This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8QLC9JgAF4YkZM4PW1ikbLJE7q1tP5b6cbZ27gCWhYS7/0/323830343a393037303a3a2f33322d313238203d3e20323733353532.roa File: 323830343a393037303a3a2f33322d313238203d3e20323733353532.roa (raw, json) Hash identifier: d7oMbZ0XbqfAEuqP1V9C5lITwn5Oq+GVsF53FnZbQ8E= Subject key identifier: E4:AC:F7:7D:AD:F1:A8:F8:50:30:08:52:D7:39:10:26:D9:16:B8:6C Certificate issuer: /CN=3392602E1467240EE5F19708D68969425890C7DD Certificate serial: 3F4CE2588AF9F57FDDD9B24351DFE27558CE242C Authority key identifier: 33:92:60:2E:14:67:24:0E:E5:F1:97:08:D6:89:69:42:58:90:C7:DD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3392602E1467240EE5F19708D68969425890C7DD.cer Subject info access: rsync://rpki-repo.registro.br/repo/8QLC9JgAF4YkZM4PW1ikbLJE7q1tP5b6cbZ27gCWhYS7/0/323830343a393037303a3a2f33322d313238203d3e20323733353532.roa Signing time: Tue 25 Nov 2025 21:12:52 +0000 ROA not before: Tue 25 Nov 2025 21:07:52 +0000 ROA not after: Tue 24 Nov 2026 21:12:52 +0000 asID: 273552 IP address blocks: 2804:9070::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8QLC9JgAF4YkZM4PW1ikbLJE7q1tP5b6cbZ27gCWhYS7/0/3392602E1467240EE5F19708D68969425890C7DD.crl rsync://rpki-repo.registro.br/repo/8QLC9JgAF4YkZM4PW1ikbLJE7q1tP5b6cbZ27gCWhYS7/0/3392602E1467240EE5F19708D68969425890C7DD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3392602E1467240EE5F19708D68969425890C7DD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4c:e2:58:8a:f9:f5:7f:dd:d9:b2:43:51:df:e2:75:58:ce:24:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3392602E1467240EE5F19708D68969425890C7DD Validity Not Before: Nov 25 21:07:52 2025 GMT Not After : Nov 24 21:12:52 2026 GMT Subject: CN=E4ACF77DADF1A8F850300852D7391026D916B86C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:31:82:fd:f8:f0:08:6a:38:68:04:64:66: ea:85:1a:a8:68:17:a8:d3:2c:74:47:10:38:75:12: 5d:7d:8f:77:e1:fd:29:78:e1:5a:fe:22:28:6e:9b: 6b:8f:65:1f:00:76:09:e8:da:8a:44:a2:3c:86:e3: 68:3c:ce:97:90:d3:2b:0d:c6:76:55:49:61:4e:5b: 58:50:68:35:e5:88:b0:45:9e:58:95:6a:5e:4a:4f: 0a:8a:ad:6a:6c:1c:5a:e8:d2:1b:0b:5d:e3:ea:55: ef:27:f5:7d:67:77:c6:6e:ad:ec:60:90:3f:f5:0b: 34:72:ad:be:dc:8b:ff:b1:34:46:d7:5f:e1:e4:84: f0:ce:1c:ae:45:a1:7a:45:f4:9a:ce:eb:d4:ea:68: c0:3a:53:c6:c3:52:05:79:a8:49:e3:ef:0b:3e:b8: 66:aa:17:08:a7:fb:63:4c:58:86:46:22:71:6d:24: 45:00:9a:e1:d1:b3:ac:f5:03:11:61:88:1f:7d:52: 1e:6d:82:d6:7a:24:63:53:9e:65:94:dd:0e:af:2b: 2a:2d:3d:db:a9:4e:64:43:ae:13:8f:f8:ad:66:a8: dc:21:bb:a3:4b:f2:11:e0:9a:11:ee:8e:04:4e:b1: 90:1f:b8:05:be:64:95:66:02:88:ec:d1:ea:e5:24: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AC:F7:7D:AD:F1:A8:F8:50:30:08:52:D7:39:10:26:D9:16:B8:6C X509v3 Authority Key Identifier: