This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373030303a3a2f33392d3339203d3e20323639363039.roa File: 323830343a363732633a373030303a3a2f33392d3339203d3e20323639363039.roa (raw, json) Hash identifier: 5CbZrUAFB68NVgN3+m6grZpFg3selSlPacKUYXHqsPQ= Subject key identifier: D6:0E:4A:36:11:69:24:69:2B:AA:E2:EB:D6:C8:F0:9F:19:7A:7A:1C Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 68CF29C43AB7293E3321A32366002F3FEE2B73C1 Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373030303a3a2f33392d3339203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:32 +0000 ROA not before: Fri 12 Dec 2025 15:05:32 +0000 ROA not after: Fri 11 Dec 2026 15:10:32 +0000 asID: 269609 IP address blocks: 2804:672c:7000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:cf:29:c4:3a:b7:29:3e:33:21:a3:23:66:00:2f:3f:ee:2b:73:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:32 2025 GMT Not After : Dec 11 15:10:32 2026 GMT Subject: CN=D60E4A36116924692BAAE2EBD6C8F09F197A7A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:d9:bc:bb:8d:e9:5c:cf:8b:4a:03:4f:ed: 82:42:47:0a:7d:0e:b8:28:e3:28:df:ea:2e:bd:95: 8f:fc:9c:c6:5d:fe:a5:89:74:d8:5a:0f:38:1f:16: 46:6c:52:38:d7:84:22:58:eb:4a:95:c1:6e:a3:5a: d3:21:27:8c:71:f1:fa:38:1e:39:a8:93:31:d4:eb: 1f:07:f5:91:a0:7b:fe:12:60:d7:ea:0d:2f:f3:3f: fb:1e:35:ba:6e:4b:03:08:85:15:34:5e:10:8e:78: f5:42:85:90:e4:3a:ff:ae:d6:38:d8:c9:ed:f8:27: fb:0d:f9:81:b9:39:fd:1c:ab:bb:0f:3e:0f:81:ed: 79:29:44:5c:0e:c5:4e:d6:13:02:36:b5:10:8e:ab: 38:f2:37:b9:52:28:6d:27:ad:37:14:2b:e8:92:a5: 0a:18:d6:f4:74:33:e6:b9:38:cb:13:0b:42:da:68: 23:ed:65:fd:f6:77:2a:20:5f:20:4e:69:3a:97:07: 02:46:73:66:77:03:7d:f1:ca:03:60:cc:4f:05:d1: 01:02:bb:3b:92:83:a2:80:60:89:3a:a3:5b:4b:96: f7:6f:51:d1:c6:21:c7:ce:2f:fd:03:16:ac:69:08: 58:64:a2:ba:5d:f2:9c:c5:d0:4f:71:96:be:9a:f6: 69:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0E:4A:36:11:69:24:69:2B:AA:E2:EB:D6:C8:F0:9F:19:7A:7A:1C X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373030303a3a2f33392d3339203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:672c:7000::/39 Signature Algorithm: sha256WithRSAEncryption 72:68:84:5a:1f:a8:13:a1:16:54:50:51:f7:0e:cd:b3:eb:ff: f0:39:ea:74:6b:48:89:b2:20:91:3f:1c:01:4f:79:7f:4b:c8: b7:21:9e:c5:05:2d:67:f7:99:59:f1:43:7b:aa:0e:70:69:21: bf:b3:4e:32:79:96:de:97:23:97:15:ce:89:db:f3:96:91:7e: 00:89:6c:40:e4:78:88:f7:c8:c4:38:30:db:ba:6c:a7:f1:cf: 21:26:d3:23:f3:41:b7:31:13:68:e8:6f:17:82:b3:66:1b:bd: e8:84:47:1e:a3:bb:68:9c:52:9d:39:5d:de:b8:76:86:61:2b: 36:29:55:14:00:cb:dc:25:6e:31:35:e4:6c:d9:06:58:bb:00: 0e:08:6b:e9:21:95:1b:de:f4:c3:91:0a:52:1c:23:26:28:c2: ca:d5:3c:d0:5f:51:55:ab:39:6b:1a:94:d1:33:ac:37:5f:96: 94:c0:19:74:82:b4:82:ff:8e:0b:0c:da:90:60:8a:7d:3c:93: 00:e8:02:93:a2:7c:ad:b5:da:40:9c:b2:4b:14:1d:37:d1:2a: 0c:c2:b7:09:08:90:31:9c:60:d5:e3:3f:8d:46:ce:73:7c:b6: 25:33:b7:6f:79:38:0e:6d:20:5b:fc:8b:80:6d:5d:de:d5:d3: 08:e8:d2:1b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUaM8pxDq3KT4zIaMjZgAvP+4rc8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MzJaFw0yNjEyMTExNTEwMzJaMDMxMTAvBgNV BAMTKEQ2MEU0QTM2MTE2OTI0NjkyQkFBRTJFQkQ2QzhGMDlGMTk3QTdBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yNm8u43pXM+LSgNP7YJCRwp9 Drgo4yjf6i69lY/8nMZd/qWJdNhaDzgfFkZsUjjXhCJY60qVwW6jWtMhJ4xx8fo4 HjmokzHU6x8H9ZGge/4SYNfqDS/zP/seNbpuSwMIhRU0XhCOePVChZDkOv+u1jjY ye34J/sN+YG5Of0cq7sPPg+B7XkpRFwOxU7WEwI2tRCOqzjyN7lSKG0nrTcUK+iS pQoY1vR0M+a5OMsTC0LaaCPtZf32dyogXyBOaTqXBwJGc2Z3A33xygNgzE8F0QEC uzuSg6KAYIk6o1tLlvdvUdHGIcfOL/0DFqxpCFhkorpd8pzF0E9xlr6a9mlxAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU1g5KNhFpJGkrquLr1sjwnxl6ehwwHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzIzODMwMzQzYTM2MzczMjYzM2EzNzMwMzAzMDNhM2EyZjMzMzkyZDMzMzkyMDNk M2UyMDMyMzYzOTM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASgEZyxwMA0GCSqGSIb3DQEBCwUA A4IBAQByaIRaH6gToRZUUFH3Ds2z6//wOep0a0iJsiCRPxwBT3l/S8i3IZ7FBS1n 95lZ8UN7qg5waSG/s04yeZbelyOXFc6J2/OWkX4AiWxA5HiI98jEODDbumyn8c8h JtMj80G3MRNo6G8XgrNmG73ohEceo7tonFKdOV3euHaGYSs2KVUUAMvcJW4xNeRs 2QZYuwAOCGvpIZUb3vTDkQpSHCMmKMLK1TzQX1FVqzlrGpTRM6w3X5aUwBl0grSC /44LDNqQYIp9PJMA6AKTonyttdpAnLJLFB030SoMwrcJCJAxnGDV4z+NRs5zfLYl M7dveTgObSBb/IuAbV3e1dMI6NIb -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:38 2025 by rpki-client