This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/323830343a313039383a383030303a3a2f34302d3634203d3e203532373636.roa File: 323830343a313039383a383030303a3a2f34302d3634203d3e203532373636.roa (raw, json) Hash identifier: JZGmc1ous4bZq5lhnKdYV9PfKLERItm+WUAD3UHXekg= Subject key identifier: 18:12:7F:DC:0A:F7:C6:70:8C:9E:DB:DB:06:12:EE:65:10:74:F5:FE Certificate issuer: /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Certificate serial: 07A1DF31C24F88B917A594F4654AC2AA14712621 Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/323830343a313039383a383030303a3a2f34302d3634203d3e203532373636.roa Signing time: Thu 18 Dec 2025 13:09:34 +0000 ROA not before: Thu 18 Dec 2025 13:04:34 +0000 ROA not after: Thu 17 Dec 2026 13:09:34 +0000 asID: 52766 IP address blocks: 2804:1098:8000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 09:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a1:df:31:c2:4f:88:b9:17:a5:94:f4:65:4a:c2:aa:14:71:26:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Validity Not Before: Dec 18 13:04:34 2025 GMT Not After : Dec 17 13:09:34 2026 GMT Subject: CN=18127FDC0AF7C6708C9EDBDB0612EE651074F5FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:5d:dd:32:eb:77:db:ba:cc:13:3e:da:aa: b4:28:92:26:52:19:e8:1c:f8:97:0d:e4:9e:ee:bf: 48:d4:9f:e4:14:e8:0f:6b:30:70:08:90:26:06:17: 7c:f0:b4:24:b0:49:b2:9c:ce:67:d0:d6:a1:ef:65: d3:cc:75:8b:07:e3:01:0b:88:25:11:f0:7c:75:ec: 7f:c5:63:fd:a8:19:4c:81:ae:9a:07:93:fe:d5:fe: a3:78:56:52:bd:bc:2e:e3:28:19:9a:19:c6:48:36: 8f:83:fe:6e:b1:a3:1a:06:82:1d:1f:23:1b:f4:44: 4e:ea:3f:84:83:12:c6:11:72:78:6e:8e:cf:61:20: 38:57:38:3e:06:22:98:89:68:a8:16:1d:a9:12:0b: d6:98:fa:54:52:59:99:2b:d0:eb:22:7f:86:50:6a: 92:cf:7e:e8:d3:54:3e:ed:c9:3f:92:4e:e0:ad:53: 4d:76:31:2a:71:3e:20:57:25:b7:a1:f1:9e:7d:2d: 2f:15:46:60:bd:75:9a:eb:04:1b:3c:e8:1a:67:52: d3:0b:69:d6:60:0b:14:37:81:ac:63:48:17:d3:40: b5:ac:1a:4f:c3:fc:17:e1:f2:64:45:30:e4:0e:aa: 64:82:ed:4a:f5:d3:b6:d8:4d:ee:80:34:f3:ef:20: 94:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:12:7F:DC:0A:F7:C6:70:8C:9E:DB:DB:06:12:EE:65:10:74:F5:FE X509v3 Authority Key Identifier: keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/323830343a313039383a383030303a3a2f34302d3634203d3e203532373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1098:8000::/40 Signature Algorithm: sha256WithRSAEncryption 52:08:a5:b7:40:23:70:ac:a0:8c:d1:3a:84:be:75:79:56:ca: 