This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d313238203d3e203238313931.roa File: 323830343a6332633a3a2f33322d313238203d3e203238313931.roa (raw, json) Hash identifier: DOPUXCHzSg+B3KrVTaoa/cCsDyL4h9g88EsNGnUalsc= Subject key identifier: 20:8B:C1:1B:4D:91:EA:D0:A9:5A:29:9B:CA:2E:BD:DA:29:5B:75:15 Certificate issuer: /CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4 Certificate serial: 1F5EA633A864FF1407458481F70AFA7BD895208D Authority key identifier: BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d313238203d3e203238313931.roa Signing time: Mon 22 Dec 2025 11:40:10 +0000 ROA not before: Mon 22 Dec 2025 11:35:10 +0000 ROA not after: Mon 21 Dec 2026 11:40:10 +0000 asID: 28191 IP address blocks: 2804:c2c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 06:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5e:a6:33:a8:64:ff:14:07:45:84:81:f7:0a:fa:7b:d8:95:20:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDE757A67F5FD4AE7793B238ACB973056E9B1EC4 Validity Not Before: Dec 22 11:35:10 2025 GMT Not After : Dec 21 11:40:10 2026 GMT Subject: CN=208BC11B4D91EAD0A95A299BCA2EBDDA295B7515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:a6:30:51:26:bb:71:8f:19:d0:e6:8d:5d: 88:7a:0d:0f:b1:41:48:0f:d8:5f:23:b4:00:40:7f: fc:90:05:cc:5c:48:44:6a:89:9d:39:56:33:9a:05: b7:a4:11:5c:e1:2e:a0:ad:2d:6b:00:6e:33:c7:ae: 1d:76:c2:1c:55:9c:a2:15:cb:4b:4c:ad:0b:2b:74: b0:3c:63:20:41:31:9d:10:27:9f:4e:0f:3a:8b:1e: c6:27:63:f2:9e:0e:42:b5:ee:94:03:fd:90:3d:75: 3d:90:6c:2a:9f:af:89:ea:76:1d:b6:1a:df:fc:ef: c4:7c:29:c2:7c:1c:6d:d7:1c:4f:b8:54:a2:6e:e3: 92:44:87:51:c8:e1:95:45:26:f6:9c:f6:00:68:63: 09:c2:04:ff:8f:45:ed:76:b6:61:ba:d1:57:fe:74: 33:0c:70:48:b3:69:df:86:47:4c:c5:f9:41:86:22: f8:cc:9e:40:86:63:3e:59:36:87:5c:45:c9:78:a7: 18:81:bd:e4:62:f7:c4:69:e0:94:b0:98:1e:dd:04: 24:bd:1c:b0:3e:2e:2b:a8:69:be:4e:45:12:6c:d7: 43:a7:55:18:0f:dd:0a:11:25:fe:aa:ef:34:7f:c0: 2a:e9:30:5b:e6:71:a8:cc:ea:3c:1c:e2:f1:e4:d7: 0e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8B:C1:1B:4D:91:EA:D0:A9:5A:29:9B:CA:2E:BD:DA:29:5B:75:15 X509v3 Authority Key Identifier: keyid:BD:E7:57:A6:7F:5F:D4:AE:77:93:B2:38:AC:B9:73:05:6E:9B:1E:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE757A67F5FD4AE7793B238ACB973056E9B1EC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/323830343a6332633a3a2f33322d313238203d3e203238313931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:c2c::/32 Signature Algorithm: sha256WithRSAEncryption 