This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a3a2f33322d3438203d3e20323633363039.roa File: 323830343a6666303a3a2f33322d3438203d3e20323633363039.roa (raw, json) Hash identifier: oj4O4M/KEuucJ5QGHsE/AFfTrtxkskVaDKNS+UUSDlc= Subject key identifier: 2B:3B:B0:FF:6B:60:6D:5B:95:38:BA:37:16:2A:F5:7B:2E:3B:5A:BB Certificate issuer: /CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B Certificate serial: 3C66911AAF80C718BB22FF4C4F5C82802EA50770 Authority key identifier: B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a3a2f33322d3438203d3e20323633363039.roa Signing time: Tue 16 Dec 2025 17:04:33 +0000 ROA not before: Tue 16 Dec 2025 16:59:33 +0000 ROA not after: Tue 15 Dec 2026 17:04:33 +0000 asID: 263609 IP address blocks: 2804:ff0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:66:91:1a:af:80:c7:18:bb:22:ff:4c:4f:5c:82:80:2e:a5:07:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B Validity Not Before: Dec 16 16:59:33 2025 GMT Not After : Dec 15 17:04:33 2026 GMT Subject: CN=2B3BB0FF6B606D5B9538BA37162AF57B2E3B5ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:48:c2:4e:8e:b9:db:a0:da:2f:1d:88:85: 37:01:f8:bc:aa:42:95:03:a0:28:8b:74:a0:ae:7b: 8a:99:55:9f:e6:e8:8d:dc:95:dd:78:fa:b2:d3:33: 7c:8a:7d:3c:19:9a:a8:7b:13:55:78:5c:04:5d:6b: c4:c8:a4:a0:f3:39:12:32:ae:d0:74:2f:4b:58:f8: 01:37:6a:d7:d1:79:73:40:01:8a:9b:5f:ae:98:47: df:d3:3b:64:37:2d:15:f6:49:45:6e:ad:46:c9:a8: 11:6e:64:5e:18:50:0d:ec:51:59:b8:b6:5f:1e:f8: 35:47:e2:f6:91:e3:74:f6:d6:6a:82:e4:db:a5:a7: 10:d9:4f:30:d9:55:0d:e6:99:2b:c1:e0:ed:2f:6a: 45:57:78:53:18:4e:18:fb:09:67:76:2c:86:54:39: 0b:75:2b:38:4b:ec:57:da:bc:56:6d:9c:9b:84:39: 59:fb:39:5d:54:07:1d:81:55:bf:8a:4f:a0:13:1e: b8:e9:eb:bb:0c:97:54:09:cf:da:2e:c9:07:43:a5: 1b:ed:aa:c8:33:03:0c:18:a3:e0:c6:33:54:ab:4a: 62:35:3d:76:7b:58:e8:cb:47:41:68:6f:d8:26:71: 9a:e5:ae:45:db:43:10:f8:18:d8:6f:e0:46:41:76: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3B:B0:FF:6B:60:6D:5B:95:38:BA:37:16:2A:F5:7B:2E:3B:5A:BB X509v3 Authority Key Identifier: keyid:B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a3a2f33322d3438203d3e20323633363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:ff0::/32 Signature Algorithm: sha256WithRSAEncryption 31:6f:9b:ca:36:a8:21:07:57:f9:b2:2f:6d:90:82:0f:86:16: e3:b4:8e:27:e2:a3:db:f8:de:4a:62:de:0a:89:13:35:17:0a: 19:39:59:ae:f9:68:9b:42:3d:56:11:d0:fc:56:12:c9:75:09: