This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/323830343a346163633a3a2f33322d313237203d3e20323637323634.roa File: 323830343a346163633a3a2f33322d313237203d3e20323637323634.roa (raw, json) Hash identifier: pIkUxugDZm7duBijR+p3SImAotHWsxgRdsO4xRE/1F4= Subject key identifier: FA:59:CD:33:4B:05:89:D9:55:BB:C9:9F:4E:09:70:11:3B:F3:5F:99 Certificate issuer: /CN=F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4 Certificate serial: 7301BBC1525A7D5CEB54EF01A838CA7BC21D6A07 Authority key identifier: F0:CA:3C:25:5B:5A:CE:E9:E6:EA:0C:AF:48:5A:F0:91:EB:07:12:E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/323830343a346163633a3a2f33322d313237203d3e20323637323634.roa Signing time: Thu 11 Dec 2025 13:21:27 +0000 ROA not before: Thu 11 Dec 2025 13:16:27 +0000 ROA not after: Thu 10 Dec 2026 13:21:27 +0000 asID: 267264 IP address blocks: 2804:4acc::/32 maxlen: 127 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.crl rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 10:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:01:bb:c1:52:5a:7d:5c:eb:54:ef:01:a8:38:ca:7b:c2:1d:6a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4 Validity Not Before: Dec 11 13:16:27 2025 GMT Not After : Dec 10 13:21:27 2026 GMT Subject: CN=FA59CD334B0589D955BBC99F4E0970113BF35F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:54:e7:d3:37:be:c6:99:d3:44:12:dc:1e: 78:23:2b:51:91:9d:8a:eb:1b:f9:de:33:fb:8f:b7: 2b:59:2f:8e:9e:d5:9f:9f:b3:84:9c:58:75:d6:46: 4e:d4:6b:88:b7:1c:92:ef:81:13:35:b4:ea:60:af: c9:3e:aa:cb:c9:25:1e:72:48:1c:80:93:d0:45:4c: 9b:b4:a5:32:11:97:6e:64:f2:ba:6d:88:f3:e6:ef: 10:12:81:a1:4d:e3:1c:08:86:19:ac:98:7c:e0:01: 85:68:0c:cf:dd:fe:75:57:ed:72:4a:2b:86:8a:83: 21:08:e6:3b:ae:cd:38:33:a9:a8:8c:73:ea:37:78: 36:40:24:05:68:7b:81:e0:b1:51:d0:49:4c:01:4d: c6:7c:e0:a4:e6:56:d4:f8:9a:75:24:62:f8:2a:68: c2:89:a1:bc:a8:24:d3:c7:31:fc:7f:5e:b4:cc:ad: a1:fa:c4:29:b8:f0:cf:7a:c1:a9:1c:70:d5:06:6e: e2:82:a2:5c:40:03:f5:54:85:57:df:d7:00:13:ad: 46:e2:e1:f0:19:75:76:b6:f6:78:1e:d5:44:9d:f3: 6a:72:1b:0e:96:1d:37:2f:ae:a5:56:af:9a:a3:a1: 53:01:73:44:f3:89:6f:ff:a5:51:61:db:6e:10:ca: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:59:CD:33:4B:05:89:D9:55:BB:C9:9F:4E:09:70:11:3B:F3:5F:99 X509v3 Authority Key Identifier: keyid:F0:CA:3C:25:5B:5A:CE:E9:E6:EA:0C:AF:48:5A:F0:91:EB:07:12:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/323830343a346163633a3a2f33322d313237203d3e20323637323634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4acc::/32 Signature Algorithm: sha256WithRSAEncryption 