:dd:b3:53:92:9e:61:cc:cb:d4:5c:80: f5:90:b2:c4:82:af:c0:1b:fb:00:a4:68:59:7b:f4:c0:79:66: a8:24:0b:90:f9:ed:94:83:47:f7:a5:a3:0b:ea:4d:32:e2:6f: b1:e4:09:b0:54:f9:29:d1:33:64:b0:db:6c:9d:39:1c:98:e3: 3d:d4:40:4c -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUcjSXkzydt8l9gf0r2DR5f8eNXoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhDMjIyQjgzODBFREEyNjU4OEJDOTlEMThBRTExMEEz NDhCRjNENjAeFw0yNTEyMTkxOTUzMjJaFw0yNjEyMTgxOTU4MjJaMDMxMTAvBgNV BAMTKDc5RDg3MzExODk5NUIzMkRBNEUzRDk0MTM0MkUxMUU0NUYzNEY5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKP6AIxJ47mGaVoTl/XU1JN5XF WDV0/XlGI3dZ31iqgm/y36ajFF+gUEzTxWzWAdfCra+rYZkwly7+3WMQhIiriO4e MxZC/jDwsGVECJ6zCPhD25+O2kmXw40acesW119Up447HuoIllp+ymRVYk5XQOQA /a489SH33oUV3oPc2EJwoE3zohqhgMPtg/Qhzb5DoacnSgOGd/ETvYqVds/fu3ip gMGgh6npqBRZ4lJlk6fKtJ5V1c3GI3c/UtbHd6MImWDo1jwNgHyETqNxgN+EkLPa +2uYeD/jOPEJ+RPw4TREj0S44xiM6j+VWCk7TwDDeZ+mg0PxZZBv+rNQ+wV/AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUedhzEYmVsy2k49lBNC4R5F80+REwHwYDVR0j BBgwFoAUKMIiuDgO2iZYi8mdGK4RCjSL89YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnI5eHdKaFZweWpCVDVmbUNYbnl4TkNWUExleE10VldGNFFxcHJEUmti WksvMC8yOEMyMjJCODM4MEVEQTI2NTg4QkM5OUQxOEFFMTEwQTM0OEJGM0Q2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QzIyMkI4MzgwRURBMjY1 ODhCQzk5RDE4QUUxMTBBMzQ4QkYzRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJyOXh3SmhWcHlqQlQ1Zm1DWG55eE5DVlBMZXhNdFZXRjRRcXByRFJrYlpLLzAv MzIzODMwMzQzYTMzNjMzOTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2 MzIzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQ8nDANBgkqhkiG9w0BAQsFAAOCAQEAunW5s4mi aCeciKzKe0UlX2meMFgD0leZU1Tbsn8wytemYy5V1F3G+uJSQxx3/ZAYnb/VOaKf tZVHHDNS2VN3FO0Cx2te1LQ0hL2zxD53GcVATJXflkbbo6vRqw/OmSQTLd+kdRm+ kZwF67RB5K8JXAZ7LBgElaK0t++d0Az+KGT9ZFAUviYB48wjlXfJyt/cwV/3cIsW I1+oSDbsY3jZm/P5k5ax1v4RokWpW5AcTjC84vJWAQrghzrilt2zU5KeYczL1FyA 9ZCyxIKvwBv7AKRoWXv0wHlmqCQLkPntlINH96WjC+pNMuJvseQJsFT5KdEzZLDb bJ05HJjjPdRATA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:36:00 2025 by rpki-client