This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3a2f33322d3332203d3e20323639363039.roa File: 323830343a363732633a3a2f33322d3332203d3e20323639363039.roa (raw, json) Hash identifier: 0Pu+vrteon7naiWdDcWl4eChNKiwFp/Mr3WEpAk4CbA= Subject key identifier: F0:7F:7B:A0:22:CC:13:2E:BB:39:15:66:12:F8:97:78:A6:96:F1:C2 Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 73998C2617304034CC9352768D4B86514511A58A Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3a2f33322d3332203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:33 +0000 ROA not before: Fri 12 Dec 2025 15:05:33 +0000 ROA not after: Fri 11 Dec 2026 15:10:33 +0000 asID: 269609 IP address blocks: 2804:672c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 09:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:99:8c:26:17:30:40:34:cc:93:52:76:8d:4b:86:51:45:11:a5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:33 2025 GMT Not After : Dec 11 15:10:33 2026 GMT Subject: CN=F07F7BA022CC132EBB39156612F89778A696F1C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:17:fe:0d:92:8f:bc:96:ca:77:bd:fd:dd: 40:ad:49:38:57:fd:1e:fb:98:48:06:ed:4f:14:9f: c4:92:05:7a:f5:04:0e:19:1a:26:83:8a:e2:10:b1: 51:f7:6b:1f:2a:13:4b:d8:1c:53:6c:ae:95:a9:99: 23:b8:fc:45:0e:1b:59:14:25:3d:c1:bf:f5:af:2e: 9a:14:ed:5e:b2:04:df:a0:06:5a:9a:0d:08:e8:fb: ed:b1:dd:aa:c6:3d:b3:14:7f:b6:dc:e8:ec:73:f1: 89:c0:7b:c2:33:70:fa:b2:6e:ec:33:b4:cd:6f:c6: 09:8f:99:e9:f8:8a:f7:66:23:9d:49:bd:dc:fe:0e: 6f:7c:41:e0:1e:92:8c:2e:81:5a:81:76:42:db:0f: 41:56:ac:14:76:cb:c5:9c:37:3f:b5:ed:84:a2:08: 9b:b5:06:e9:b2:92:ad:83:3b:93:ef:5f:e5:43:ba: bb:3e:45:47:a1:06:2e:e7:c9:c7:da:74:a7:e3:6a: 13:6d:bd:9b:e4:a0:f2:bb:69:d5:a0:b7:fb:81:12: 2a:78:b0:09:35:68:46:b8:b8:be:3d:88:7c:24:23: a1:ed:7c:d0:1c:70:05:33:3d:35:55:91:3c:98:33: 06:69:87:45:f5:33:c1:3d:63:32:79:88:40:96:50: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7F:7B:A0:22:CC:13:2E:BB:39:15:66:12:F8:97:78:A6:96:F1:C2 X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a3a2f33322d3332203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:672c::/32 Signature Algorithm: sha256WithRSAEncryption c5:18:7e:5a:db:da:3e:0e:57:a2:af:54:60:c0:36:a8:a3:a9: 94:a1:46:92:4c:74:5e:53:64:35:6c:90:75:a1:e0:24:12:59: 6e:8c:aa:07:3b:9a:b9:93:bd:11:b1:01:60:3b:f6:05:a1:22: 96:b3:22:f7:b8:57:9b:a1:b6:a2:d2:75:24:ed:a0:2c:93:5d: bf:cf:db:b4:39:24:55:5d:85:b2:b3:98:ae:46:1f:24:4d:a8: aa:ad:85:dd:78:1c:1f:af:94:0d:99:2c:5e:ee:19:f1:4f:d7: 81:62:f8:41:8a:04:02:44:f7:09:d6:7f:68:13:6d:c6:bd:c9: be:72:47:92:b9:09:d8:7a:90:37:51:17:6b:68:21:ff:92:8c: d2:e0:98:d7:88:bc:ca:3d:b3:e8:49:93:f3:d9:14:02:e3:c4: f1:27:58:ac:64:10:4f:30:d9:e6:5d:01:4b:3d:f7:26:49:93: 46:c6:43:54:e5:9f:7f:63:81:11:08:9b:c8:24:aa:46:c0:49: 0f:fc:3d:0d:b1:39:b1:11:8b:78:93:93:b1:22:a1:6a:98:ef: e9:86:e9:f5:34:00:b5:be:53:59:91:a9:fe:74:5a:e6:f7:b2: 22:ed:c3:7a:ed:ed:98:55:58:a9:6d:90:00:96:a5:23:2c:93: eb:ed:6e:be -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUc5mMJhcwQDTMk1J2jUuGUUURpYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MzNaFw0yNjEyMTExNTEwMzNaMDMxMTAvBgNV BAMTKEYwN0Y3QkEwMjJDQzEzMkVCQjM5MTU2NjEyRjg5Nzc4QTY5NkYxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PRf+DZKPvJbKd7393UCtSThX /R77mEgG7U8Un8SSBXr1BA4ZGiaDiuIQsVH3ax8qE0vYHFNsrpWpmSO4/EUOG1kU JT3Bv/WvLpoU7V6yBN+gBlqaDQjo++2x3arGPbMUf7bc6Oxz8YnAe8IzcPqybuwz tM1vxgmPmen4ivdmI51Jvdz+Dm98QeAekowugVqBdkLbD0FWrBR2y8WcNz+17YSi CJu1Bumykq2DO5PvX+VDurs+RUehBi7nycfadKfjahNtvZvkoPK7adWgt/uBEip4 sAk1aEa4uL49iHwkI6HtfNAccAUzPTVVkTyYMwZph0X1M8E9YzJ5iECWUHC/AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU8H97oCLMEy67ORVmEviXeKaW8cIwHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzIzODMwMzQzYTM2MzczMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5 MzYzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARnLDANBgkqhkiG9w0BAQsFAAOCAQEAxRh+Wtva Pg5Xoq9UYMA2qKOplKFGkkx0XlNkNWyQdaHgJBJZboyqBzuauZO9EbEBYDv2BaEi lrMi97hXm6G2otJ1JO2gLJNdv8/btDkkVV2FsrOYrkYfJE2oqq2F3XgcH6+UDZks Xu4Z8U/XgWL4QYoEAkT3CdZ/aBNtxr3JvnJHkrkJ2HqQN1EXa2gh/5KM0uCY14i8 yj2z6EmT89kUAuPE8SdYrGQQTzDZ5l0BSz33JkmTRsZDVOWff2OBEQibyCSqRsBJ D/w9DbE5sRGLeJOTsSKhapjv6Ybp9TQAtb5TWZGp/nRa5veyIu3Deu3tmFVYqW2Q AJalIyyT6+1uvg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:10:27 2025 by rpki-client