This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a363030303a3a2f33382d3338203d3e20323639363039.roa File: 323830343a363732633a363030303a3a2f33382d3338203d3e20323639363039.roa (raw, json) Hash identifier: nk1hn/ErW6YHSmp+IjDeqZ5m6QB6NyTBmZIUe14/0M8= Subject key identifier: 32:C7:D8:98:6B:33:4C:69:F6:F8:E8:1B:81:7B:70:38:D8:F9:D3:7F Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 1E13BF0E9401447A1CC7CC604867C0EB5CDD8AC2 Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a363030303a3a2f33382d3338203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:32 +0000 ROA not before: Fri 12 Dec 2025 15:05:32 +0000 ROA not after: Fri 11 Dec 2026 15:10:32 +0000 asID: 269609 IP address blocks: 2804:672c:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:13:bf:0e:94:01:44:7a:1c:c7:cc:60:48:67:c0:eb:5c:dd:8a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:32 2025 GMT Not After : Dec 11 15:10:32 2026 GMT Subject: CN=32C7D8986B334C69F6F8E81B817B7038D8F9D37F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:a1:06:7e:20:9f:fd:84:0e:81:8d:9b:d7: 44:7c:09:05:dd:9e:c6:c5:70:57:0f:c4:71:28:7e: 5d:31:05:7b:06:96:7f:40:49:ca:15:8f:7e:ac:59: 4b:05:89:84:b1:14:06:2f:34:f8:19:89:f1:09:c1: f0:61:34:8a:a5:1d:81:30:df:7f:19:cc:58:40:29: 57:8e:bd:aa:e8:b7:49:f2:1c:36:d7:c1:2c:53:ba: 70:a7:ad:a2:aa:06:61:37:39:9e:52:6d:64:94:e8: b0:c1:b1:1e:88:dc:4f:c1:78:77:54:36:12:cc:0f: dd:93:3c:a8:30:dc:00:20:3e:13:9b:79:b1:ff:f9: a0:c3:ce:c8:7e:6e:25:58:48:d5:66:33:13:f3:21: 2e:53:c7:80:09:3b:a9:17:4a:16:c6:c6:55:94:09: fa:72:67:6d:96:26:ab:78:15:e3:68:d9:bf:e6:76: 0b:d0:76:72:aa:f2:76:63:5c:7c:76:dc:0a:b9:8c: c5:c7:0d:88:25:ee:24:e9:01:3e:65:2e:bf:5c:c2: f4:f7:c6:dc:a9:f9:5a:33:bb:5a:64:f0:86:78:bf: 7f:57:cc:3b:8b:24:72:13:23:37:7e:66:1a:1b:b8: 9a:cf:89:50:be:a4:d5:bd:1d:79:09:af:6d:f3:2c: 42:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C7:D8:98:6B:33:4C:69:F6:F8:E8:1B:81:7B:70:38:D8:F9:D3:7F X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a363030303a3a2f33382d3338203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:672c:6000::/38 Signature Algorithm: sha256WithRSAEncryption 56:21:b8:40:a6:49:8f:e2:a4:0f:49:d1:57:b4:6b:f9:26:dd: f3:56:a3:fb:31:a6:55:f6:62:ae:af:98:fb:10:d9:c0:b2:35: 84:c0:6d:8f:e5:1d:b2:05:34:55:fd:62:62:03:85:2d:80:d9: 72:d7:ed:97:a7:2d:79:a6:26:ee:9a:73:e3:ba:a8:60:ca:56: 77:e8:0a:ae:f6:d8:a2:25:96:25:0c:a7:98:0d:84:4e:e3:92: 6c:64:55:55:ff:98:cf:76:b3:87:50:18:8c:9c:64:65:07:80: 8b:ac:07:1c:ee:47:d2:99:0c:a2:6e:d8:45:98:de:43:fa:70: 29:fc:3a:7a:5b:43:ba:76:30:b6:08:1e:3c:7f:79:f2:0a:57: 10:8a:2f:ba:43:31:b7:50:53:5c:0a:a2:a2:b8:d3:fc:00:ef: ef:a6:f5:86:97:64:cb:d1:7b:26:a5:16:a6:a2:e9:48:60:7c: d0:cc:1d:19:c0:54:2a:78:af:f4:78:d1:4d:25:6c:43:6b:94: d4:c8:f7:16:6f:56:2f:cf:da:51:72:59:c8:6f:70:1f:2b:4a: 35:b0:4e:c5:6d:e1:bc:c9:11:e4:3d:03:af:ca:b2:51:83:dc: aa:02:be:36:c9:a6:7b:a4:77:ef:20:d7:aa:2d:03:28:a3:5f: 83:d2:5d:fc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUHhO/DpQBRHocx8xgSGfA61zdisIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MzJaFw0yNjEyMTExNTEwMzJaMDMxMTAvBgNV BAMTKDMyQzdEODk4NkIzMzRDNjlGNkY4RTgxQjgxN0I3MDM4RDhGOUQzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/6EGfiCf/YQOgY2b10R8CQXd nsbFcFcPxHEofl0xBXsGln9AScoVj36sWUsFiYSxFAYvNPgZifEJwfBhNIqlHYEw 338ZzFhAKVeOvarot0nyHDbXwSxTunCnraKqBmE3OZ5SbWSU6LDBsR6I3E/BeHdU NhLMD92TPKgw3AAgPhObebH/+aDDzsh+biVYSNVmMxPzIS5Tx4AJO6kXShbGxlWU CfpyZ22WJqt4FeNo2b/mdgvQdnKq8nZjXHx23Aq5jMXHDYgl7iTpAT5lLr9cwvT3 xtyp+Vozu1pk8IZ4v39XzDuLJHITIzd+ZhobuJrPiVC+pNW9HXkJr23zLEIRAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUMsfYmGszTGn2+OgbgXtwONj5038wHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzIzODMwMzQzYTM2MzczMjYzM2EzNjMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk M2UyMDMyMzYzOTM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZyxgMA0GCSqGSIb3DQEBCwUA A4IBAQBWIbhApkmP4qQPSdFXtGv5Jt3zVqP7MaZV9mKur5j7ENnAsjWEwG2P5R2y BTRV/WJiA4UtgNly1+2Xpy15pibumnPjuqhgylZ36Aqu9tiiJZYlDKeYDYRO45Js ZFVV/5jPdrOHUBiMnGRlB4CLrAcc7kfSmQyibthFmN5D+nAp/Dp6W0O6djC2CB48 f3nyClcQii+6QzG3UFNcCqKiuNP8AO/vpvWGl2TL0XsmpRamoulIYHzQzB0ZwFQq eK/0eNFNJWxDa5TUyPcWb1Yvz9pRclnIb3AfK0o1sE7FbeG8yRHkPQOvyrJRg9yq Ar42yaZ7pHfvINeqLQMoo1+D0l38 -----END CERTIFICATE-----Generated at Sat Dec 20 09:22:00 2025 by rpki-client