This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a643664653a3a2f34382d3438203d3e20323633363039.roa File: 323830343a6666303a643664653a3a2f34382d3438203d3e20323633363039.roa (raw, json) Hash identifier: R6KNIHT9KqDuhXn4NEwbViQV5iPLRILac2uvNeMUV9I= Subject key identifier: A8:7D:E2:FC:9F:74:14:3C:71:A5:A9:8B:C9:73:C4:4F:72:28:26:6C Certificate issuer: /CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B Certificate serial: 4D7E9AEDFA987684493E7994D27D78658536BEA1 Authority key identifier: B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a643664653a3a2f34382d3438203d3e20323633363039.roa Signing time: Mon 08 Dec 2025 14:52:04 +0000 ROA not before: Mon 08 Dec 2025 14:47:04 +0000 ROA not after: Mon 07 Dec 2026 14:52:04 +0000 asID: 263609 IP address blocks: 2804:ff0:d6de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7e:9a:ed:fa:98:76:84:49:3e:79:94:d2:7d:78:65:85:36:be:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B Validity Not Before: Dec 8 14:47:04 2025 GMT Not After : Dec 7 14:52:04 2026 GMT Subject: CN=A87DE2FC9F74143C71A5A98BC973C44F7228266C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:f8:34:47:c4:7f:ca:e0:59:42:69:2c:39: e0:d7:f8:30:9e:fd:39:23:81:24:fe:2d:22:0c:56: 48:45:dd:c8:c6:db:ee:60:8b:e1:86:6c:d8:35:6c: 4f:02:b5:cd:e4:5e:a6:f8:09:97:48:a3:6d:33:ad: 8f:d5:60:58:48:db:9e:3b:e6:28:ea:be:d7:99:d0: 43:31:d6:34:95:f5:51:2a:12:23:df:c7:5b:09:95: 06:e5:88:e5:74:17:8c:09:e6:ac:b0:da:d9:da:e1: 84:8a:a2:97:92:9b:8d:3e:90:05:d7:34:e5:2f:d0: 6c:91:b6:da:f8:70:b3:10:d9:e1:48:e4:39:75:65: 64:c3:df:9d:ff:2c:b9:ce:dc:46:21:11:4f:25:c3: 9f:7d:fc:91:b0:51:8c:73:cd:ae:0f:84:98:d3:ee: 61:05:1c:22:0f:c0:e6:f3:b5:9f:ad:99:af:93:92: b7:c2:d9:74:53:c2:67:13:4a:52:2c:17:db:2d:f6: 66:81:60:dc:49:00:c6:49:f9:ac:c9:4c:67:db:1d: cf:fe:98:df:e9:4a:b5:f7:36:c8:16:3a:69:16:51: 2c:e2:a8:3d:de:ed:fd:b8:3f:25:b0:63:52:64:03: 8f:07:8e:a8:0e:de:f7:de:6b:bc:4b:cc:e4:01:49: 42:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7D:E2:FC:9F:74:14:3C:71:A5:A9:8B:C9:73:C4:4F:72:28:26:6C X509v3 Authority Key Identifier: keyid:B1:0C:3C:3A:08:75:ED:3B:56:5F:D6:5E:38:ED:0C:DE:A0:58:D2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10C3C3A0875ED3B565FD65E38ED0CDEA058D21B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YVTtL9io16QXyKYoNmMs842kafHrHmZ5JFt8xNn5Djm/0/323830343a6666303a643664653a3a2f34382d3438203d3e20323633363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:ff0:d6de::/48 Signature Algorithm: sha256WithRSAEncryption 30:51:c3:ee:2a:1f:fe:89:fe:43:36:fc:f8:70:01:ee:b3:fc: