This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BauhUpWn3ktZWiAyReMgDeHdDiPWZzLzpXDdA2p6oSD1/0/323830343a353132303a3a2f33322d313238203d3e20323638343332.roa File: 323830343a353132303a3a2f33322d313238203d3e20323638343332.roa (raw, json) Hash identifier: 4WHaSpMuaZBG0aDZfZKtC7Z6q22wVl5bBL9HCrmi0ak= Subject key identifier: FF:A6:6F:7A:45:D9:F6:82:C6:EA:34:33:CA:EC:72:2F:BB:7F:E9:7F Certificate issuer: /CN=82085D4D59184D0F697AB4A2A256605DA5570A14 Certificate serial: 094A67D25B238387CB10DCD330A200D9ABCAED1A Authority key identifier: 82:08:5D:4D:59:18:4D:0F:69:7A:B4:A2:A2:56:60:5D:A5:57:0A:14 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82085D4D59184D0F697AB4A2A256605DA5570A14.cer Subject info access: rsync://rpki-repo.registro.br/repo/BauhUpWn3ktZWiAyReMgDeHdDiPWZzLzpXDdA2p6oSD1/0/323830343a353132303a3a2f33322d313238203d3e20323638343332.roa Signing time: Wed 26 Nov 2025 12:23:34 +0000 ROA not before: Wed 26 Nov 2025 12:18:34 +0000 ROA not after: Wed 25 Nov 2026 12:23:34 +0000 asID: 268432 IP address blocks: 2804:5120::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BauhUpWn3ktZWiAyReMgDeHdDiPWZzLzpXDdA2p6oSD1/0/82085D4D59184D0F697AB4A2A256605DA5570A14.crl rsync://rpki-repo.registro.br/repo/BauhUpWn3ktZWiAyReMgDeHdDiPWZzLzpXDdA2p6oSD1/0/82085D4D59184D0F697AB4A2A256605DA5570A14.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82085D4D59184D0F697AB4A2A256605DA5570A14.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 04:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4a:67:d2:5b:23:83:87:cb:10:dc:d3:30:a2:00:d9:ab:ca:ed:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82085D4D59184D0F697AB4A2A256605DA5570A14 Validity Not Before: Nov 26 12:18:34 2025 GMT Not After : Nov 25 12:23:34 2026 GMT Subject: CN=FFA66F7A45D9F682C6EA3433CAEC722FBB7FE97F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:48:ad:fe:22:6d:72:08:b7:e1:5b:00:07: e7:2a:41:77:22:7d:18:61:5c:61:16:fc:55:b5:5a: cd:e9:3e:51:87:b2:3a:75:f8:57:f3:e8:75:f8:65: fe:2f:11:03:44:ce:58:38:e1:0c:e6:af:19:95:11: cc:54:27:b8:11:3b:ee:53:31:ab:f5:c3:f0:23:e3: 45:ee:05:eb:ea:0d:1e:0c:ab:b5:a6:a7:a7:e8:72: b3:59:49:97:4a:ee:42:ba:da:c2:ff:aa:b4:ec:d8: a6:46:03:1c:0b:37:cd:df:04:87:1f:d1:af:ed:e4: 51:92:e5:22:e8:6b:57:c2:79:d6:3c:58:e5:7e:dd: a3:5b:d3:d0:5e:5c:b6:8a:d6:b7:a4:83:d7:34:a8: 66:c5:e6:eb:82:3f:76:68:88:30:35:96:f5:bc:e4: 0e:28:4f:4b:bf:10:1c:d8:d3:95:b6:53:e9:82:52: 83:4b:29:bc:39:0c:41:2c:14:60:e3:8c:66:fa:10: 94:7d:ae:e0:f2:fa:a1:9c:ce:8c:66:56:01:17:cc: cf:3a:d9:07:90:38:3d:49:66:47:15:39:82:9d:95: 55:76:fb:b6:e3:26:92:47:7e:ab:f8:37:d7:19:fc: 05:af:9e:3c:62:03:c5:46:c4:5a:02:b0:d9:1c:ad: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A6:6F:7A:45:D9:F6:82:C6:EA:34:33:CA:EC:72:2F:BB:7F:E9:7F X509v3 Authority Key Identifier: keyid:82:08:5D:4D:59:18:4D:0F:69:7A:B4:A2:A2:56:60:5D:A5:57:0A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BauhUpWn3ktZWiAyReMgDeHdDiPWZzLzpXDdA2p6oSD1/0/82085D4D59184D0F697AB4A2A256605DA5570A14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82085D4D59184D0F697AB4A2A256605DA5570A14.