This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373430303a3a2f33392d3339203d3e20323639363039.roa File: 323830343a363732633a373430303a3a2f33392d3339203d3e20323639363039.roa (raw, json) Hash identifier: QYNg3Da7+xeGPLccIFp4boWtzDDjNdEc38IB/axgOGY= Subject key identifier: 29:43:1B:CF:C8:88:D2:BD:D7:E6:51:54:8F:E4:3B:DB:03:74:35:EF Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 4F930D116BF076D40C8DB32B582C137AA4238CB7 Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373430303a3a2f33392d3339203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:30 +0000 ROA not before: Fri 12 Dec 2025 15:05:30 +0000 ROA not after: Fri 11 Dec 2026 15:10:30 +0000 asID: 269609 IP address blocks: 2804:672c:7400::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:93:0d:11:6b:f0:76:d4:0c:8d:b3:2b:58:2c:13:7a:a4:23:8c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:30 2025 GMT Not After : Dec 11 15:10:30 2026 GMT Subject: CN=29431BCFC888D2BDD7E651548FE43BDB037435EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:27:ff:41:bf:4d:00:61:aa:ec:6f:02:c0: 08:09:eb:b0:45:73:6c:1f:a1:86:e7:4d:70:bb:8d: 80:5c:9a:ee:70:5c:a1:f6:bc:66:b4:3b:de:8b:17: 42:d3:d0:44:89:a2:e5:c2:41:5c:38:6c:d3:5a:6b: f3:eb:d9:ef:a2:01:5b:cc:50:aa:d5:50:90:2e:75: 92:d6:db:f0:4d:2b:60:b2:35:a2:70:d5:16:aa:1d: 7c:73:9f:e3:8f:bd:88:9b:f2:0b:16:e5:de:db:bc: 07:e9:26:c4:3f:4f:b4:47:22:bf:9d:44:6f:c7:7c: 5f:d1:00:86:1c:2e:5d:6c:a8:fa:64:05:59:0b:b2: f0:08:09:07:2d:22:93:1a:a4:23:27:02:5a:e4:69: 09:a4:2e:f6:29:61:a5:17:eb:ab:c4:31:e5:55:36: 24:f5:5c:ed:4f:43:8a:ab:99:51:99:d5:3f:23:f8: b9:da:49:5e:41:bb:b5:c1:00:45:9b:7b:a3:35:65: 47:6d:50:51:36:2c:b6:7b:a0:a9:e3:3d:92:10:a8: d5:ff:09:cf:8e:ab:35:32:fb:62:c8:38:77:b1:ca: 33:bd:d1:61:64:85:b3:56:d0:7d:ad:c9:9f:cb:2d: 7a:02:b4:30:0a:33:8a:c2:da:cc:7a:59:95:98:5a: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:43:1B:CF:C8:88:D2:BD:D7:E6:51:54:8F:E4:3B:DB:03:74:35:EF X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373430303a3a2f33392d3339203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:672c:7400::/39 Signature Algorithm: sha256WithRSAEncryption 82:67:79:45:ec:f1:fc:b0:bb:35:38:c7:f4:6f:14:7d:a8:84: 85:5d:a0:1b:fc:3e:b2:ef:14:3d:1f:81:10:29:db:db:e1:e9: 1c:4d:9c:58:b7:99:ed:c3:00:6a:ab:92:bc:4d:95:54:51:1e: 25:f0:a0:21:41:e0:03:ad:c1:6c:1e:7b:13:0e:8e:c4:3e:3f: 3e:8d:d0:17:cf:b1:4a:59:1e:01:bc:96:9c:55:42:d6:3e:68: 11:4f:dd:00:0c:7e:d2:9b:78:9d:ae:4a:da:44:ff:f7:64:c0: 92:ec:a1:46:23:c1:a3:ff:f8:77:f5:dc:43:19:65:2a:10:8e: 26:4e:15:fb:f9:e5:5b:89:5f:29:d4:83:45:ca:c8:06:bd:7c: 06:3d:38:e2:de:4f:99:42:b6:05:c5:83:ad:81:c2:fc:8e:36: 8a:82:a4:e7:4e:81:78:7a:55:e9:70:71:45:57:94:34:07:2d: 6c:58:79:4a:0c:25:03:2f:44:8a:88:b9:0c:6c:09:cc:22:50: 5e:12:7a:10:24:7e:25:9b:16:d8:d1:d0:c5:ef:c7:05:b3:99: b7:b7:93:73:41:7e:ea:86:0b:8d:96:cd:f5:62:6c:c1:0d:29: 71:43:7b:76:0c:36:e5:bb:69:91:8e:c0:03:36:80:6d:ca:28: c4:88:f8:22 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUT5MNEWvwdtQMjbMrWCwTeqQjjLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MzBaFw0yNjEyMTExNTEwMzBaMDMxMTAvBgNV BAMTKDI5NDMxQkNGQzg4OEQyQkREN0U2NTE1NDhGRTQzQkRCMDM3NDM1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3Sf/Qb9NAGGq7G8CwAgJ67BF c2wfoYbnTXC7jYBcmu5wXKH2vGa0O96LF0LT0ESJouXCQVw4bNNaa/Pr2e+iAVvM UKrVUJAudZLW2/BNK2CyNaJw1RaqHXxzn+OPvYib8gsW5d7bvAfpJsQ/T7RHIr+d RG/HfF/RAIYcLl1sqPpkBVkLsvAICQctIpMapCMnAlrkaQmkLvYpYaUX66vEMeVV NiT1XO1PQ4qrmVGZ1T8j+LnaSV5Bu7XBAEWbe6M1ZUdtUFE2LLZ7oKnjPZIQqNX/ Cc+OqzUy+2LIOHexyjO90WFkhbNW0H2tyZ/LLXoCtDAKM4rC2sx6WZWYWsGZAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUKUMbz8iI0r3X5lFUj+Q72wN0Ne8wHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzIzODMwMzQzYTM2MzczMjYzM2EzNzM0MzAzMDNhM2EyZjMzMzkyZDMzMzkyMDNk M2UyMDMyMzYzOTM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASgEZyx0MA0GCSqGSIb3DQEBCwUA A4IBAQCCZ3lF7PH8sLs1OMf0bxR9qISFXaAb/D6y7xQ9H4EQKdvb4ekcTZxYt5nt wwBqq5K8TZVUUR4l8KAhQeADrcFsHnsTDo7EPj8+jdAXz7FKWR4BvJacVULWPmgR T90ADH7Sm3idrkraRP/3ZMCS7KFGI8Gj//h39dxDGWUqEI4mThX7+eVbiV8p1INF ysgGvXwGPTji3k+ZQrYFxYOtgcL8jjaKgqTnToF4elXpcHFFV5Q0By1sWHlKDCUD L0SKiLkMbAnMIlBeEnoQJH4lmxbY0dDF78cFs5m3t5NzQX7qhguNls31YmzBDSlx Q3t2DDblu2mRjsADNoBtyijEiPgi -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:36 2025 by rpki-client