This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/323830343a6536383a3a2f33322d3438203d3e20323632393533.roa File: 323830343a6536383a3a2f33322d3438203d3e20323632393533.roa (raw, json) Hash identifier: y4BU9tAgBE8KAu9lC6vS02GM0gSjit3IUwZsrYSuI7I= Subject key identifier: 17:94:9A:20:00:E1:47:82:E2:6E:A3:8D:7F:D7:A9:51:78:A0:62:05 Certificate issuer: /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D Certificate serial: 7B3BE8DEF95729F9DB523E3140544734B5DEAE6E Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer Subject info access: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/323830343a6536383a3a2f33322d3438203d3e20323632393533.roa Signing time: Wed 10 Dec 2025 18:08:07 +0000 ROA not before: Wed 10 Dec 2025 18:03:07 +0000 ROA not after: Wed 09 Dec 2026 18:08:07 +0000 asID: 262953 IP address blocks: 2804:e68::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 03:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3b:e8:de:f9:57:29:f9:db:52:3e:31:40:54:47:34:b5:de:ae:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D Validity Not Before: Dec 10 18:03:07 2025 GMT Not After : Dec 9 18:08:07 2026 GMT Subject: CN=17949A2000E14782E26EA38D7FD7A95178A06205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:10:ae:86:1b:6d:72:fb:4b:50:ef:c5:83: e4:94:9a:b6:78:8e:f4:ec:6f:3d:45:b3:d6:34:93: f4:0b:7d:43:5f:f2:b8:11:64:b8:69:b0:ff:f5:77: 2e:ff:5a:fa:1e:ce:07:25:63:f9:a7:c3:77:c2:4b: 4c:ad:3f:e2:b8:3c:9b:00:63:dc:4d:c6:ca:cf:33: 1b:7b:02:88:71:c8:a0:f7:6c:38:22:78:86:fb:77: 4f:27:ad:50:b7:99:e7:9f:52:ae:20:ff:f8:85:1c: 84:18:46:28:d4:d2:b8:59:4a:7b:3d:06:95:49:e7: 78:c8:f0:17:ba:87:87:bf:e9:fe:bf:f9:76:c1:7e: 78:02:b0:0b:72:6f:8b:ff:15:6b:90:33:ab:4a:5e: 09:e8:41:ee:9a:b5:a5:f6:f3:f9:38:ef:da:2e:a5: 5a:b0:03:71:5b:ee:e8:96:51:3a:d9:53:fe:c2:73: 74:5f:56:b2:15:fe:81:cc:73:90:90:20:a8:83:bb: c2:84:ce:58:30:46:86:ad:e3:bf:c5:62:fb:32:33: f3:c7:3b:c2:45:18:d9:be:98:df:cf:d9:a9:9d:95: 35:b3:e0:e4:2e:3b:86:b7:91:2f:70:6e:d2:6b:42: 5a:de:7a:b7:4f:7d:91:c8:49:c7:6b:54:50:b4:54: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:9A:20:00:E1:47:82:E2:6E:A3:8D:7F:D7:A9:51:78:A0:62:05 X509v3 Authority Key Identifier: keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/323830343a6536383a3a2f33322d3438203d3e20323632393533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:e68::/32 Signature Algorithm: sha256WithRSAEncryption 58:7e:f9:fd:de:42:88:b4:4b:9a:d2:92:d2:34:87:05:d9:6d: 63:85:2d:0a:66:7b:a2:e9:34:5d:eb:7e:16:a0:83:10:89:73: 