This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3830303a3a2f33372d3337203d3e20323639363039.roa File: 323830343a363732633a3830303a3a2f33372d3337203d3e20323639363039.roa (raw, json) Hash identifier: l0AEWgI+/AtvJgdCWEjgsVr2xY2EGRkLC3ggybd3M6Y= Subject key identifier: D1:BE:5C:EF:1A:B4:4E:F7:AF:88:D7:29:15:68:0B:D3:4E:B6:93:7E Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 2B040529A5D87215EEEBBB60A0F24EF11A03AA8C Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3830303a3a2f33372d3337203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:32 +0000 ROA not before: Fri 12 Dec 2025 15:05:32 +0000 ROA not after: Fri 11 Dec 2026 15:10:32 +0000 asID: 269609 IP address blocks: 2804:672c:800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:04:05:29:a5:d8:72:15:ee:eb:bb:60:a0:f2:4e:f1:1a:03:aa:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:32 2025 GMT Not After : Dec 11 15:10:32 2026 GMT Subject: CN=D1BE5CEF1AB44EF7AF88D72915680BD34EB6937E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:f3:4d:3f:ba:07:cd:cd:76:b2:8c:96:67: 07:ca:ad:53:b5:2e:63:ca:e4:46:d4:f0:f7:94:12: 3f:fd:8e:08:e4:af:13:6b:86:61:8d:6b:bc:d4:f6: 4c:f6:bc:a1:32:4f:e2:6c:29:ae:0e:2c:ec:a5:f9: dc:8b:58:00:e6:d4:ee:15:cf:d9:5d:09:61:b4:1d: 95:62:40:b0:54:12:47:19:c7:23:bb:e2:cf:10:01: be:4a:f3:c0:88:64:7e:e7:87:26:50:bf:08:15:32: 51:89:82:e1:02:8f:7a:c1:43:79:69:5d:c2:4d:0b: 10:3a:b1:28:4a:d4:ad:92:16:b4:57:fe:4a:27:2d: 5e:d5:80:9f:25:47:df:41:9f:34:a0:23:60:71:79: 0d:6f:02:86:88:76:44:a3:65:62:9a:5e:be:ab:f9: 23:7c:de:56:13:fe:c7:86:4a:fb:fe:83:dc:8a:69: 24:2e:be:2c:9e:e0:d8:68:b6:ae:64:05:9a:44:b6: 30:59:ed:e2:30:bc:18:f5:a0:c5:e1:77:89:d5:ff: ce:8c:6e:d5:0d:1a:4b:0d:28:e2:0a:e0:61:95:07: dd:7f:af:d1:48:4d:34:19:be:4d:09:67:f4:3f:1a: 96:2d:9b:81:92:6f:91:38:e0:82:aa:9d:02:35:49: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BE:5C:EF:1A:B4:4E:F7:AF:88:D7:29:15:68:0B:D3:4E:B6:93:7E X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3830303a3a2f33372d3337203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:672c:800::/37 Signature Algorithm: sha256WithRSAEncryption 44:61:4a:10:f3:85:be:ec:2b:51:49:36:8d:f6:06:90:e4:78: 65:9c:cf:c9:da:02:5a:9f:03:98:59:96:24:8b:d4:30:6c:52: d5:77:88:e0:ad:88:60:e9:b2:9d:e8:b1:36:c3:62:32:83:00: da:e8:e0:09:32:a6:e5:7e:8d:0d:56:bd:01:7f:9b:7a:38:59: 1e:4e:61:1d:df:c4:a2:fb:27:c8:08:f4:a5:d2:72:78:26:03: 87:53:b2:86:49:ee:6f:7f:a9:ca:01:5c:31:f2:6e:b4:ed:aa: e5:d3:1c:d8:e2:f1:38:50:7e:c1:a6:c4:9d:41:9b:22:12:f0: a2:16:8a:99:b4:40:18:86:4c:f3:ac:fe:9f:78:b9:da:fd:a6: 86:44:1c:6e:44:c1:e8:9d:83:1c:2f:fc:96:d6:9c:a3:71:ea: 1c:7a:2c:a1:e2:48:85:2e:02:f2:00:2b:8d:7a:35:fb:2c:23: 22:5a:73:50:04:48:16:eb:da:4c:51:d0:c9:52:a0:c5:f4:9f: 19:02:c3:12:07:47:72:db:fb:e5:c1:2f:dd:16:dc:7d:8f:5c: 19:9b:9b:77:aa:71:e2:42:c3:ad:e4:8b:d4:fa:7b:6c:0f:5a: 8e:37:df:20:c8:6e:37:fb:68:15:33:59:13:66:c6:fa:1a:6e: 50:97:a4:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKwQFKaXYchXu67tgoPJO8RoDqowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MzJaFw0yNjEyMTExNTEwMzJaMDMxMTAvBgNV BAMTKEQxQkU1Q0VGMUFCNDRFRjdBRjg4RDcyOTE1NjgwQkQzNEVCNjkzN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGfNNP7oHzc12soyWZwfKrVO1 LmPK5EbU8PeUEj/9jgjkrxNrhmGNa7zU9kz2vKEyT+JsKa4OLOyl+dyLWADm1O4V z9ldCWG0HZViQLBUEkcZxyO74s8QAb5K88CIZH7nhyZQvwgVMlGJguECj3rBQ3lp XcJNCxA6sShK1K2SFrRX/konLV7VgJ8lR99BnzSgI2BxeQ1vAoaIdkSjZWKaXr6r +SN83lYT/seGSvv+g9yKaSQuviye4Nhotq5kBZpEtjBZ7eIwvBj1oMXhd4nV/86M btUNGksNKOIK4GGVB91/r9FITTQZvk0JZ/Q/GpYtm4GSb5E44IKqnQI1SX3bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0b5c7xq0TveviNcpFWgL0062k34wHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzIzODMwMzQzYTM2MzczMjYzM2EzODMwMzAzYTNhMmYzMzM3MmQzMzM3MjAzZDNl MjAzMjM2MzkzNjMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgMoBGcsCDANBgkqhkiG9w0BAQsFAAOC AQEARGFKEPOFvuwrUUk2jfYGkOR4ZZzPydoCWp8DmFmWJIvUMGxS1XeI4K2IYOmy neixNsNiMoMA2ujgCTKm5X6NDVa9AX+bejhZHk5hHd/EovsnyAj0pdJyeCYDh1Oy hknub3+pygFcMfJutO2q5dMc2OLxOFB+wabEnUGbIhLwohaKmbRAGIZM86z+n3i5 2v2mhkQcbkTB6J2DHC/8ltaco3HqHHosoeJIhS4C8gArjXo1+ywjIlpzUARIFuva TFHQyVKgxfSfGQLDEgdHctv75cEv3RbcfY9cGZubd6px4kLDreSL1Pp7bA9ajjff IMhuN/toFTNZE2bG+hpuUJek9A== -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:45 2025 by rpki-client