9d:95:12:70:fc:2c:ea:02:f3:ad:b7:d7:94:dc:fb:30:b0:dd: 76:18:78:4e:ee:7e:6f:b8:e4:5b:8e:21:a2:a4:d4:6e:7c:8e: 48:26:96:e9:68:d4:d8:79:36:dd:ad:e4:d8:96:de:f2:b4:f5: 0e:ae:1c:92:7d:fc:97:bc:c7:9b:cb:0a:67:26:54:a2:7f:be: c6:85:56:7a:62:9f:70:0d:fe:62:e2:68:16:2e:7c:7e:05:be: 53:a9:fb:4c:ad:a2:84:e4:d9:49:2d:ab:cb:4b:46:21:86:2f: 86:3d:0c:07:ba:15:43:63:f2:95:c9:7b:95:b0:a1:f9:e5:28: 7d:e2:35:b5:0d:86:ed:98:b4:ab:a9:f8:cf:72:89:6b:8e:c6: ca:e2:b3:4f:18:f8:44:c8:39:e8:0b:6c:83:45:fd:0e:5d:1c: 4c:a7:f4:db:01:4e:53:fd:8a:c2:c4:5c:08:d8:4f:c4:26:f7: c1:e4:af:2e:41:de:f8:86:6c:d0:b4:6c:06:61:df:94:67:c7: d6:f1:6a:bb:2d:0d:07:b0:55:29:f1:47:0f:22:04:50:e1:f4: e0:c8:50:d7:70:36:d9:16:d2:ba:1d:c3:d0:19:82:52:ca:64: 22:34:ab:88:b2:9e:57:29:c0:7d:ab:1c:49:57:e3:1a:eb:09: 9f:ed:16:f4 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUH16mM6hk/xQHRYSB9wr6e9iVII0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFNzU3QTY3RjVGRDRBRTc3OTNCMjM4QUNCOTczMDU2 RTlCMUVDNDAeFw0yNTEyMjIxMTM1MTBaFw0yNjEyMjExMTQwMTBaMDMxMTAvBgNV BAMTKDIwOEJDMTFCNEQ5MUVBRDBBOTVBMjk5QkNBMkVCRERBMjk1Qjc1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72qYwUSa7cY8Z0OaNXYh6DQ+x QUgP2F8jtABAf/yQBcxcSERqiZ05VjOaBbekEVzhLqCtLWsAbjPHrh12whxVnKIV y0tMrQsrdLA8YyBBMZ0QJ59ODzqLHsYnY/KeDkK17pQD/ZA9dT2QbCqfr4nqdh22 Gt/878R8KcJ8HG3XHE+4VKJu45JEh1HI4ZVFJvac9gBoYwnCBP+PRe12tmG60Vf+ dDMMcEizad+GR0zF+UGGIvjMnkCGYz5ZNodcRcl4pxiBveRi98Rp4JSwmB7dBCS9 HLA+Liuoab5ORRJs10OnVRgP3QoRJf6q7zR/wCrpMFvmcajM6jwc4vHk1w57AgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUIIvBG02R6tCpWimbyi692ilbdRUwHwYDVR0j BBgwFoAUvedXpn9f1K53k7I4rLlzBW6bHsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5 R1MvMC9CREU3NTdBNjdGNUZENEFFNzc5M0IyMzhBQ0I5NzMwNTZFOUIxRUM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERTc1N0E2N0Y1RkQ0QUU3 NzkzQjIzOEFDQjk3MzA1NkU5QjFFQzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv MzIzODMwMzQzYTYzMzI2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzODMx MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEDCwwDQYJKoZIhvcNAQELBQADggEBAJ2VEnD8LOoC 862315Tc+zCw3XYYeE7ufm+45FuOIaKk1G58jkgmlulo1Nh5Nt2t5NiW3vK09Q6u HJJ9/Je8x5vLCmcmVKJ/vsaFVnpin3AN/mLiaBYufH4FvlOp+0ytooTk2Uktq8tL RiGGL4Y9DAe6FUNj8pXJe5WwofnlKH3iNbUNhu2YtKup+M9yiWuOxsris08Y+ETI OegLbINF/Q5dHEyn9NsBTlP9isLEXAjYT8Qm98Hkry5B3viGbNC0bAZh35Rnx9bx arstDQewVSnxRw8iBFDh9ODIUNdwNtkW0rodw9AZglLKZCI0q4iynlcpwH2rHElX 4xrrCZ/tFvQ= -----END CERTIFICATE-----Generated at Tue Dec 23 17:13:55 2025 by rpki-client