This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3a2f33342d3334203d3e20323638303131.roa File: 323830343a353639383a3a2f33342d3334203d3e20323638303131.roa (raw, json) Hash identifier: SAHj2d/QGbF4HJQ+gyKKjmIwy4BLSjxN5CvUt/ug+hQ= Subject key identifier: D4:48:29:02:E8:18:99:C7:2F:EB:85:25:A9:EB:AF:31:C8:C5:5D:68 Certificate issuer: /CN=7B02316541C9F170484214259E6C028DF7BB0F4A Certificate serial: 65D980F4073FD260F8472EB413293935EB95DB8C Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3a2f33342d3334203d3e20323638303131.roa Signing time: Fri 12 Dec 2025 13:32:11 +0000 ROA not before: Fri 12 Dec 2025 13:27:11 +0000 ROA not after: Fri 11 Dec 2026 13:32:11 +0000 asID: 268011 IP address blocks: 2804:5698::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 01:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d9:80:f4:07:3f:d2:60:f8:47:2e:b4:13:29:39:35:eb:95:db:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A Validity Not Before: Dec 12 13:27:11 2025 GMT Not After : Dec 11 13:32:11 2026 GMT Subject: CN=D4482902E81899C72FEB8525A9EBAF31C8C55D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:db:d2:b3:46:f2:1a:6e:d6:60:39:72:e3: 98:ab:67:c5:33:8b:21:09:3d:b5:73:58:c6:2c:84: 9a:92:78:6d:fe:7b:bb:94:b6:12:8b:11:44:88:90: 7f:f0:96:3d:0b:e2:d6:3e:ed:17:e9:7a:84:ac:43: ca:b0:ee:c9:4f:76:3c:54:7a:30:3e:94:7c:b0:12: bb:47:bd:2e:72:3c:83:3c:5d:36:56:08:05:21:b0: 97:16:bb:e4:a0:67:a8:6a:95:82:05:71:57:ef:6d: 04:cb:79:5c:7a:b3:4d:49:9b:d5:ea:b7:9e:69:c3: 29:e0:88:db:7a:1f:e2:dd:68:4d:b8:fa:09:9a:8b: b2:a2:f1:80:33:c2:48:63:69:cd:01:8b:55:b2:04: de:d5:8a:07:4a:6c:ac:50:44:ec:c5:df:10:8e:a8: bc:3d:d8:63:58:e0:1d:da:40:a1:5d:3d:a9:54:2b: e8:70:4e:30:4a:94:78:cf:1e:81:43:df:56:7f:b3: 6f:3e:73:73:ef:3f:4c:bc:1f:0a:cd:65:60:b9:1a: 20:9e:c0:2c:01:60:58:80:25:3f:00:bf:d3:2c:18: 2d:bc:97:86:54:72:18:47:60:36:97:78:13:db:b9: 04:5d:13:6a:c8:43:62:4f:b9:c0:a7:1f:29:1e:42: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:48:29:02:E8:18:99:C7:2F:EB:85:25:A9:EB:AF:31:C8:C5:5D:68 X509v3 Authority Key Identifier: keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/323830343a353639383a3a2f33342d3334203d3e20323638303131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5698::/34 Signature Algorithm: sha256WithRSAEncryption 16:d6:e8:ad:5d:ec:fb:70:e1:b5:11:d5:f7:41:4f:80:9e:16: ea:8d:66:26:5b:df:26:28:e0:f8:2e:a4:89:79:15:68:e2:78: 33:63:b9:4d:bb:d8:83:8b:6e:b5:4e:a5:f3:9e:ac:43:8d:d5: 