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BauhUpWn3ktZWiAyReMgDeHdDiPWZzLzpXDdA2p6oSD1/0/323830343a353132303a3a2f33322d313238203d3e20323638343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5120::/32 Signature Algorithm: sha256WithRSAEncryption 86:99:b2:19:b6:a5:67:0c:f2:61:cf:a6:c1:d4:00:33:b4:4a: d3:03:f4:a3:bb:06:c6:9d:0f:1a:9c:c0:da:42:ae:6f:8b:83: 6d:ba:f2:e6:2b:fe:11:8d:fd:7a:92:8b:5c:8c:6b:92:56:1d: ed:7f:0d:7a:5e:da:61:d6:08:7c:07:64:fa:d7:dd:7c:74:34: d1:bf:1b:93:b0:e2:39:bd:2f:7f:08:b5:da:79:22:29:58:3c: 00:c1:a4:0e:f7:d6:5e:8c:b6:a0:ae:85:01:32:23:90:26:b7: ff:cc:9e:d8:f7:84:75:80:c2:8f:95:26:9f:34:cd:c0:9e:36: 68:76:e4:f8:08:2a:b5:a4:6b:9f:bf:12:f5:dd:29:bc:c4:6e: f1:7c:c6:10:63:bd:5a:de:2a:41:28:f9:0a:5b:86:eb:84:ff: 67:df:fe:05:25:38:51:cf:7c:68:4c:f8:b7:c9:c7:5f:2d:28: c0:14:99:d2:b1:e8:82:56:ed:d1:c4:79:1f:b5:81:b0:f4:60: 3e:e3:34:83:7c:b4:d0:b5:bd:3b:50:ff:75:94:c8:3d:7d:c0: cb:0d:4c:bf:02:39:47:98:4c:59:bd:94:e4:c5:9b:06:84:e0: cd:1e:ad:02:64:c0:33:42:11:e2:ea:b7:d7:64:96:2d:5e:76: b9:ba:6e:3c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUCUpn0lsjg4fLENzTMKIA2avK7RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODVENEQ1OTE4NEQwRjY5N0FCNEEyQTI1NjYwNURB NTU3MEExNDAeFw0yNTExMjYxMjE4MzRaFw0yNjExMjUxMjIzMzRaMDMxMTAvBgNV BAMTKEZGQTY2RjdBNDVEOUY2ODJDNkVBMzQzM0NBRUM3MjJGQkI3RkU5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoEit/iJtcgi34VsAB+cqQXci fRhhXGEW/FW1Ws3pPlGHsjp1+Ffz6HX4Zf4vEQNEzlg44QzmrxmVEcxUJ7gRO+5T Mav1w/Aj40XuBevqDR4Mq7Wmp6focrNZSZdK7kK62sL/qrTs2KZGAxwLN83fBIcf 0a/t5FGS5SLoa1fCedY8WOV+3aNb09BeXLaK1rekg9c0qGbF5uuCP3ZoiDA1lvW8 5A4oT0u/EBzY05W2U+mCUoNLKbw5DEEsFGDjjGb6EJR9ruDy+qGczoxmVgEXzM86 2QeQOD1JZkcVOYKdlVV2+7bjJpJHfqv4N9cZ/AWvnjxiA8VGxFoCsNkcrQ93AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU/6ZvekXZ9oLG6jQzyuxyL7t/6X8wHwYDVR0j BBgwFoAUgghdTVkYTQ9perSiolZgXaVXChQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmF1aFVwV24za3RaV2lBeVJlTWdEZUhkRGlQV1p6THpwWERkQTJwNm9T RDEvMC84MjA4NUQ0RDU5MTg0RDBGNjk3QUI0QTJBMjU2NjA1REE1NTcwQTE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyMDg1RDRENTkxODREMEY2 OTdBQjRBMkEyNTY2MDVEQTU1NzBBMTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JhdWhVcFduM2t0WldpQXlSZU1nRGVIZERpUFdaekx6cFhEZEEycDZvU0QxLzAv MzIzODMwMzQzYTM1MzEzMjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzgzNDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBFEgMA0GCSqGSIb3DQEBCwUAA4IBAQCGmbIZ tqVnDPJhz6bB1AAztErTA/SjuwbGnQ8anMDaQq5vi4NtuvLmK/4Rjf16kotcjGuS Vh3tfw16Xtph1gh8B2T61918dDTRvxuTsOI5vS9/CLXaeSIpWDwAwaQO99ZejLag roUBMiOQJrf/zJ7Y94R1gMKPlSafNM3AnjZoduT4CCq1pGufvxL13Sm8xG7xfMYQ Y71a3ipBKPkKW4brhP9n3/4FJThRz3xoTPi3ycdfLSjAFJnSseiCVu3RxHkftYGw 9GA+4zSDfLTQtb07UP91lMg9fcDLDUy/AjlHmExZvZTkxZsGhODNHq0CZMAzQhHi 6rfXZJYtXna5um48 -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:41 2025 by rpki-client