This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3634203d3e20323632363735.roa File: 323830343a6134343a3a2f33322d3634203d3e20323632363735.roa (raw, json) Hash identifier: tlpFYN91E9Op7rpJGRIy3hA0GnetnZEyT7XSGdatchw= Subject key identifier: B8:36:CE:B1:AB:DE:41:EE:14:07:15:4E:51:EF:04:95:3B:2D:9A:27 Certificate issuer: /CN=645369D6E2E42074ECE0733455C39887AD27A324 Certificate serial: 0321B5364F6D4BF9689ECFE1EACB8F42870EF593 Authority key identifier: 64:53:69:D6:E2:E4:20:74:EC:E0:73:34:55:C3:98:87:AD:27:A3:24 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645369D6E2E42074ECE0733455C39887AD27A324.cer Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3634203d3e20323632363735.roa Signing time: Fri 26 Dec 2025 12:34:57 +0000 ROA not before: Fri 26 Dec 2025 12:29:57 +0000 ROA not after: Fri 25 Dec 2026 12:34:57 +0000 asID: 262675 IP address blocks: 2804:a44::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/645369D6E2E42074ECE0733455C39887AD27A324.crl rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/645369D6E2E42074ECE0733455C39887AD27A324.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645369D6E2E42074ECE0733455C39887AD27A324.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 16:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:21:b5:36:4f:6d:4b:f9:68:9e:cf:e1:ea:cb:8f:42:87:0e:f5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645369D6E2E42074ECE0733455C39887AD27A324 Validity Not Before: Dec 26 12:29:57 2025 GMT Not After : Dec 25 12:34:57 2026 GMT Subject: CN=B836CEB1ABDE41EE1407154E51EF04953B2D9A27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:57:ed:60:cf:bf:36:8a:e0:bd:d7:e6:5f:6b: 33:59:5b:e6:a9:e0:be:f5:b6:2c:9d:9a:03:cc:f1: 42:c8:e5:cf:ae:92:0f:7a:e5:7f:5f:f6:5a:26:6b: 27:b6:80:6d:c5:b9:93:dd:8d:2d:53:41:33:f7:c1: 51:89:6e:19:9c:12:43:27:1c:63:54:39:57:72:d9: 94:35:cc:9c:a5:ee:38:6f:65:41:98:01:06:1c:4e: 4c:c6:1c:6c:97:15:bf:c9:8e:a7:2a:78:55:72:26: 3b:9a:ad:8b:bd:94:fb:28:46:b3:ec:69:ef:a7:a4: 0c:17:49:2e:96:f2:18:20:a1:88:af:a2:cf:b7:18: e8:3e:35:f2:22:b9:5c:bf:88:da:5b:e9:78:f0:75: ec:11:45:b5:a4:6c:78:23:10:98:b1:8f:73:99:aa: 7a:57:c9:7d:05:48:5a:cb:df:d6:f5:31:ed:60:ea: b0:dd:bc:b7:8f:2b:57:05:28:63:e4:bd:b3:1b:04: 3a:50:22:af:f4:b7:89:89:d2:27:35:93:df:4e:b7: ba:2b:1b:d4:82:cf:9f:02:bb:61:dd:36:25:8c:e1: ff:41:88:14:3e:c4:04:09:2b:ad:d9:ec:80:4f:24: f5:c3:07:62:de:3e:9f:5f:4d:d3:dc:61:f7:40:e9: 3d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:36:CE:B1:AB:DE:41:EE:14:07:15:4E:51:EF:04:95:3B:2D:9A:27 X509v3 Authority Key Identifier: keyid:64:53:69:D6:E2:E4:20:74:EC:E0:73:34:55:C3:98:87:AD:27:A3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/645369D6E2E42074ECE0733455C39887AD27A324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645369D6E2E42074ECE0733455C39887AD27A324.