14:79:34:7c:8d:67:f6:83:00:22:a9:4c:ec:4f:f2:2b:a0:6f: 49:a2:64:07:23:95:87:ea:5e:c7:3b:b4:c4:23:0c:21:c9:b3: f6:1a:1d:3b:55:9c:ed:5b:45:4a:b5:58:2a:c2:fb:ae:30:be: 8b:70:36:4d:9c:c1:df:55:81:0b:74:86:3e:76:45:36:af:1c: 28:6d:30:27:a8:e6:35:d8:7c:ec:86:40:2e:b4:43:f2:42:74: d9:ec:51:3f:3e:35:67:07:a0:10:33:22:4f:7f:3b:87:a7:bb: 3b:65:ba:4a:c6:25:e4:24:44:f5:03:80:c1:d9:7f:5a:12:81: c5:25:c4:de:2a:b3:bc:6c:60:8f:11:44:c6:6c:13:29:e2:30: bd:88:57:29:70:9b:fb:19:09:66:7d:ea:9f:5a:a4:fc:70:42: f0:97:09:c6:ee:18:cf:c3:74:80:3a:84:52:ab:f8:fe:cd:fa: 85:df:4b:c7:53:f6:c4:ee:a3:f2:c9:4c:20:cf:45:6d:52:be: 0e:6a:8f:f1:33:4c:a1:9c:32:72:b7:ea:2c:6e:7b:c4:54:8c: 90:7b:b1:04 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUezvo3vlXKfnbUj4xQFRHNLXerm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1ODZGOTk4OTQ5MjQ1QTdCQTg3RDU0QzQ4REI2QzQz NjBDRUI5RDAeFw0yNTEyMTAxODAzMDdaFw0yNjEyMDkxODA4MDdaMDMxMTAvBgNV BAMTKDE3OTQ5QTIwMDBFMTQ3ODJFMjZFQTM4RDdGRDdBOTUxNzhBMDYyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedxCuhhttcvtLUO/Fg+SUmrZ4 jvTsbz1Fs9Y0k/QLfUNf8rgRZLhpsP/1dy7/WvoezgclY/mnw3fCS0ytP+K4PJsA Y9xNxsrPMxt7AohxyKD3bDgieIb7d08nrVC3meefUq4g//iFHIQYRijU0rhZSns9 BpVJ53jI8Be6h4e/6f6/+XbBfngCsAtyb4v/FWuQM6tKXgnoQe6ataX28/k479ou pVqwA3Fb7uiWUTrZU/7Cc3RfVrIV/oHMc5CQIKiDu8KEzlgwRoat47/FYvsyM/PH O8JFGNm+mN/P2amdlTWz4OQuO4a3kS9wbtJrQlreerdPfZHIScdrVFC0VAnfAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUF5SaIADhR4LibqONf9epUXigYgUwHwYDVR0j BBgwFoAUPlhvmYlJJFp7qH1UxI22xDYM650wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3I5eHl0a2t0cEJlMVE1QnROUndQTFh6RGIxVXQ4YTludWVia3NmM1hZ WGQvMC8zRTU4NkY5OTg5NDkyNDVBN0JBODdENTRDNDhEQjZDNDM2MENFQjlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFNTg2Rjk5ODk0OTI0NUE3 QkE4N0Q1NEM0OERCNkM0MzYwQ0VCOUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNyOXh5dGtrdHBCZTFRNUJ0TlJ3UExYekRiMVV0OGE5bnVlYmtzZjNYWVhkLzAv MzIzODMwMzQzYTY1MzYzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM5 MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEDmgwDQYJKoZIhvcNAQELBQADggEBAFh++f3eQoi0 S5rSktI0hwXZbWOFLQpme6LpNF3rfhaggxCJcxR5NHyNZ/aDACKpTOxP8iugb0mi ZAcjlYfqXsc7tMQjDCHJs/YaHTtVnO1bRUq1WCrC+64wvotwNk2cwd9VgQt0hj52 RTavHChtMCeo5jXYfOyGQC60Q/JCdNnsUT8+NWcHoBAzIk9/O4enuztlukrGJeQk RPUDgMHZf1oSgcUlxN4qs7xsYI8RRMZsEyniML2IVylwm/sZCWZ96p9apPxwQvCX CcbuGM/DdIA6hFKr+P7N+oXfS8dT9sTuo/LJTCDPRW1Svg5qj/EzTKGcMnK36ixu e8RUjJB7sQQ= -----END CERTIFICATE-----Generated at Sun Dec 21 02:33:10 2025 by rpki-client