This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/323830343a3939633a3a2f33322d3336203d3e20323632353139.roa File: 323830343a3939633a3a2f33322d3336203d3e20323632353139.roa (raw, json) Hash identifier: gTiVAYf6/KXw1jjv/9yejWK3xD+mYu/04AQI9+Lo66Q= Subject key identifier: E2:90:99:FC:FC:D2:59:E1:D6:77:60:41:32:D4:7B:38:C2:F2:B7:AD Certificate issuer: /CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3 Certificate serial: 51BED812D7B88A14C8691C91993AB8A97D0E1813 Authority key identifier: CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/323830343a3939633a3a2f33322d3336203d3e20323632353139.roa Signing time: Mon 01 Dec 2025 18:03:46 +0000 ROA not before: Mon 01 Dec 2025 17:58:46 +0000 ROA not after: Mon 30 Nov 2026 18:03:46 +0000 asID: 262519 IP address blocks: 2804:99c::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 13:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:be:d8:12:d7:b8:8a:14:c8:69:1c:91:99:3a:b8:a9:7d:0e:18:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3 Validity Not Before: Dec 1 17:58:46 2025 GMT Not After : Nov 30 18:03:46 2026 GMT Subject: CN=E29099FCFCD259E1D677604132D47B38C2F2B7AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:40:4a:b0:99:28:a7:da:50:30:78:53:08:36: 4d:79:87:fd:08:3a:9d:f7:07:58:b8:e1:da:36:4d: 19:da:2b:94:c4:29:de:d2:13:fb:09:b4:a2:ac:49: 11:b9:e7:24:eb:46:38:bf:3b:bc:1d:8b:89:38:5c: e4:92:7c:dc:36:0b:a2:46:cf:7f:24:a2:fe:e8:0e: 98:f1:d5:c6:5b:65:7d:cf:c2:de:1e:fe:55:bd:58: 63:17:4d:a3:6e:a4:ec:1f:00:23:c8:52:65:95:d2: b5:a5:e9:a5:02:0d:ff:16:dc:a8:93:25:d1:c9:4d: 37:46:47:0e:a6:d6:f9:26:6e:f5:0d:46:2f:d5:47: 82:e5:5f:2e:52:48:34:a8:1a:4e:9c:50:e5:eb:43: 88:05:3f:a2:57:04:1f:76:78:97:12:65:f9:8a:f1: 57:0f:e7:b4:cd:98:75:9f:4d:0a:d2:be:c5:0d:5f: 52:5b:51:74:b9:91:35:40:67:8a:30:ab:13:c8:9a: f8:95:3e:78:b0:33:40:17:11:98:3f:1f:9f:a3:72: 95:88:28:e6:0a:19:8d:79:8c:d6:79:05:29:eb:9c: 15:75:a2:73:15:d6:10:73:bb:e0:09:e1:94:2c:3a: 23:5f:0a:87:f1:08:7c:17:98:6c:7f:c8:93:ef:20: b2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:90:99:FC:FC:D2:59:E1:D6:77:60:41:32:D4:7B:38:C2:F2:B7:AD X509v3 Authority Key Identifier: keyid:CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/323830343a3939633a3a2f33322d3336203d3e20323632353139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:99c::/32 Signature Algorithm: sha256WithRSAEncryption ac:cd:b9:00:5e:d0:22:fc:2b:08:bc:0b:00:8a:77:e6:be:01: 03:0e:ac:0e:dd:5a:f7:61:61:d5:ef:92:d8:7f:fe:6b:af:d9: c2:dd:58:10:6d:74:ab:60:9d:48:f9:06:4c:ca:b1:a4:57:10: 62:58:74:a3:42:a3:10:46:f3:6e:87:7b:e2:dd:8c:ee:bb:6a: 79:6e:d5:05:bb:88:57:06:23:d7:d5:01:39:87:fe:78:74:48: 43:10:ce:96:e4:24:f6:10:49:11:9d:4d:d4:75:83:5e:42:53: 21:b7:e7:e3:bf:f5:cb:0a:c9:d0:c6:3e:4e:5f:e2:56:a8:2b: 8a:b2:57:e7:3c:2a:d6:f8:cc:c9:c7:4b:af:e9:bf:c4:c1:5e: ed:fa:4b:7f:81:31:49:b1:7b:d7:4c:ba:ea:38:c6:fe:96:53: 81:9d:01:a1:23:0a:a4:ad:26:43:f0:fb:f7:5b:58:c7:c8:6b: 5c:ce:34:1d:34:1b:79:28:81:97:a8:82:1b:d9:21:21:0d:7b: 7a:43:7c:bb:7b:b2:ea:f2:0d:d0:07:3b:51:64:8b:7b:91:34: 85:48:ef:ce:1f:c3:28:20:25:94:1c:24:01:c9:18:d2:c8:e1: df:94:b7:0a:db:b9:66:99:b9:19:2c:3b:0d:27:17:a6:8d:31: 9f:86:8a:e4 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUUb7YEte4ihTIaRyRmTq4qX0OGBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyNDk4RThDRTdCNDg4RUJGQjEwNUJGRTJBMDQ4NzY2 MDBDQjVBMzAeFw0yNTEyMDExNzU4NDZaFw0yNjExMzAxODAzNDZaMDMxMTAvBgNV BAMTKEUyOTA5OUZDRkNEMjU5RTFENjc3NjA0MTMyRDQ3QjM4QzJGMkI3QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQEqwmSin2lAweFMINk15h/0I Op33B1i44do2TRnaK5TEKd7SE/sJtKKsSRG55yTrRji/O7wdi4k4XOSSfNw2C6JG z38kov7oDpjx1cZbZX3Pwt4e/lW9WGMXTaNupOwfACPIUmWV0rWl6aUCDf8W3KiT JdHJTTdGRw6m1vkmbvUNRi/VR4LlXy5SSDSoGk6cUOXrQ4gFP6JXBB92eJcSZfmK 8VcP57TNmHWfTQrSvsUNX1JbUXS5kTVAZ4owqxPImviVPniwM0AXEZg/H5+jcpWI KOYKGY15jNZ5BSnrnBV1onMV1hBzu+AJ4ZQsOiNfCofxCHwXmGx/yJPvILKVAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU4pCZ/PzSWeHWd2BBMtR7OMLyt60wHwYDVR0j BBgwFoAUziSY6M57SI6/sQW/4qBIdmAMtaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFltaFFHYXZrZTJNUHBOQlpueEJlenFkMVJNM3I5TnhwcEpDOUFHVVV5 RFkvMC9DRTI0OThFOENFN0I0ODhFQkZCMTA1QkZFMkEwNDg3NjYwMENCNUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMjQ5OEU4Q0U3QjQ4OEVC RkIxMDVCRkUyQTA0ODc2NjAwQ0I1QTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhZbWhRR2F2a2UyTVBwTkJabnhCZXpxZDFSTTNyOU54cHBKQzlBR1VVeURZLzAv MzIzODMwMzQzYTM5Mzk2MzNhM2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzMjM1 MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgECZwwDQYJKoZIhvcNAQELBQADggEBAKzNuQBe0CL8 Kwi8CwCKd+a+AQMOrA7dWvdhYdXvkth//muv2cLdWBBtdKtgnUj5BkzKsaRXEGJY dKNCoxBG826He+LdjO67anlu1QW7iFcGI9fVATmH/nh0SEMQzpbkJPYQSRGdTdR1 g15CUyG35+O/9csKydDGPk5f4laoK4qyV+c8Ktb4zMnHS6/pv8TBXu36S3+BMUmx e9dMuuo4xv6WU4GdAaEjCqStJkPw+/dbWMfIa1zONB00G3kogZeoghvZISENe3pD fLt7suryDdAHO1Fki3uRNIVI784fwyggJZQcJAHJGNLI4d+UtwrbuWaZuRksOw0n F6aNMZ+GiuQ= -----END CERTIFICATE-----Generated at Sun Dec 21 04:51:47 2025 by rpki-client