This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/323830343a3130633a3a2f33322d3332203d3e203238313434.roa File: 323830343a3130633a3a2f33322d3332203d3e203238313434.roa (raw, json) Hash identifier: vou9QmMUWVF+uz2a15z6yClPTe9mXQTjWIa5yxxl/5E= Subject key identifier: FB:4F:4D:05:E6:9E:AB:61:73:7D:39:EC:01:B0:8E:38:49:43:7B:36 Certificate issuer: /CN=2488F2E669E201B4D98B6FA256DB443702F4FAC8 Certificate serial: 0751874FB9EC268E537BEC495E4B6238E885FBBD Authority key identifier: 24:88:F2:E6:69:E2:01:B4:D9:8B:6F:A2:56:DB:44:37:02:F4:FA:C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/323830343a3130633a3a2f33322d3332203d3e203238313434.roa Signing time: Mon 24 Nov 2025 11:52:22 +0000 ROA not before: Mon 24 Nov 2025 11:47:22 +0000 ROA not after: Mon 23 Nov 2026 11:52:22 +0000 asID: 28144 IP address blocks: 2804:10c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 22:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:51:87:4f:b9:ec:26:8e:53:7b:ec:49:5e:4b:62:38:e8:85:fb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2488F2E669E201B4D98B6FA256DB443702F4FAC8 Validity Not Before: Nov 24 11:47:22 2025 GMT Not After : Nov 23 11:52:22 2026 GMT Subject: CN=FB4F4D05E69EAB61737D39EC01B08E3849437B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:88:e0:b3:e3:09:4b:48:00:07:8d:22:d7: e9:c3:ff:dd:0c:00:e9:e5:89:45:fb:0c:15:00:0f: a2:31:5c:93:c1:dd:37:9d:fd:8f:40:4a:14:e2:01: 0e:a8:49:b8:19:66:82:fe:76:13:c9:51:1f:77:83: c2:15:dc:20:54:8c:26:8e:36:f2:08:88:11:5c:b9: d0:58:89:28:65:4b:cb:90:e8:08:94:46:e4:5f:cb: 04:70:c6:5f:32:22:02:d2:d8:ac:84:01:4d:8a:7f: 5a:92:43:e6:a0:3b:6f:25:f7:6e:e3:e3:fe:b3:a2: 87:0e:58:10:1c:a3:89:ea:59:52:5f:11:cc:d5:7f: 66:94:aa:d6:1b:5d:d7:a3:ca:bb:62:94:ce:30:bc: 1b:85:d3:99:6e:a2:4d:82:a2:7b:6b:ce:39:3f:8f: a7:58:e1:a4:a0:e4:87:49:5b:e5:9e:4c:c0:b2:28: f0:c3:90:67:ae:e7:68:35:99:54:29:c2:e6:ef:b9: f1:14:71:4e:12:b3:e8:5a:d6:ea:64:bb:e9:64:4c: b9:c9:b4:0d:af:ab:40:2d:6a:e0:88:3a:77:81:24: 1b:48:c5:85:8c:90:2f:f1:bf:b0:5f:2e:2f:ef:27: 07:84:87:70:43:63:11:81:b8:c6:80:cd:92:76:4e: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4F:4D:05:E6:9E:AB:61:73:7D:39:EC:01:B0:8E:38:49:43:7B:36 X509v3 Authority Key Identifier: keyid:24:88:F2:E6:69:E2:01:B4:D9:8B:6F:A2:56:DB:44:37:02:F4:FA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/323830343a3130633a3a2f33322d3332203d3e203238313434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:10c::/32 Signature Algorithm: sha256WithRSAEncryption 11:9a:06:e2:27:c3:3c:78:03:5f:b1:2b:81:ba:08:8d:e5:04: 