This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/323830343a313662303a3a2f33322d3438203d3e203631393130.roa File: 323830343a313662303a3a2f33322d3438203d3e203631393130.roa (raw, json) Hash identifier: g7F9wOGlX1xF6Va3m3L1AEg0gmkFQbeDx2faSdQe/IM= Subject key identifier: 81:8E:D0:87:8E:B8:61:79:BE:59:87:7D:2A:2D:20:D8:E9:47:22:AF Certificate issuer: /CN=18330DC0F98F298BD4E31F45E07E665325C9862F Certificate serial: 3A4AB1508D096F9428D188573B69BDD86A29D685 Authority key identifier: 18:33:0D:C0:F9:8F:29:8B:D4:E3:1F:45:E0:7E:66:53:25:C9:86:2F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/323830343a313662303a3a2f33322d3438203d3e203631393130.roa Signing time: Fri 26 Dec 2025 18:48:06 +0000 ROA not before: Fri 26 Dec 2025 18:43:06 +0000 ROA not after: Fri 25 Dec 2026 18:48:06 +0000 asID: 61910 IP address blocks: 2804:16b0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.crl rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 Jan 2026 07:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4a:b1:50:8d:09:6f:94:28:d1:88:57:3b:69:bd:d8:6a:29:d6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18330DC0F98F298BD4E31F45E07E665325C9862F Validity Not Before: Dec 26 18:43:06 2025 GMT Not After : Dec 25 18:48:06 2026 GMT Subject: CN=818ED0878EB86179BE59877D2A2D20D8E94722AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ee:5b:5b:4f:54:84:3c:f6:df:2a:45:9a:c6: 0f:0f:d4:1a:9a:ec:62:e3:e6:d8:89:ea:47:38:af: da:4b:bc:bc:9e:fb:84:8b:06:a2:d6:fb:73:3e:3c: ae:2b:a5:58:65:f1:4b:cb:0f:44:98:22:45:33:c8: 14:b4:b5:cd:e6:8e:64:46:0e:c8:ee:d3:da:56:54: ee:59:f1:40:8b:28:df:08:99:8b:6f:eb:6c:b3:6f: 23:c2:89:d1:aa:5a:1b:06:67:0a:13:26:aa:29:c4: ff:3f:80:94:a7:02:39:c8:79:27:78:05:f5:e9:79: 11:d2:72:7a:ca:57:51:ba:f4:b6:25:60:dd:c6:12: b5:67:f9:cc:45:bf:d8:6a:63:17:f4:df:c7:fc:84: e5:9c:2e:72:dc:cd:ed:b1:57:7c:ea:82:72:dc:10: 67:b0:d2:60:df:45:72:5b:66:e3:2a:b2:11:42:03: ce:33:f3:42:2a:85:cc:0f:ce:42:d0:fb:06:67:39: eb:b1:3b:6d:f2:54:7f:f5:37:b1:2f:e9:96:8a:1e: 7d:8e:19:d4:9b:b0:04:1a:3d:bf:94:ff:b4:23:99: 44:2c:e4:72:f5:5c:a0:55:7f:e8:dd:55:bb:eb:92: 8d:57:64:00:eb:d0:36:57:70:be:8f:d3:ed:e7:48: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8E:D0:87:8E:B8:61:79:BE:59:87:7D:2A:2D:20:D8:E9:47:22:AF X509v3 Authority Key Identifier: keyid:18:33:0D:C0:F9:8F:29:8B:D4:E3:1F:45:E0:7E:66:53:25:C9:86:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/323830343a313662303a3a2f33322d3438203d3e203631393130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16b0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:8d:6c:c2:eb:1f:8b:13:20:da:79:96:4a:12:1e:42:42:c2: