This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a3a2f33332d3333203d3e20323730373232.roa File: 323830343a373035633a3a2f33332d3333203d3e20323730373232.roa (raw, json) Hash identifier: k8LUy+g5XEJPm5f+cUuwmNwumagIhSbynXaA7LWY80k= Subject key identifier: 7D:20:0C:EB:11:77:14:D5:8E:95:17:5F:B0:50:B8:8A:66:B6:66:92 Certificate issuer: /CN=049C86AED090D820BC9DFDA1465ACE658A61D801 Certificate serial: 1E57E523467A6B730F5B2874B76B4047670D5E02 Authority key identifier: 04:9C:86:AE:D0:90:D8:20:BC:9D:FD:A1:46:5A:CE:65:8A:61:D8:01 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer Subject info access: rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a3a2f33332d3333203d3e20323730373232.roa Signing time: Fri 12 Dec 2025 20:41:56 +0000 ROA not before: Fri 12 Dec 2025 20:36:56 +0000 ROA not after: Fri 11 Dec 2026 20:41:56 +0000 asID: 270722 IP address blocks: 2804:705c::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.crl rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 18:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:57:e5:23:46:7a:6b:73:0f:5b:28:74:b7:6b:40:47:67:0d:5e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049C86AED090D820BC9DFDA1465ACE658A61D801 Validity Not Before: Dec 12 20:36:56 2025 GMT Not After : Dec 11 20:41:56 2026 GMT Subject: CN=7D200CEB117714D58E95175FB050B88A66B66692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:8f:a8:a6:55:2a:33:0e:59:10:ae:2f:ad: 95:c0:6c:58:0c:24:9c:6a:95:45:fc:d2:d7:d6:b1: c8:5c:28:8d:70:af:ed:fa:ec:4a:ee:ca:b6:c3:fd: 75:c5:3e:f2:73:2d:23:49:8d:15:db:d7:a3:92:79: a5:1b:49:9e:aa:13:f4:f7:05:48:27:09:27:46:12: ce:2c:56:ad:27:44:20:2b:82:6d:56:db:94:99:f1: 26:ad:99:0e:b3:28:4e:3d:68:03:5c:42:7e:1b:3a: 7d:43:24:37:79:c4:84:9c:26:ac:61:13:66:64:53: f7:74:cd:f9:74:25:07:71:41:92:32:a8:50:50:e6: 0f:e0:03:20:19:c5:6a:ea:05:7a:8b:c0:9c:45:8c: 99:a5:a5:32:00:35:7c:7c:bc:06:9a:af:5e:5c:50: b0:78:a7:fe:dc:a3:a3:58:ae:e4:e4:16:87:fb:07: c2:10:08:7a:5b:65:7d:89:1b:c1:16:36:6b:8a:ca: 5d:80:c4:71:b2:6c:18:51:3b:8d:f5:b0:2d:f3:49: b7:e4:48:dc:8f:23:9a:64:25:82:9d:66:b1:58:97: 72:cb:fc:82:54:09:83:5c:ee:2c:5e:0c:9f:1d:80: 31:7e:f0:0e:55:b1:0b:63:0f:e4:91:a8:2a:7b:12: 42:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:20:0C:EB:11:77:14:D5:8E:95:17:5F:B0:50:B8:8A:66:B6:66:92 X509v3 Authority Key Identifier: keyid:04:9C:86:AE:D0:90:D8:20:BC:9D:FD:A1:46:5A:CE:65:8A:61:D8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a3a2f33332d3333203d3e20323730373232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:705c::/33 Signature Algorithm: sha256WithRSAEncryption 