50:75:a2:09:e4:af:9f:5b:d6:3e:42:94:9c:df:b0:32:09:dc: f9:5a:73:02:8e:98:34:d6:9b:3f:b0:d7:c9:a7:bd:68:7c:40: 97:82:6a:f0:9f:95:b0:56:20:53:b3:3f:f1:a7:a0:25:11:c4: fa:fa:45:37:5d:07:7a:45:40:63:b2:eb:7a:ac:fd:f8:1b:47: b0:c1:31:de:f1:fb:50:79:27:54:8d:91:8b:53:03:67:5b:49: 5c:1c:0b:ae:1c:ac:9e:90:b9:26:d0:ed:37:a3:a1:9c:83:9e: e0:d6:fc:74:38:e5:29:04:7b:d7:5d:1e:1d:9a:3f:13:2c:3c: 59:eb:eb:71:5a:27:99:55:44:0f:4b:67:3b:d6:c3:69:03:47: 18:6e:be:a9:47:11:73:e6:76:c5:f4:95:d9:15:58:0e:47:3a: 7d:ae:bc:34:d7:7f:19:53:9f:7e:4b:9e:a2:c8:3c:b4:2f:90: de:32:eb:65:03:25:da:73:ad:1e:fd:e9:0d:62:7a:cf:da:99: 42:b8:5a:c2:bc:17:09:97:b9:58:08:27:c1:d5:47:f0:88:7c: 00:a4:15:bd:bc:71:07:4c:ac:55:92:bb:f6:0d:87:a0:db:65: 7e:29:03:b8 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUB1GHT7nsJo5Te+xJXktiOOiF+70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4OEYyRTY2OUUyMDFCNEQ5OEI2RkEyNTZEQjQ0Mzcw MkY0RkFDODAeFw0yNTExMjQxMTQ3MjJaFw0yNjExMjMxMTUyMjJaMDMxMTAvBgNV BAMTKEZCNEY0RDA1RTY5RUFCNjE3MzdEMzlFQzAxQjA4RTM4NDk0MzdCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2ojgs+MJS0gAB40i1+nD/90M AOnliUX7DBUAD6IxXJPB3Ted/Y9AShTiAQ6oSbgZZoL+dhPJUR93g8IV3CBUjCaO NvIIiBFcudBYiShlS8uQ6AiURuRfywRwxl8yIgLS2KyEAU2Kf1qSQ+agO28l927j 4/6zoocOWBAco4nqWVJfEczVf2aUqtYbXdejyrtilM4wvBuF05luok2Contrzjk/ j6dY4aSg5IdJW+WeTMCyKPDDkGeu52g1mVQpwubvufEUcU4Ss+ha1upku+lkTLnJ tA2vq0AtauCIOneBJBtIxYWMkC/xv7BfLi/vJweEh3BDYxGBuMaAzZJ2TiZbAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU+09NBeaeq2FzfTnsAbCOOElDezYwHwYDVR0j BBgwFoAUJIjy5mniAbTZi2+iVttENwL0+sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUd4M05iUWM2TXBKV3BBZFR6MUQ5SHo4NUtGUGVFbmRvN2JZdkRyeUNR THUvMS8yNDg4RjJFNjY5RTIwMUI0RDk4QjZGQTI1NkRCNDQzNzAyRjRGQUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0ODhGMkU2NjlFMjAxQjRE OThCNkZBMjU2REI0NDM3MDJGNEZBQzguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FHeDNOYlFjNk1wSldwQWRUejFEOUh6ODVLRlBlRW5kbzdiWXZEcnlDUUx1LzEv MzIzODMwMzQzYTMxMzA2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzMTM0 MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBAEMMA0GCSqGSIb3DQEBCwUAA4IBAQARmgbiJ8M8eANf sSuBugiN5QRQdaIJ5K+fW9Y+QpSc37AyCdz5WnMCjpg01ps/sNfJp71ofECXgmrw n5WwViBTsz/xp6AlEcT6+kU3XQd6RUBjsut6rP34G0ewwTHe8ftQeSdUjZGLUwNn W0lcHAuuHKyekLkm0O03o6Gcg57g1vx0OOUpBHvXXR4dmj8TLDxZ6+txWieZVUQP S2c71sNpA0cYbr6pRxFz5nbF9JXZFVgORzp9rrw0138ZU59+S56iyDy0L5DeMutl AyXac60e/ekNYnrP2plCuFrCvBcJl7lYCCfB1UfwiHwApBW9vHEHTKxVkrv2DYeg 22V+KQO4 -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:56 2025 by rpki-client