fa:f1:f3:d7:2a:58:95:64:cb:4d:3c:fe:8f:a4:e8:b5:fd:7a: e7:81:ea:b8:7f:fb:08:86:fe:9b:e9:73:a1:b9:c3:36:fb:74: e6:c8:10:e4:09:e5:63:60:33:7d:71:8c:3f:c4:1e:d5:d1:c9: 6e:42:a0:0c:46:50:14:a2:27:b6:43:41:a5:33:57:b3:5c:be: f0:f4:ab:ca:84:ab:4b:fc:97:df:31:81:11:f4:c7:82:48:97: e3:d2:9f:ec:63:6a:d0:ef:3d:3f:3a:82:7d:d6:39:be:a8:f2: 42:fe:81:42:36:d3:ff:12:75:23:e5:19:50:ff:91:87:25:92: 2c:cb:b8:99:e8:f8:15:2b:fa:b7:2d:f8:92:77:50:0c:a4:e7: 95:71:a7:cd:5c:0b:78:87:fc:09:f6:e5:1e:a2:2e:84:d5:7f: 8e:8e:8d:f0:2a:94:8c:dc:2c:84:99:b4:91:6d:91:b2:09:2e: e5:36:ba:73:bc:03:68:54:57:d4:e8:5e:10:64:4c:38:b9:90: b2:3e:4d:7f -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUPGaRGq+Axxi7Iv9MT1yCgC6lB3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwQzNDM0EwODc1RUQzQjU2NUZENjVFMzhFRDBDREVB MDU4RDIxQjAeFw0yNTEyMTYxNjU5MzNaFw0yNjEyMTUxNzA0MzNaMDMxMTAvBgNV BAMTKDJCM0JCMEZGNkI2MDZENUI5NTM4QkEzNzE2MkFGNTdCMkUzQjVBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCkjCTo6526DaLx2IhTcB+Lyq QpUDoCiLdKCue4qZVZ/m6I3cld14+rLTM3yKfTwZmqh7E1V4XARda8TIpKDzORIy rtB0L0tY+AE3atfReXNAAYqbX66YR9/TO2Q3LRX2SUVurUbJqBFuZF4YUA3sUVm4 tl8e+DVH4vaR43T21mqC5NulpxDZTzDZVQ3mmSvB4O0vakVXeFMYThj7CWd2LIZU OQt1KzhL7FfavFZtnJuEOVn7OV1UBx2BVb+KT6ATHrjp67sMl1QJz9ouyQdDpRvt qsgzAwwYo+DGM1SrSmI1PXZ7WOjLR0Fob9gmcZrlrkXbQxD4GNhv4EZBdg3/AgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUKzuw/2tgbVuVOLo3Fir1ey47WrswHwYDVR0j BBgwFoAUsQw8Ogh17TtWX9ZeOO0M3qBY0hswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWVHRMOWlvMTZRWHlLWW9ObU1zODQya2FmSHJIbVo1SkZ0OHhObjVE am0vMC9CMTBDM0MzQTA4NzVFRDNCNTY1RkQ2NUUzOEVEMENERUEwNThEMjFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMEMzQzNBMDg3NUVEM0I1 NjVGRDY1RTM4RUQwQ0RFQTA1OEQyMUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVlR0TDlpbzE2UVh5S1lvTm1Nczg0MmthZkhySG1aNUpGdDh4Tm41RGptLzAv MzIzODMwMzQzYTY2NjYzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM2 MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgED/AwDQYJKoZIhvcNAQELBQADggEBADFvm8o2qCEH V/myL22Qgg+GFuO0jifio9v43kpi3gqJEzUXChk5Wa75aJtCPVYR0PxWEsl1Cfrx 89cqWJVky008/o+k6LX9eueB6rh/+wiG/pvpc6G5wzb7dObIEOQJ5WNgM31xjD/E HtXRyW5CoAxGUBSiJ7ZDQaUzV7NcvvD0q8qEq0v8l98xgRH0x4JIl+PSn+xjatDv PT86gn3WOb6o8kL+gUI20/8SdSPlGVD/kYclkizLuJno+BUr+rct+JJ3UAyk55Vx p81cC3iH/An25R6iLoTVf46OjfAqlIzcLISZtJFtkbIJLuU2unO8A2hUV9ToXhBk TDi5kLI+TX8= -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:39 2025 by rpki-client