This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/323830343a393732633a3a2f33322d313238203d3e20323734333839.roa File: 323830343a393732633a3a2f33322d313238203d3e20323734333839.roa (raw, json) Hash identifier: kTr6CKpzTKUFfgoDsLlDzKHFTQvHPRxo2ersppPwDCk= Subject key identifier: 15:4B:D0:5E:EA:7E:87:2F:02:17:F6:55:5F:4C:0A:61:F4:83:0F:0C Certificate issuer: /CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20 Certificate serial: 623B1EF860CAA80353FD8BE847A925E2D57C8D99 Authority key identifier: CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer Subject info access: rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/323830343a393732633a3a2f33322d313238203d3e20323734333839.roa Signing time: Wed 17 Dec 2025 23:40:21 +0000 ROA not before: Wed 17 Dec 2025 23:35:21 +0000 ROA not after: Wed 16 Dec 2026 23:40:21 +0000 asID: 274389 IP address blocks: 2804:972c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 07:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3b:1e:f8:60:ca:a8:03:53:fd:8b:e8:47:a9:25:e2:d5:7c:8d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20 Validity Not Before: Dec 17 23:35:21 2025 GMT Not After : Dec 16 23:40:21 2026 GMT Subject: CN=154BD05EEA7E872F0217F6555F4C0A61F4830F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:21:f1:99:64:d5:b5:9f:18:b1:c5:9c:3c:f3: 9d:47:1b:99:ac:2e:40:fa:2d:4e:f2:2f:42:3f:80: 92:04:f3:d6:b5:5b:c7:8d:5e:56:dd:97:b7:a9:67: 5e:5d:9a:cd:b3:5b:fa:ac:72:2d:52:6c:5a:09:97: 15:87:07:31:4a:fb:78:f8:ec:46:27:49:40:04:51: a8:47:3d:4a:28:fc:4a:10:7b:ab:87:a6:ae:b2:96: bc:7d:4f:00:f7:61:7c:a4:1b:27:99:2e:1a:a1:7d: bb:2e:62:f8:d8:5a:77:fe:b8:97:f7:d5:8c:c6:54: d5:aa:26:a7:54:a6:0c:69:8c:40:af:31:15:ed:cd: 5d:c9:ab:1d:f2:9f:de:91:74:3d:36:2c:e5:35:e7: e0:fa:a1:27:01:7a:21:a4:c1:cf:bd:bd:ab:95:45: 1c:07:dd:5f:09:f2:08:11:4f:2e:09:de:48:63:33: 07:02:f3:7f:5d:a3:70:24:86:1a:1b:50:61:a0:ea: 06:3c:33:1c:92:14:9c:7a:ad:97:a9:c6:80:a1:19: 92:91:dc:88:21:1b:10:50:89:25:5e:61:f4:67:cf: 99:23:f8:12:b0:83:72:e2:e7:87:ce:df:96:bc:41: 8b:5d:e5:cc:14:e8:24:49:28:db:91:e5:d4:6f:fd: 54:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4B:D0:5E:EA:7E:87:2F:02:17:F6:55:5F:4C:0A:61:F4:83:0F:0C X509v3 Authority Key Identifier: keyid:CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/323830343a393732633a3a2f33322d313238203d3e20323734333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:972c::/32 Signature Algorithm: sha256WithRSAEncryption b3:3b:bf:9c:65:9d:e6:62:06:aa:8f:2c:08:10:bc:ea:98:ee: 