0f:d2:d7:b0:f0:3f:a1:61:82:5a:d7:ef:d4:86:42:ba:2f:6e: db:91:b6:27:e4:96:ed:01:05:ef:95:6b:c4:2c:43:b8:d8:c9: 4a:f1:ab:88:53:4a:ef:78:b7:72:20:16:97:ac:77:28:cf:91: 9f:7a:14:fd:00:6c:ba:d9:1b:09:76:29:09:48:f4:9c:2c:5d: 04:31:87:16:56:9a:3b:c3:37:31:2f:05:d5:20:bd:19:3d:08: 4c:2c:1a:c2:1f:e8:c9:c7:a0:e9:0a:19:ab:37:9f:67:46:03: 46:0d:52:5f:af:81:82:7d:f8:89:b2:c6:ee:61:4e:ed:6a:cc: 76:07:dd:cc:74:80:41:fa:d1:b7:a6:71:6a:a2:3d:09:47:59: 84:cd:a8:87:33:22:c2:fb:d2:d9:e9:49:89:8f:f3:25:cf:fe: 81:8a:ca:4d:91:fc:82:b0:f5:4f:79:d0:c5:1a:a4:cd:89:18: 4f:04:d4:57:82:84:f8:cf:fc:65:1d:2e:8e:b4:ad:e3:ad:ce: 2c:b0:7a:29:28:f2:4a:62:9b:a0:7f:5d:c3:4f:2e:74:b7:2a: 20:86:98:eb:36:d0:55:eb:3a:7e:f9:9b:5e:76:78:88:06:a5: e1:08:23:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB6HfMcJPiLkXpZT0ZUrCqhRxJiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJBOUJCNkZENTY3QTUwODNCN0JBMEJCMDdDRDMxMjEw RjNDOEJFRTAeFw0yNTEyMTgxMzA0MzRaFw0yNjEyMTcxMzA5MzRaMDMxMTAvBgNV BAMTKDE4MTI3RkRDMEFGN0M2NzA4QzlFREJEQjA2MTJFRTY1MTA3NEY1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKF3dMut327rMEz7aqrQokiZS Gegc+JcN5J7uv0jUn+QU6A9rMHAIkCYGF3zwtCSwSbKczmfQ1qHvZdPMdYsH4wEL iCUR8Hx17H/FY/2oGUyBrpoHk/7V/qN4VlK9vC7jKBmaGcZINo+D/m6xoxoGgh0f Ixv0RE7qP4SDEsYRcnhujs9hIDhXOD4GIpiJaKgWHakSC9aY+lRSWZkr0Osif4ZQ apLPfujTVD7tyT+STuCtU012MSpxPiBXJbeh8Z59LS8VRmC9dZrrBBs86BpnUtML adZgCxQ3gaxjSBfTQLWsGk/D/Bfh8mRFMOQOqmSC7Ur107bYTe6ANPPvIJQ1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGBJ/3Ar3xnCMntvbBhLuZRB09f4wHwYDVR0j BBgwFoAU26m7b9VnpQg7e6C7B80xIQ88i+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv ZlYvMC9EQkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTlCQjZGRDU2N0E1MDgz QjdCQTBCQjA3Q0QzMTIxMEYzQzhCRUUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNDUFBadVBqaXVRQllrdjNCYUtWTnFxSzV0Mjd6aXFwOWZoQldTU2VFb2ZWLzAv MzIzODMwMzQzYTMxMzAzOTM4M2EzODMwMzAzMDNhM2EyZjM0MzAyZDM2MzQyMDNk M2UyMDM1MzIzNzM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBBCYgDANBgkqhkiG9w0BAQsFAAOC AQEAUgilt0AjcKygjNE6hL51eVbKD9LXsPA/oWGCWtfv1IZCui9u25G2J+SW7QEF 75VrxCxDuNjJSvGriFNK73i3ciAWl6x3KM+Rn3oU/QBsutkbCXYpCUj0nCxdBDGH FlaaO8M3MS8F1SC9GT0ITCwawh/oyceg6QoZqzefZ0YDRg1SX6+Bgn34ibLG7mFO 7WrMdgfdzHSAQfrRt6ZxaqI9CUdZhM2ohzMiwvvS2elJiY/zJc/+gYrKTZH8grD1 T3nQxRqkzYkYTwTUV4KE+M/8ZR0ujrSt463OLLB6KSjySmKboH9dw08udLcqIIaY 6zbQVes6fvmbXnZ4iAal4QgjSA== -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:43 2025 by rpki-client