0f:e2:b9:36:e4:ad:45:a5:66:19:52:ce:0a:b1:1f:0c:4c:87: ad:98:d9:49:d7:7c:0e:93:cc:43:9a:24:75:39:0a:50:d1:46: be:1d:d5:c9:84:61:25:75:23:41:43:d1:c9:f3:b1:7a:c0:0c: 9d:40:3b:7f:23:c6:a7:ec:7a:03:6f:3d:37:45:76:44:8e:dd: 6e:38:71:ac:61:a8:82:6a:fa:1a:8c:40:02:84:ea:c8:78:dd: 3d:5a:9f:83:da:62:b2:4b:8f:c7:18:12:7f:b2:56:61:18:6b: 5b:64:6f:d6:bc:66:e2:38:f9:34:78:81:ac:1c:ac:85:51:3c: 57:ca:d3:24:ff:8c:18:3e:3c:7e:9e:17:9a:f9:fa:9e:63:87: d5:7a:f3:4f:44:65:40:36:16:95:bd:7d:fa:7a:0a:ae:20:5e: 80:c4:dc:41:4c:d7:af:2b:07:97:12:11:41:af:e9:e9:b0:ed: d5:ed:5e:93:6e:83:de:1d:67:0b:82:ab:88:09:57:2e:e3:01: 40:26:c3:40:a6:9b:ee:89:81:d2:34:90:a3:95:85:72:a9:cc: e0:54:3e:05:73:46:9e:1e:b3:e9:b4:6a:30:58:74:5b:5e:93: 69:46:20:1b:97:be:44:46:bd:76:9a:26:f6:f7:99:ce:bc:d2: 93:18:38:10 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUHlflI0Z6a3MPWyh0t2tAR2cNXgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5Qzg2QUVEMDkwRDgyMEJDOURGREExNDY1QUNFNjU4 QTYxRDgwMTAeFw0yNTEyMTIyMDM2NTZaFw0yNjEyMTEyMDQxNTZaMDMxMTAvBgNV BAMTKDdEMjAwQ0VCMTE3NzE0RDU4RTk1MTc1RkIwNTBCODhBNjZCNjY2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+4+oplUqMw5ZEK4vrZXAbFgM JJxqlUX80tfWschcKI1wr+367EruyrbD/XXFPvJzLSNJjRXb16OSeaUbSZ6qE/T3 BUgnCSdGEs4sVq0nRCArgm1W25SZ8SatmQ6zKE49aANcQn4bOn1DJDd5xIScJqxh E2ZkU/d0zfl0JQdxQZIyqFBQ5g/gAyAZxWrqBXqLwJxFjJmlpTIANXx8vAaar15c ULB4p/7co6NYruTkFof7B8IQCHpbZX2JG8EWNmuKyl2AxHGybBhRO431sC3zSbfk SNyPI5pkJYKdZrFYl3LL/IJUCYNc7ixeDJ8dgDF+8A5VsQtjD+SRqCp7EkJLAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUfSAM6xF3FNWOlRdfsFC4ima2ZpIwHwYDVR0j BBgwFoAUBJyGrtCQ2CC8nf2hRlrOZYph2AEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3ozRXVTRTZWUnprZ0U2enNVRnlpbmh4dWkzYlhTcUVLd1FkYmtSendC ZjQvMC8wNDlDODZBRUQwOTBEODIwQkM5REZEQTE0NjVBQ0U2NThBNjFEODAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0OUM4NkFFRDA5MEQ4MjBC QzlERkRBMTQ2NUFDRTY1OEE2MUQ4MDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzN6M0V1U0U2VlJ6a2dFNnpzVUZ5aW5oeHVpM2JYU3FFS3dRZGJrUnp3QmY0LzAv MzIzODMwMzQzYTM3MzAzNTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw MzczMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYHKARwXAAwDQYJKoZIhvcNAQELBQADggEBAA/iuTbk rUWlZhlSzgqxHwxMh62Y2UnXfA6TzEOaJHU5ClDRRr4d1cmEYSV1I0FD0cnzsXrA DJ1AO38jxqfsegNvPTdFdkSO3W44caxhqIJq+hqMQAKE6sh43T1an4PaYrJLj8cY En+yVmEYa1tkb9a8ZuI4+TR4gawcrIVRPFfK0yT/jBg+PH6eF5r5+p5jh9V6809E ZUA2FpW9ffp6Cq4gXoDE3EFM168rB5cSEUGv6emw7dXtXpNug94dZwuCq4gJVy7j AUAmw0Cmm+6JgdI0kKOVhXKpzOBUPgVzRp4es+m0ajBYdFtek2lGIBuXvkRGvXaa Jvb3mc680pMYOBA= -----END CERTIFICATE-----Generated at Sat Dec 20 09:36:42 2025 by rpki-client