This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33332d3333203d3e20323636303636.roa File: 323830343a336130383a383030303a3a2f33332d3333203d3e20323636303636.roa (raw, json) Hash identifier: h8W9POkykG0p+3UswlHB+0yyTNf8doDsHyPpkSBc6q0= Subject key identifier: C4:08:CD:DB:7B:25:AA:E0:B7:AA:54:20:3C:9E:7C:CA:A2:17:62:EF Certificate issuer: /CN=76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA Certificate serial: 0FACC5A147AF97D077DB0789B6BBA261998EED9C Authority key identifier: 76:D5:4F:CC:73:92:D6:6C:CA:6C:3D:59:7A:91:FB:F2:A6:EA:74:DA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33332d3333203d3e20323636303636.roa Signing time: Mon 15 Dec 2025 19:10:38 +0000 ROA not before: Mon 15 Dec 2025 19:05:38 +0000 ROA not after: Mon 14 Dec 2026 19:10:38 +0000 asID: 266066 IP address blocks: 2804:3a08:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.crl rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 05:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ac:c5:a1:47:af:97:d0:77:db:07:89:b6:bb:a2:61:99:8e:ed:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA Validity Not Before: Dec 15 19:05:38 2025 GMT Not After : Dec 14 19:10:38 2026 GMT Subject: CN=C408CDDB7B25AAE0B7AA54203C9E7CCAA21762EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1f:ac:0e:5d:ac:d2:23:b8:80:aa:7a:f7:0a: ca:89:1c:ed:ac:53:08:77:f9:9f:80:3c:a0:f2:b2: 2c:65:ee:00:39:36:66:d5:ab:f8:75:d3:6a:92:77: fb:be:61:a4:20:68:19:b9:35:b2:2c:6f:16:bb:0a: 0e:71:f9:1b:e8:7a:86:b2:b8:17:6c:48:34:b2:41: 36:50:69:30:1f:32:9a:1f:f5:fa:c2:f8:31:de:90: b0:08:24:88:38:c2:eb:04:56:3a:aa:08:d9:5f:8f: 39:1f:81:06:11:0d:f1:84:65:35:29:74:9e:be:24: ab:00:13:ad:d5:2f:2e:bc:d0:cf:84:e5:e3:01:59: a5:0e:02:5e:20:d6:d9:4a:ad:85:57:78:98:58:fe: 78:21:1f:bf:7d:ad:a1:78:08:7c:00:f8:5c:99:b0: 83:75:1a:6b:91:b2:d7:1b:43:01:a4:d3:c3:d2:15: bf:a3:6b:bc:6d:f4:1e:4d:0c:7c:6f:6f:b0:8f:35: e5:96:c6:42:fc:d0:5d:a1:c2:e5:9a:39:e8:29:57: bc:76:d7:f8:73:63:25:38:50:fe:9b:f6:ee:08:b0: 51:09:ef:83:2f:7b:2f:70:af:3f:cb:25:35:56:f4: 9c:4b:e9:5e:35:93:3f:df:2f:da:bf:42:20:68:ec: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:CD:DB:7B:25:AA:E0:B7:AA:54:20:3C:9E:7C:CA:A2:17:62:EF X509v3 Authority Key Identifier: keyid:76:D5:4F:CC:73:92:D6:6C:CA:6C:3D:59:7A:91:FB:F2:A6:EA:74:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33332d3333203d3e20323636303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3a08:8000::/33 Signature Algorithm: sha256WithRSAEncryption 00:b0:24:b4:c3:cf:8c:39:fb:a9:8c:f3:7a:bb:ea:20:aa:9e: 