This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/323830343a383961633a3a2f33332d3333203d3e20323733363139.roa File: 323830343a383961633a3a2f33332d3333203d3e20323733363139.roa (raw, json) Hash identifier: eySNpXWtJeR5WEHH6D9gUUrO/py+gmj0uFyjGnCwR4k= Subject key identifier: 49:AF:75:05:70:6B:85:EA:5A:7B:05:6D:91:0C:0A:03:A0:C9:90:ED Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Certificate serial: 199CADF6FD3A8E9E37473A68A710C969CE95C35D Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/323830343a383961633a3a2f33332d3333203d3e20323733363139.roa Signing time: Wed 17 Dec 2025 15:52:52 +0000 ROA not before: Wed 17 Dec 2025 15:47:52 +0000 ROA not after: Wed 16 Dec 2026 15:52:52 +0000 asID: 273619 IP address blocks: 2804:89ac::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 01:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9c:ad:f6:fd:3a:8e:9e:37:47:3a:68:a7:10:c9:69:ce:95:c3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Validity Not Before: Dec 17 15:47:52 2025 GMT Not After : Dec 16 15:52:52 2026 GMT Subject: CN=49AF7505706B85EA5A7B056D910C0A03A0C990ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:d6:e6:4b:3b:ec:32:cb:a8:df:d5:b4:9e: 9a:48:78:b9:11:5f:97:2b:bb:79:ef:5f:80:f5:ba: 76:c2:5b:8c:43:bf:ad:7e:05:c5:a0:8a:19:9e:d4: 6e:ce:09:11:b7:ef:77:7f:0c:10:05:5d:32:30:0a: 2b:f7:22:46:5c:04:b8:a4:5d:4e:19:9a:37:4d:f4: 30:1c:3f:55:0f:ba:30:4c:d7:54:34:8e:37:86:15: 93:d1:6a:d2:12:90:bb:7d:8b:c6:fe:47:44:08:81: 01:23:1c:30:a7:5f:d0:f0:69:11:69:19:d2:fe:99: 26:30:47:70:6f:13:6b:52:a4:65:51:5b:14:31:0c: b3:ac:f8:06:c2:3b:96:06:6c:5c:a7:11:f2:b9:4d: 64:5b:3d:ff:f8:1c:e4:62:4b:20:38:44:f5:60:bb: 94:10:99:ee:54:a1:27:88:bb:5c:56:28:58:52:81: 91:07:69:87:e0:c1:77:98:73:80:23:f4:50:5e:2b: 3a:eb:cc:75:05:df:bd:40:db:5c:13:f3:c8:73:e6: e3:01:91:89:39:b4:8b:18:3c:a9:65:ce:61:d6:8b: 63:13:0a:30:c0:a1:59:15:85:d7:1f:fe:de:11:6e: 46:b3:08:d4:ad:5e:b9:79:d0:40:1c:98:64:b0:6c: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:75:05:70:6B:85:EA:5A:7B:05:6D:91:0C:0A:03:A0:C9:90:ED X509v3 Authority Key Identifier: keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/323830343a383961633a3a2f33332d3333203d3e20323733363139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:89ac::/33 Signature Algorithm: sha256WithRSAEncryption 47:dc:d1:0a:9f:5e:f7:07:3d:ed:5b:34:0b:a6:17:3d:10:3a: c6:43:c4:f9:80:e8:7f:8c:86:1d:ef:56:6f:0c:15:b4:44:fb: 8f:4e:2f:c3:8a:df:35:d7:a8:23:53:7f:b2:4a:3b:64:e5:1d: 0e:b5:80:3c:7f:84:b8:de:bf:e3:e0:c7:d8:87:ef:e4:20:58: 43:cf:ed:6c:56:41:29:be:6a:5e:bb:98:99:3c:f4:47:9c:aa: 7c:b0:40:ec:85:5d:30:d8:43:1b:9f:fe:2e:af:7e:4f:af:ed: eb:0d:6f:0a:14:6a:b8:7e:a6:a7:40:57:a6:22:f1:7e:47:42: dd:2f:1d:71:97:e9:7b:44:99:d6:dc:bd:f9:38:3d:8b:7f:4a: d1:f1:55:93:ff:f5:66:05:5b:50:8f:e2:5e:1f:61:85:c0:a0: 39:77:28:13:90:e4:7d:1f:1c:9c:42:8b:30:5b:1b:ac:bc:15: 42:fb:b5:0b:f6:84:10:10:99:95:3e:6b:69:68:c6:ab:56:87: 26:09:45:78:72:48:cb:48:6b:e6:61:58:42:89:39:10:7d:a2: 67:aa:19:63:3f:0c:6b:13:e9:c2:d0:ef:46:cf:2f:19:91:b9: f2:6f:95:37:b2:cd:0a:74:92:00:28:99:60:3d:3c:53:8c:52: dc:40:c9:57 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUGZyt9v06jp43RzpopxDJac6Vw10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZERTI0ODY0Mzk1RDU0QjgyMTU2NkQ1NURGQUQ1NkRD MjcxN0E0RjAeFw0yNTEyMTcxNTQ3NTJaFw0yNjEyMTYxNTUyNTJaMDMxMTAvBgNV BAMTKDQ5QUY3NTA1NzA2Qjg1RUE1QTdCMDU2RDkxMEMwQTAzQTBDOTkwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkNbmSzvsMsuo39W0nppIeLkR X5cru3nvX4D1unbCW4xDv61+BcWgihme1G7OCRG373d/DBAFXTIwCiv3IkZcBLik XU4ZmjdN9DAcP1UPujBM11Q0jjeGFZPRatISkLt9i8b+R0QIgQEjHDCnX9DwaRFp GdL+mSYwR3BvE2tSpGVRWxQxDLOs+AbCO5YGbFynEfK5TWRbPf/4HORiSyA4RPVg u5QQme5UoSeIu1xWKFhSgZEHaYfgwXeYc4Aj9FBeKzrrzHUF371A21wT88hz5uMB kYk5tIsYPKllzmHWi2MTCjDAoVkVhdcf/t4RbkazCNStXrl50EAcmGSwbPzTAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUSa91BXBrhepaewVtkQwKA6DJkO0wHwYDVR0j BBgwFoAUz94khkOV1UuCFWbVXfrVbcJxek8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0x Z3QvMC9DRkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGREUyNDg2NDM5NUQ1NEI4 MjE1NjZENTVERkFENTZEQzI3MTdBNEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzV2ZmhkMmtFb3hFaXZnU2hvNVVuSmlZQnRYQVdCeDdlYkZZMW1lWkRNMWd0LzAv MzIzODMwMzQzYTM4Mzk2MTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz MzYzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYHKASJrAAwDQYJKoZIhvcNAQELBQADggEBAEfc0Qqf XvcHPe1bNAumFz0QOsZDxPmA6H+Mhh3vVm8MFbRE+49OL8OK3zXXqCNTf7JKO2Tl HQ61gDx/hLjev+Pgx9iH7+QgWEPP7WxWQSm+al67mJk89EecqnywQOyFXTDYQxuf /i6vfk+v7esNbwoUarh+pqdAV6Yi8X5HQt0vHXGX6XtEmdbcvfk4PYt/StHxVZP/ 9WYFW1CP4l4fYYXAoDl3KBOQ5H0fHJxCizBbG6y8FUL7tQv2hBAQmZU+a2loxqtW hyYJRXhySMtIa+ZhWEKJORB9omeqGWM/DGsT6cLQ70bPLxmRufJvlTeyzQp0kgAo mWA9PFOMUtxAyVc= -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:28 2025 by rpki-client