94:38:16:f5:7e:f1:49:3a:73:20:73:8a:dd:27:ba:5b:0e:57: 84:e5:dd:48:0f:ee:e7:0c:4e:bc:68:4d:76:e6:3e:ae:c2:13: 16:81:b6:fc:f3:68:ff:7e:1f:63:b3:62:f0:d0:c0:d2:0a:ea: 14:00:63:26:f2:91:44:5f:df:dd:d1:a5:9f:bc:5b:ea:e5:31: 6c:a0:c7:f6:c8:ae:7a:e3:b6:e0:50:f9:a3:57:d6:1f:c5:92: dd:a8:55:86:a5:b1:cd:75:e6:4b:9d:d0:4a:8a:6b:78:5e:e7: d0:a6:8f:33:da:12:7c:fd:0b:4c:6b:11:c0:12:95:d9:3e:77: 71:f2:b7:4b:f5:a9:01:3d:b2:14:2f:c2:e3:b8:24:1f:73:18: 7e:e0:5f:7c:f1:73:6e:ad:bb:83:40:e3:99:ae:7f:08:ca:52: 44:e8:49:c6:e6:25:13:6e:d3:e3:c5:61:99:a5:e4:95:15:3b: 9a:eb:c2:df:d8:ae:89:bb:4d:05:e9:85:05:c3:04:94:1c:65: 63:be:7d:d1:a8:7c:9b:2f:f0:b1:8f:63:ce:e3:d1:7f:4e:75: 7c:f5:35:e7:53:66:a7:60:03:0b:a2:aa:17:0b:e5:f6:68:eb: 72:f8:99:73 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUYjse+GDKqANT/YvoR6kl4tV8jZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBODUxOEU2RDBCMzVBQTYxMkUyRjNDOTM3NTBFQzBC NTI4NkUyMDAeFw0yNTEyMTcyMzM1MjFaFw0yNjEyMTYyMzQwMjFaMDMxMTAvBgNV BAMTKDE1NEJEMDVFRUE3RTg3MkYwMjE3RjY1NTVGNEMwQTYxRjQ4MzBGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuIfGZZNW1nxixxZw8851HG5ms LkD6LU7yL0I/gJIE89a1W8eNXlbdl7epZ15dms2zW/qsci1SbFoJlxWHBzFK+3j4 7EYnSUAEUahHPUoo/EoQe6uHpq6ylrx9TwD3YXykGyeZLhqhfbsuYvjYWnf+uJf3 1YzGVNWqJqdUpgxpjECvMRXtzV3Jqx3yn96RdD02LOU15+D6oScBeiGkwc+9vauV RRwH3V8J8ggRTy4J3khjMwcC839do3AkhhobUGGg6gY8MxySFJx6rZepxoChGZKR 3IghGxBQiSVeYfRnz5kj+BKwg3Li54fO35a8QYtd5cwU6CRJKNuR5dRv/VTpAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUFUvQXup+hy8CF/ZVX0wKYfSDDwwwHwYDVR0j BBgwFoAUzqhRjm0LNaphLi88k3UOwLUobiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzZ2SDhpQWdjak1zNjNKZXFZbzJHbUh3NWRWUlV4aWhqblc5UEhNcFB2 NnQvMC9DRUE4NTE4RTZEMEIzNUFBNjEyRTJGM0M5Mzc1MEVDMEI1Mjg2RTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQTg1MThFNkQwQjM1QUE2 MTJFMkYzQzkzNzUwRUMwQjUyODZFMjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM2dkg4aUFnY2pNczYzSmVxWW8yR21IdzVkVlJVeGloam5XOVBITXBQdjZ0LzAv MzIzODMwMzQzYTM5MzczMjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzQzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBJcsMA0GCSqGSIb3DQEBCwUAA4IBAQCzO7+c ZZ3mYgaqjywIELzqmO6UOBb1fvFJOnMgc4rdJ7pbDleE5d1ID+7nDE68aE125j6u whMWgbb882j/fh9js2Lw0MDSCuoUAGMm8pFEX9/d0aWfvFvq5TFsoMf2yK5647bg UPmjV9YfxZLdqFWGpbHNdeZLndBKimt4XufQpo8z2hJ8/QtMaxHAEpXZPndx8rdL 9akBPbIUL8LjuCQfcxh+4F988XNurbuDQOOZrn8IylJE6EnG5iUTbtPjxWGZpeSV FTua68Lf2K6Ju00F6YUFwwSUHGVjvn3RqHybL/Cxj2PO49F/TnV89TXnU2anYAML oqoXC+X2aOty+Jlz -----END CERTIFICATE-----Generated at Sat Dec 20 09:20:34 2025 by rpki-client