99:70:f3:4c:e4:5c:49:9c:96:ce:ea:70:d0:db:17:28:6d:c1: 66:70:b5:12:0b:4d:89:34:51:13:f7:14:ed:06:08:26:21:39: c9:a8:de:9c:ad:a7:7c:04:aa:0c:ef:27:c2:af:1b:17:c4:25: d6:2b:49:e5:85:af:bb:94:41:ce:fc:c4:d2:7b:33:6f:d9:24: d5:30:93:a9:c6:c6:70:42:42:c4:b1:90:fb:cd:93:57:3a:92: 58:4b:de:38:2f:b6:94:1c:b3:93:53:b9:0e:0e:57:e5:0f:7c: 76:c0:37:9a:4a:73:0b:f9:99:28:08:94:cd:84:48:72:25:9f: 13:b8:31:2d:e0:66:a8:7d:ff:b3:fa:66:a4:1b:e5:57:f2:47: 22:49:6e:c1:16:65:e1:24:65:f6:1c:59:11:a5:01:3b:3a:3d: 73:49:9a:38:e4:59:07:02:72:0e:6f:14:b2:c9:40:2a:ae:64: bf:6b:b5:88:1e:f2:a8:3f:2c:5b:6a:88:1f:4a:f4:ae:96:f5: ae:a9:c9:32:79:49:a4:ad:58:1f:5a:78:c4:d3:91:d8:6f:c7: c9:21:a0:6d:ec:8f:99:c6:4d:56:6e:01:e7:23:8d:b1:ca:fc: fd:aa:32:99 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUD6zFoUevl9B32weJtruiYZmO7ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzZENTRGQ0M3MzkyRDY2Q0NBNkMzRDU5N0E5MUZCRjJB NkVBNzREQTAeFw0yNTEyMTUxOTA1MzhaFw0yNjEyMTQxOTEwMzhaMDMxMTAvBgNV BAMTKEM0MDhDRERCN0IyNUFBRTBCN0FBNTQyMDNDOUU3Q0NBQTIxNzYyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqH6wOXazSI7iAqnr3CsqJHO2s Uwh3+Z+APKDysixl7gA5NmbVq/h102qSd/u+YaQgaBm5NbIsbxa7Cg5x+Rvoeoay uBdsSDSyQTZQaTAfMpof9frC+DHekLAIJIg4wusEVjqqCNlfjzkfgQYRDfGEZTUp dJ6+JKsAE63VLy680M+E5eMBWaUOAl4g1tlKrYVXeJhY/nghH799raF4CHwA+FyZ sIN1GmuRstcbQwGk08PSFb+ja7xt9B5NDHxvb7CPNeWWxkL80F2hwuWaOegpV7x2 1/hzYyU4UP6b9u4IsFEJ74Mvey9wrz/LJTVW9JxL6V41kz/fL9q/QiBo7AotAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUxAjN23slquC3qlQgPJ58yqIXYu8wHwYDVR0j BBgwFoAUdtVPzHOS1mzKbD1ZepH78qbqdNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5 NncvMC83NkQ1NEZDQzczOTJENjZDQ0E2QzNENTk3QTkxRkJGMkE2RUE3NERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RDU0RkNDNzM5MkQ2NkND QTZDM0Q1OTdBOTFGQkYyQTZFQTc0REEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JNQ1dYUHV4Q3dBY0VMYnR6OFh3TXpOSGlpaDNjR3dlUFNtSFhnQXpCOTZ3LzAv MzIzODMwMzQzYTMzNjEzMDM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzNjMwMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEOgiAMA0GCSqGSIb3DQEBCwUA A4IBAQAAsCS0w8+MOfupjPN6u+ogqp6ZcPNM5FxJnJbO6nDQ2xcobcFmcLUSC02J NFET9xTtBggmITnJqN6crad8BKoM7yfCrxsXxCXWK0nlha+7lEHO/MTSezNv2STV MJOpxsZwQkLEsZD7zZNXOpJYS944L7aUHLOTU7kODlflD3x2wDeaSnML+ZkoCJTN hEhyJZ8TuDEt4Gaoff+z+makG+VX8kciSW7BFmXhJGX2HFkRpQE7Oj1zSZo45FkH AnIObxSyyUAqrmS/a7WIHvKoPyxbaogfSvSulvWuqckyeUmkrVgfWnjE05HYb8fJ IaBt7I+Zxk1WbgHnI42xyvz9qjKZ -----END CERTIFICATE-----Generated at Sat Dec 20 19:50:20 2025 by rpki-client