52:dc:05:75:29:96:98:f0:25:d2:b0:f6:30:7a:8d:2d:85:e0: b9:32:29:ab:05:39:a7:48:08:46:f1:ef:fc:40:9f:84:3d:80: 9c:fc:56:70:ae:53:d8:e1:d2:c9:a9:d0:ee:01:eb:36:7b:0f: 80:93:cc:0e:78:df:3a:cc:d2:18:93:00:31:b8:0c:11:cb:6a: 0b:d0:f9:74:b6:51:e9:1d:cd:27:73:29:fb:62:5b:80:2b:5a: 7c:99:f2:61:d6:fe:72:b3:7c:ca:45:9c:bd:ee:24:c1:d0:77: 13:5e:3e:1d:00:88:f3:fd:7f:31:0d:12:35:b0:78:e4:30:fc: 52:45:95:19:b8:f8:36:d2:fe:ce:bb:28:0f:16:73:3e:40:2e: 56:12:b7:69:24:37:ab:d1:d8:e7:17:51:bf:1a:29:f4:31:98: 4a:ad:18:37:16:b0:70:e8:3c:f0:21:0a:0a:59:92:9b:5e:44: 29:96:82:f4:c5:18:75:ae:d0:2c:9a:74:53:f6:00:61:4f:91: b4:87:76:21 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUZdmA9Ac/0mD4Ry60Eyk5NeuV24wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IwMjMxNjU0MUM5RjE3MDQ4NDIxNDI1OUU2QzAyOERG N0JCMEY0QTAeFw0yNTEyMTIxMzI3MTFaFw0yNjEyMTExMzMyMTFaMDMxMTAvBgNV BAMTKEQ0NDgyOTAyRTgxODk5QzcyRkVCODUyNUE5RUJBRjMxQzhDNTVENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZ9vSs0byGm7WYDly45irZ8Uz iyEJPbVzWMYshJqSeG3+e7uUthKLEUSIkH/wlj0L4tY+7RfpeoSsQ8qw7slPdjxU ejA+lHywErtHvS5yPIM8XTZWCAUhsJcWu+SgZ6hqlYIFcVfvbQTLeVx6s01Jm9Xq t55pwyngiNt6H+LdaE24+gmai7Ki8YAzwkhjac0Bi1WyBN7VigdKbKxQROzF3xCO qLw92GNY4B3aQKFdPalUK+hwTjBKlHjPHoFD31Z/s28+c3PvP0y8HwrNZWC5GiCe wCwBYFiAJT8Av9MsGC28l4ZUchhHYDaXeBPbuQRdE2rIQ2JPucCnHykeQpaxAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU1EgpAugYmccv64UlqeuvMcjFXWgwHwYDVR0j BBgwFoAUewIxZUHJ8XBIQhQlnmwCjfe7D0owDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby84QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0 LzEvN0IwMjMxNjU0MUM5RjE3MDQ4NDIxNDI1OUU2QzAyOERGN0JCMEY0QS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QjAyMzE2NTQxQzlGMTcwNDg0 MjE0MjU5RTZDMDI4REY3QkIwRjRBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84 QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0LzEvMzIz ODMwMzQzYTM1MzYzOTM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4MzAz MTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYGKARWmAAwDQYJKoZIhvcNAQELBQADggEBABbW6K1d7Ptw 4bUR1fdBT4CeFuqNZiZb3yYo4PgupIl5FWjieDNjuU272IOLbrVOpfOerEON1VLc BXUplpjwJdKw9jB6jS2F4LkyKasFOadICEbx7/xAn4Q9gJz8VnCuU9jh0smp0O4B 6zZ7D4CTzA543zrM0hiTADG4DBHLagvQ+XS2UekdzSdzKftiW4ArWnyZ8mHW/nKz fMpFnL3uJMHQdxNePh0AiPP9fzENEjWweOQw/FJFlRm4+DbS/s67KA8Wcz5ALlYS t2kkN6vR2OcXUb8aKfQxmEqtGDcWsHDoPPAhCgpZkpteRCmWgvTFGHWu0CyadFP2 AGFPkbSHdiE= -----END CERTIFICATE-----Generated at Sat Dec 20 18:49:29 2025 by rpki-client