b1:3b:b0:cb:3f:20:c3:dc:2f:83:3f:f3:ec:6a:fa:66:3e:e3: cf:ec:a9:f1:1b:b6:34:23:e3:91:c7:d1:ef:b4:5c:2f:cd:85: 22:e8:a2:5e:13:70:34:ba:50:a2:8b:e4:06:3f:dc:5f:4c:ac: 10:ea:dd:38:c2:9e:ef:48:08:7a:2e:98:1a:0b:44:b7:72:94: 8e:98:d0:e8:d3:52:ab:88:45:ec:ed:96:cf:ba:8b:b7:0a:45: ed:d9:ed:18:c7:d0:16:80:5c:54:e0:7b:f0:40:4d:f9:b7:70: 01:1a:75:13:8e:1b:ea:c3:2b:98:cb:4c:ef:03:6d:ab:9d:14: a4:1d:07:40:9b:f2:07:d8:bf:84:27:2e:23:da:ab:dc:b8:73: f5:31:27:be:9d:8c:8b:f2:f3:24:2d:13:04:d4:b8:0f:72:e2: 79:c9:81:29:e4:30:1e:50:d2:0e:ff:de:4a:9a:de:4d:44:a4: 38:af:f5:d1:5f:49:25:c6:41:b5:82:f5:e2:69:f0:ef:c0:d7: 7b:31:92:b3:71:b2:6e:57:fa:43:88:70:3b:3b:be:1a:3a:15: d3:1a:f4:ed:87:0c:00:01:7e:c4:3b:d1:65:d5:e0:88:bf:d3: eb:3b:49:d5 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUTX6a7fqYdoRJPnmU0n14ZYU2vqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwQzNDM0EwODc1RUQzQjU2NUZENjVFMzhFRDBDREVB MDU4RDIxQjAeFw0yNTEyMDgxNDQ3MDRaFw0yNjEyMDcxNDUyMDRaMDMxMTAvBgNV BAMTKEE4N0RFMkZDOUY3NDE0M0M3MUE1QTk4QkM5NzNDNDRGNzIyODI2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PPg0R8R/yuBZQmksOeDX+DCe /TkjgST+LSIMVkhF3cjG2+5gi+GGbNg1bE8Ctc3kXqb4CZdIo20zrY/VYFhI2547 5ijqvteZ0EMx1jSV9VEqEiPfx1sJlQbliOV0F4wJ5qyw2tna4YSKopeSm40+kAXX NOUv0GyRttr4cLMQ2eFI5Dl1ZWTD353/LLnO3EYhEU8lw599/JGwUYxzza4PhJjT 7mEFHCIPwObztZ+tma+TkrfC2XRTwmcTSlIsF9st9maBYNxJAMZJ+azJTGfbHc/+ mN/pSrX3NsgWOmkWUSziqD3e7f24PyWwY1JkA48HjqgO3vfea7xLzOQBSULBAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUqH3i/J90FDxxpamLyXPET3IoJmwwHwYDVR0j BBgwFoAUsQw8Ogh17TtWX9ZeOO0M3qBY0hswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWVHRMOWlvMTZRWHlLWW9ObU1zODQya2FmSHJIbVo1SkZ0OHhObjVE am0vMC9CMTBDM0MzQTA4NzVFRDNCNTY1RkQ2NUUzOEVEMENERUEwNThEMjFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMEMzQzNBMDg3NUVEM0I1 NjVGRDY1RTM4RUQwQ0RFQTA1OEQyMUIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVlR0TDlpbzE2UVh5S1lvTm1Nczg0MmthZkhySG1aNUpGdDh4Tm41RGptLzAv MzIzODMwMzQzYTY2NjYzMDNhNjQzNjY0NjUzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzMjM2MzMzNjMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBA/w1t4wDQYJKoZIhvcNAQELBQAD ggEBADBRw+4qH/6J/kM2/PhwAe6z/LE7sMs/IMPcL4M/8+xq+mY+48/sqfEbtjQj 45HH0e+0XC/NhSLool4TcDS6UKKL5AY/3F9MrBDq3TjCnu9ICHoumBoLRLdylI6Y 0OjTUquIReztls+6i7cKRe3Z7RjH0BaAXFTge/BATfm3cAEadROOG+rDK5jLTO8D baudFKQdB0Cb8gfYv4QnLiPaq9y4c/UxJ76djIvy8yQtEwTUuA9y4nnJgSnkMB5Q 0g7/3kqa3k1EpDiv9dFfSSXGQbWC9eJp8O/A13sxkrNxsm5X+kOIcDs7vho6FdMa 9O2HDAABfsQ70WXV4Ii/0+s7SdU= -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:42 2025 by rpki-client