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3634203d3e20323632363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:a44::/32 Signature Algorithm: sha256WithRSAEncryption 16:96:b3:89:ce:10:f4:39:cd:8e:1d:a7:e8:ea:0e:40:6e:bc: 5e:8f:ae:56:3a:08:b0:ce:82:aa:3a:84:f2:25:9f:5d:b3:19: d9:97:2f:6a:6e:a2:d4:b7:26:e9:b0:58:55:bc:40:14:89:81: ed:13:29:a3:a6:d7:04:9f:4b:ba:4d:b8:a2:7e:12:0d:1d:a4: 5c:20:d1:48:be:0d:50:3b:d4:63:b6:0a:3f:69:12:91:83:7b: f7:77:cd:89:13:ed:05:44:a2:2f:a8:84:b7:17:b9:86:f0:86: 73:c3:d3:23:73:4d:85:40:ec:72:45:4e:74:d4:9a:06:cf:98: 52:77:63:9b:d4:79:a5:84:76:26:ea:32:86:41:73:8a:21:79: 75:5d:df:53:1c:0a:23:0b:44:bf:f8:24:3a:ee:4f:6c:d1:19: e9:19:7b:9b:87:55:ad:0a:10:95:56:48:c7:5c:db:0c:a9:7e: 70:51:a7:0e:61:88:8f:85:77:ff:31:16:8a:f5:df:d6:04:0a: d6:eb:13:dd:0e:14:13:bd:66:46:a6:3c:7a:47:b4:a5:3b:22: 38:dd:b8:59:55:d1:34:fc:f4:c0:2c:75:02:be:cf:52:34:b3: db:38:da:5e:1d:c3:a6:bf:fc:b5:68:c1:ab:79:4d:24:20:6a: 94:93:a3:25 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUAyG1Nk9tS/lons/h6suPQocO9ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1MzY5RDZFMkU0MjA3NEVDRTA3MzM0NTVDMzk4ODdB RDI3QTMyNDAeFw0yNTEyMjYxMjI5NTdaFw0yNjEyMjUxMjM0NTdaMDMxMTAvBgNV BAMTKEI4MzZDRUIxQUJERTQxRUUxNDA3MTU0RTUxRUYwNDk1M0IyRDlBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwV+1gz782iuC91+ZfazNZW+ap 4L71tiydmgPM8ULI5c+ukg965X9f9lomaye2gG3FuZPdjS1TQTP3wVGJbhmcEkMn HGNUOVdy2ZQ1zJyl7jhvZUGYAQYcTkzGHGyXFb/JjqcqeFVyJjuarYu9lPsoRrPs ae+npAwXSS6W8hggoYivos+3GOg+NfIiuVy/iNpb6XjwdewRRbWkbHgjEJixj3OZ qnpXyX0FSFrL39b1Me1g6rDdvLePK1cFKGPkvbMbBDpQIq/0t4mJ0ic1k99Ot7or G9SCz58Cu2HdNiWM4f9BiBQ+xAQJK63Z7IBPJPXDB2LePp9fTdPcYfdA6T3hAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUuDbOsaveQe4UBxVOUe8ElTstmicwHwYDVR0j BBgwFoAUZFNp1uLkIHTs4HM0VcOYh60noyQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdr dzIvMC82NDUzNjlENkUyRTQyMDc0RUNFMDczMzQ1NUMzOTg4N0FEMjdBMzI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0NTM2OUQ2RTJFNDIwNzRF Q0UwNzMzNDU1QzM5ODg3QUQyN0EzMjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM1TGtkdDlTZExFWjl2NXNVRVp6dmtHTXdSVDR4QjluTVZMZmdpcmpHa3cyLzAv MzIzODMwMzQzYTYxMzQzNDNhM2EyZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzMjM2 MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgECkQwDQYJKoZIhvcNAQELBQADggEBABaWs4nOEPQ5 zY4dp+jqDkBuvF6PrlY6CLDOgqo6hPIln12zGdmXL2puotS3JumwWFW8QBSJge0T KaOm1wSfS7pNuKJ+Eg0dpFwg0Ui+DVA71GO2Cj9pEpGDe/d3zYkT7QVEoi+ohLcX uYbwhnPD0yNzTYVA7HJFTnTUmgbPmFJ3Y5vUeaWEdibqMoZBc4oheXVd31McCiML RL/4JDruT2zRGekZe5uHVa0KEJVWSMdc2wypfnBRpw5hiI+Fd/8xFor139YECtbr E90OFBO9ZkamPHpHtKU7IjjduFlV0TT89MAsdQK+z1I0s9s42l4dw6a//LVowat5 TSQgapSToyU= -----END CERTIFICATE-----Generated at Fri Jan 9 09:37:20 2026 by rpki-client