f4:8b:4f:c3:d5:cb:4c:a7:66:be:d6:55:c4:0e:31:0b:a9:9c: dd:c6:b6:db:d2:3e:87:09:c6:5d:c9:18:4d:36:79:5f:1e:d6: df:44:d4:be:81:c8:55:80:ef:69:79:92:85:15:04:40:67:0b: 85:2f:76:12:34:52:49:63:a6:80:6a:93:c9:3b:07:d7:c9:9d: 8e:4b:32:fb:48:bf:6a:cc:81:5d:aa:c8:e4:d8:7c:aa:47:65: 40:f8:b0:95:93:d2:9c:11:63:ac:7f:e2:7a:f2:81:69:88:fb: 10:55:da:eb:25:0f:02:f7:cc:d3:9f:03:d0:3c:c0:94:38:95: 8b:ba:75:43:39:a5:0b:d1:3d:af:c0:a1:f2:60:fc:40:4d:e6: 99:85:4b:24:5a:cd:e4:ef:09:39:bf:de:d8:68:2c:77:f1:b4: 07:54:5d:c9:0e:a2:5f:f8:dd:9d:a8:26:a0:16:75:92:28:b7: 37:e7:2e:42:a0:56:b1:e8:36:e5:b8:99:0c:31:d8:92:ce:26: b2:54:b6:73:44:6f:3b:7c:68:7d:41:06:d4:1c:56:b4:51:31: f3:cf:81:cf:bc:57:ac:dc:ed:b7:91:47:fc:d2:4c:73:59:2d: 72:01:9e:c4 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUOkqxUI0Jb5Qo0YhXO2m92Gop1oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgzMzBEQzBGOThGMjk4QkQ0RTMxRjQ1RTA3RTY2NTMy NUM5ODYyRjAeFw0yNTEyMjYxODQzMDZaFw0yNjEyMjUxODQ4MDZaMDMxMTAvBgNV BAMTKDgxOEVEMDg3OEVCODYxNzlCRTU5ODc3RDJBMkQyMEQ4RTk0NzIyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7ltbT1SEPPbfKkWaxg8P1Bqa 7GLj5tiJ6kc4r9pLvLye+4SLBqLW+3M+PK4rpVhl8UvLD0SYIkUzyBS0tc3mjmRG Dsju09pWVO5Z8UCLKN8ImYtv62yzbyPCidGqWhsGZwoTJqopxP8/gJSnAjnIeSd4 BfXpeRHScnrKV1G69LYlYN3GErVn+cxFv9hqYxf038f8hOWcLnLcze2xV3zqgnLc EGew0mDfRXJbZuMqshFCA84z80IqhcwPzkLQ+wZnOeuxO23yVH/1N7Ev6ZaKHn2O GdSbsAQaPb+U/7QjmUQs5HL1XKBVf+jdVbvrko1XZADr0DZXcL6P0+3nSGVXAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUgY7Qh464YXm+WYd9Ki0g2OlHIq8wHwYDVR0j BBgwFoAUGDMNwPmPKYvU4x9F4H5mUyXJhi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmZvaDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldr aWsvMC8xODMzMERDMEY5OEYyOThCRDRFMzFGNDVFMDdFNjY1MzI1Qzk4NjJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4MzMwREMwRjk4RjI5OEJE NEUzMUY0NUUwN0U2NjUzMjVDOTg2MkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Jmb2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzAv MzIzODMwMzQzYTMxMzY2MjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM5 MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEFrAwDQYJKoZIhvcNAQELBQADggEBAJuNbMLrH4sT INp5lkoSHkJCwvSLT8PVy0ynZr7WVcQOMQupnN3GttvSPocJxl3JGE02eV8e1t9E 1L6ByFWA72l5koUVBEBnC4UvdhI0UkljpoBqk8k7B9fJnY5LMvtIv2rMgV2qyOTY fKpHZUD4sJWT0pwRY6x/4nrygWmI+xBV2uslDwL3zNOfA9A8wJQ4lYu6dUM5pQvR Pa/AofJg/EBN5pmFSyRazeTvCTm/3thoLHfxtAdUXckOol/43Z2oJqAWdZIotzfn LkKgVrHoNuW4mQwx2JLOJrJUtnNEbzt8aH1BBtQcVrRRMfPPgc+8V6zc7beRR/zS THNZLXIBnsQ= -----END CERTIFICATE-----Generated at Wed Dec 31 21:11:02 2025 by rpki-client