3f:ef:ba:b4:16:70:74:c1:4f:ee:e5:b1:34:09:23:75:6c:3e: cf:58:ff:6a:cf:62:8a:f9:2e:ed:df:a2:b9:d9:0d:4f:64:28: fd:28:57:47:6a:72:74:a4:36:9f:a9:51:85:8d:59:eb:60:a8: 29:d6:68:e8:68:f9:46:da:ff:3f:dd:84:59:34:ec:9e:d4:d8: 39:cc:92:21:e9:10:38:39:cb:e2:f7:04:e0:1c:50:88:27:8e: 16:06:8f:e4:65:a2:30:88:ce:af:24:9c:98:2a:cb:bb:02:f3: 0a:01:10:2b:90:4b:0c:25:f1:90:e9:e0:5d:60:08:0a:6c:f9: c4:ac:98:c8:2a:16:21:00:cd:5f:2e:c8:9e:c1:5c:09:99:dc: aa:a4:00:61:52:b9:74:93:4a:99:15:1e:e0:c3:8c:15:8b:91: 80:52:42:c7:7b:55:b1:5d:ef:74:73:ce:e4:5e:61:40:96:54: 78:1d:4f:ec:6f:2d:86:82:96:71:86:29:e8:4f:55:24:8c:0b: d7:6c:41:b2:ba:17:31:b8:ab:77:10:55:ac:5e:db:69:49:7e: 57:35:ee:d9:34:57:c3:8d:08:68:e8:aa:b0:b8:e1:84:07:ac: 67:50:09:b8:67:3f:04:27:ab:5d:bd:b6:0a:77:b4:66:f4:b0: 11:53:b9:33 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUcwG7wVJafVzrVO8BqDjKe8IdagcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBDQTNDMjU1QjVBQ0VFOUU2RUEwQ0FGNDg1QUYwOTFF QjA3MTJFNDAeFw0yNTEyMTExMzE2MjdaFw0yNjEyMTAxMzIxMjdaMDMxMTAvBgNV BAMTKEZBNTlDRDMzNEIwNTg5RDk1NUJCQzk5RjRFMDk3MDExM0JGMzVGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2v1Tn0ze+xpnTRBLcHngjK1GR nYrrG/neM/uPtytZL46e1Z+fs4ScWHXWRk7Ua4i3HJLvgRM1tOpgr8k+qsvJJR5y SByAk9BFTJu0pTIRl25k8rptiPPm7xASgaFN4xwIhhmsmHzgAYVoDM/d/nVX7XJK K4aKgyEI5juuzTgzqaiMc+o3eDZAJAVoe4HgsVHQSUwBTcZ84KTmVtT4mnUkYvgq aMKJobyoJNPHMfx/XrTMraH6xCm48M96wakccNUGbuKColxAA/VUhVff1wATrUbi 4fAZdXa29nge1USd82pyGw6WHTcvrqVWr5qjoVMBc0TziW//pVFh224QyoDPAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU+lnNM0sFidlVu8mfTglwETvzX5kwHwYDVR0j BBgwFoAU8Mo8JVtazunm6gyvSFrwkesHEuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhKczIyQnM2Z3QyWGc1cUQ1bTRaQW83blhYRHZTazRoV0RvbThTY3Vh RW4vMC9GMENBM0MyNTVCNUFDRUU5RTZFQTBDQUY0ODVBRjA5MUVCMDcxMkU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQ0EzQzI1NUI1QUNFRTlF NkVBMENBRjQ4NUFGMDkxRUIwNzEyRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM4SnMyMkJzNmd0MlhnNXFENW00WkFvN25YWER2U2s0aFdEb204U2N1YUVuLzAv MzIzODMwMzQzYTM0NjE2MzYzM2EzYTJmMzMzMjJkMzEzMjM3MjAzZDNlMjAzMjM2 MzczMjM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBErMMA0GCSqGSIb3DQEBCwUAA4IBAQA/77q0 FnB0wU/u5bE0CSN1bD7PWP9qz2KK+S7t36K52Q1PZCj9KFdHanJ0pDafqVGFjVnr YKgp1mjoaPlG2v8/3YRZNOye1Ng5zJIh6RA4Ocvi9wTgHFCIJ44WBo/kZaIwiM6v JJyYKsu7AvMKARArkEsMJfGQ6eBdYAgKbPnErJjIKhYhAM1fLsiewVwJmdyqpABh Url0k0qZFR7gw4wVi5GAUkLHe1WxXe90c87kXmFAllR4HU/sby2GgpZxhinoT1Uk jAvXbEGyuhcxuKt3EFWsXttpSX5XNe7ZNFfDjQho6KqwuOGEB6xnUAm4Zz8EJ6td vbYKd7Rm9LARU7kz -----END CERTIFICATE-----Generated at Sat Dec 20 14:35:28 2025 by rpki-client