keyid:33:92:60:2E:14:67:24:0E:E5:F1:97:08:D6:89:69:42:58:90:C7:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8QLC9JgAF4YkZM4PW1ikbLJE7q1tP5b6cbZ27gCWhYS7/0/3392602E1467240EE5F19708D68969425890C7DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3392602E1467240EE5F19708D68969425890C7DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QLC9JgAF4YkZM4PW1ikbLJE7q1tP5b6cbZ27gCWhYS7/0/323830343a393037303a3a2f33322d313238203d3e20323733353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9070::/32 Signature Algorithm: sha256WithRSAEncryption 3d:38:3e:c7:ec:42:47:50:9e:75:50:83:8a:d3:8c:24:8a:03: eb:98:25:49:31:64:ba:b0:ea:69:da:0c:61:97:37:13:3a:0f: 4f:06:ab:ba:c1:6b:6a:3b:ee:89:68:03:9e:72:a5:66:ce:d9: 95:1a:b8:b6:79:a8:2d:bb:6a:78:02:ea:09:31:d6:0e:44:ca: 70:57:d4:27:22:ae:5a:77:c8:d9:35:e5:18:4e:be:c9:ae:1a: 1b:ec:43:1b:3e:47:f3:ba:e8:02:87:9a:8b:64:5f:5f:81:c3: b6:48:71:4a:fa:0d:58:b5:06:9b:4b:c0:b4:cf:0b:d4:f7:77: 5a:45:e8:fa:c0:d2:fd:b2:c0:97:da:be:01:a7:be:77:cc:c0: e4:8d:9a:d6:66:19:c1:80:c3:63:bd:4e:00:7e:5b:60:1c:58: 59:2c:e2:27:0c:96:b5:cf:93:7b:62:ad:93:68:00:73:16:50: 22:0f:08:12:db:22:b8:4b:a2:39:7b:6b:fa:67:4b:72:5e:d0: 24:1e:66:d4:a2:16:65:58:59:c9:c4:57:fa:83:48:2c:04:bf: 26:47:e2:d1:2e:bd:19:86:99:7e:6f:74:47:50:3f:f2:06:49: 3d:31:8d:66:b0:6e:db:f9:93:b9:40:95:66:0b:23:ab:b0:86: 4b:77:f1:d5 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUP0ziWIr59X/d2bJDUd/idVjOJCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjYwMkUxNDY3MjQwRUU1RjE5NzA4RDY4OTY5NDI1 ODkwQzdERDAeFw0yNTExMjUyMTA3NTJaFw0yNjExMjQyMTEyNTJaMDMxMTAvBgNV BAMTKEU0QUNGNzdEQURGMUE4Rjg1MDMwMDg1MkQ3MzkxMDI2RDkxNkI4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJTGC/fjwCGo4aARkZuqFGqho F6jTLHRHEDh1El19j3fh/Sl44Vr+Iihum2uPZR8Adgno2opEojyG42g8zpeQ0ysN xnZVSWFOW1hQaDXliLBFnliVal5KTwqKrWpsHFro0hsLXePqVe8n9X1nd8Zurexg kD/1CzRyrb7ci/+xNEbXX+HkhPDOHK5FoXpF9JrO69TqaMA6U8bDUgV5qEnj7ws+ uGaqFwin+2NMWIZGInFtJEUAmuHRs6z1AxFhiB99Uh5tgtZ6JGNTnmWU3Q6vKyot PdupTmRDrhOP+K1mqNwhu6NL8hHgmhHujgROsZAfuAW+ZJVmAojs0erlJIwnAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU5Kz3fa3xqPhQMAhS1zkQJtkWuGwwHwYDVR0j BBgwFoAUM5JgLhRnJA7l8ZcI1olpQliQx90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFFMQzlKZ0FGNFlrWk00UFcxaWtiTEpFN3ExdFA1YjZjYloyN2dDV2hZ UzcvMC8zMzkyNjAyRTE0NjcyNDBFRTVGMTk3MDhENjg5Njk0MjU4OTBDN0RELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzOTI2MDJFMTQ2NzI0MEVF NUYxOTcwOEQ2ODk2OTQyNTg5MEM3REQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhRTEM5SmdBRjRZa1pNNFBXMWlrYkxKRTdxMXRQNWI2Y2JaMjdnQ1doWVM3LzAv MzIzODMwMzQzYTM5MzAzNzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3 MzMzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBJBwMA0GCSqGSIb3DQEBCwUAA4IBAQA9OD7H 7EJHUJ51UIOK04wkigPrmCVJMWS6sOpp2gxhlzcTOg9PBqu6wWtqO+6JaAOecqVm ztmVGri2eagtu2p4AuoJMdYORMpwV9QnIq5ad8jZNeUYTr7Jrhob7EMbPkfzuugC h5qLZF9fgcO2SHFK+g1YtQabS8C0zwvU93daRej6wNL9ssCX2r4Bp753zMDkjZrW ZhnBgMNjvU4AfltgHFhZLOInDJa1z5N7Yq2TaABzFlAiDwgS2yK4S6I5e2v6Z0ty XtAkHmbUohZlWFnJxFf6g0gsBL8mR+LRLr0Zhpl+b3RHUD/yBkk9MY1msG7b+ZO5 QJVmCyOrsIZLd/HV -----END CERTIFICATE-----Generated at Sat Dec 20 11:10:17 2025 by rpki-client