This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/323830343a383961633a3a2f33322d3332203d3e20323733363139.roa File: 323830343a383961633a3a2f33322d3332203d3e20323733363139.roa (raw, json) Hash identifier: 6YR6ZiSGc7CxTkzhcIGVaCU+A/kiB1EQ85pD9gUP53k= Subject key identifier: B6:27:E8:FF:F2:14:82:FE:4F:8C:ED:5B:4E:92:46:3D:56:4C:F0:4A Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Certificate serial: 3FB765C7A893480A9F9F9645BFD86141296A5EEC Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/323830343a383961633a3a2f33322d3332203d3e20323733363139.roa Signing time: Wed 17 Dec 2025 15:52:52 +0000 ROA not before: Wed 17 Dec 2025 15:47:52 +0000 ROA not after: Wed 16 Dec 2026 15:52:52 +0000 asID: 273619 IP address blocks: 2804:89ac::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 01:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b7:65:c7:a8:93:48:0a:9f:9f:96:45:bf:d8:61:41:29:6a:5e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Validity Not Before: Dec 17 15:47:52 2025 GMT Not After : Dec 16 15:52:52 2026 GMT Subject: CN=B627E8FFF21482FE4F8CED5B4E92463D564CF04A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:c5:7e:03:6d:a0:02:62:5a:60:ae:73:82: b7:a8:d3:20:0a:58:0f:25:3a:f0:7e:6c:54:0e:7a: 03:23:2e:38:71:f0:68:0a:70:ec:c7:6d:86:16:17: 4e:4d:82:51:7e:c5:4c:f3:f9:a2:c4:e1:a8:1a:4a: ab:ee:b8:75:05:dd:d7:a7:b6:1c:ae:36:89:0b:17: ee:9e:50:32:9b:09:9e:04:59:a4:48:0a:c3:3f:c1: d4:d1:b9:83:b3:e9:ac:9b:40:d6:36:eb:36:4b:5a: 86:e4:b7:b8:2c:5a:71:24:2b:57:63:14:45:93:ca: e9:06:d2:5a:bc:08:7f:77:9c:54:12:2a:26:89:3c: a3:77:b6:b7:8f:59:2f:c9:38:c3:92:1a:1a:4c:6b: 80:d4:70:e9:2f:22:d4:5e:18:3e:8c:aa:2e:42:2c: b0:17:4a:e9:55:dd:b8:02:38:21:0d:e3:28:25:f6: 69:3f:9d:e5:94:38:da:9f:5d:4e:07:d5:34:d2:e5: 29:e9:01:48:7d:b6:ff:92:2a:aa:22:09:2b:ee:d2: 62:98:f8:0a:0c:63:40:e6:6c:a6:51:7e:60:86:37: f8:96:e4:40:50:3f:b0:31:63:3b:ac:4b:c3:e1:b0: af:bc:4f:83:b1:01:60:92:29:64:e8:cc:28:ee:23: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:27:E8:FF:F2:14:82:FE:4F:8C:ED:5B:4E:92:46:3D:56:4C:F0:4A X509v3 Authority Key Identifier: keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/323830343a383961633a3a2f33322d3332203d3e20323733363139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:89ac::/32 Signature Algorithm: sha256WithRSAEncryption 19:d9:e0:0d:17:32:db:f5:78:05:7e:f2:e2:95:d7:18:3f:4e: 0e:22:44:e0:72:f3:fc:42:31:9a:10:3e:de:e3:4c:d1:b6:01: ca:c7:bc:93:f4:b1:09:d4:f2:c7:7c:b5:47:29:1f:b9:82:d4: aa:8e:02:b5:e2:1d:cb:9a:f7:03:62:67:5e:03:3a:6c:69:25: 67:12:1d:91:6d:66:bb:17:c8:67:d5:1b:c8:1b:f1:55:73:01: 54:93:2c:fc:03:1f:7b:24:74:2e:fc:be:71:67:9e:07:01:2f: e4:fe:7e:68:d4:fa:73:dc:af:b2:02:52:d5:c7:1c:d7:33:cd: 69:c0:1e:3b:c7:97:ca:56:97:91:67:07:c6:d9:01:40:88:ad: aa:1e:86:24:48:fa:46:b6:81:39:f2:c6:ce:c9:33:0d:19:5d: c7:28:ed:e9:b4:69:bf:13:1c:bc:1a:fb:f9:71:00:da:5f:c4: 10:7b:8e:bc:02:1c:75:37:aa:c9:dd:14:5d:af:2d:6f:f4:53: b8:24:27:31:af:13:3a:44:a1:db:99:be:3e:d8:fe:72:26:2f: 0d:af:6e:53:4f:a6:b0:06:e0:67:cc:41:a6:60:24:94:94:17: 42:e6:85:13:4b:72:37:81:b3:57:ab:0a:31:44:b0:c8:50:36: 09:4e:78:60 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUP7dlx6iTSAqfn5ZFv9hhQSlqXuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZERTI0ODY0Mzk1RDU0QjgyMTU2NkQ1NURGQUQ1NkRD MjcxN0E0RjAeFw0yNTEyMTcxNTQ3NTJaFw0yNjEyMTYxNTUyNTJaMDMxMTAvBgNV BAMTKEI2MjdFOEZGRjIxNDgyRkU0RjhDRUQ1QjRFOTI0NjNENTY0Q0YwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/V8V+A22gAmJaYK5zgreo0yAK WA8lOvB+bFQOegMjLjhx8GgKcOzHbYYWF05NglF+xUzz+aLE4agaSqvuuHUF3den thyuNokLF+6eUDKbCZ4EWaRICsM/wdTRuYOz6aybQNY26zZLWobkt7gsWnEkK1dj FEWTyukG0lq8CH93nFQSKiaJPKN3trePWS/JOMOSGhpMa4DUcOkvItReGD6Mqi5C LLAXSulV3bgCOCEN4ygl9mk/neWUONqfXU4H1TTS5SnpAUh9tv+SKqoiCSvu0mKY +AoMY0DmbKZRfmCGN/iW5EBQP7AxYzusS8PhsK+8T4OxAWCSKWTozCjuI8UdAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUtifo//IUgv5PjO1bTpJGPVZM8EowHwYDVR0j BBgwFoAUz94khkOV1UuCFWbVXfrVbcJxek8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0x Z3QvMC9DRkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGREUyNDg2NDM5NUQ1NEI4 MjE1NjZENTVERkFENTZEQzI3MTdBNEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzV2ZmhkMmtFb3hFaXZnU2hvNVVuSmlZQnRYQVdCeDdlYkZZMW1lWkRNMWd0LzAv MzIzODMwMzQzYTM4Mzk2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz MzYzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASJrDANBgkqhkiG9w0BAQsFAAOCAQEAGdngDRcy 2/V4BX7y4pXXGD9ODiJE4HLz/EIxmhA+3uNM0bYByse8k/SxCdTyx3y1RykfuYLU qo4CteIdy5r3A2JnXgM6bGklZxIdkW1muxfIZ9UbyBvxVXMBVJMs/AMfeyR0Lvy+ cWeeBwEv5P5+aNT6c9yvsgJS1ccc1zPNacAeO8eXylaXkWcHxtkBQIitqh6GJEj6 RraBOfLGzskzDRldxyjt6bRpvxMcvBr7+XEA2l/EEHuOvAIcdTeqyd0UXa8tb/RT uCQnMa8TOkSh25m+Ptj+ciYvDa9uU0+msAbgZ8xBpmAklJQXQuaFE0tyN4GzV6sK MUSwyFA2CU54YA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:31 2025 by rpki-client