This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a353030303a3a2f33362d3336203d3e20323633313231.roa File: 323830343a313231383a353030303a3a2f33362d3336203d3e20323633313231.roa (raw, json) Hash identifier: JLazwM5LguueQ696jkgjc9zpJaE5I8E3k1Ht5DDDYno= Subject key identifier: 92:3F:ED:1B:EE:3A:9E:BA:F4:5A:E5:AA:65:2E:5D:CB:DF:8B:15:C2 Certificate issuer: /CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C Certificate serial: 4C08E8D3D1D9AC6334FC298644242F059687D042 Authority key identifier: 1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer Subject info access: rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a353030303a3a2f33362d3336203d3e20323633313231.roa Signing time: Wed 31 Dec 2025 13:13:15 +0000 ROA not before: Wed 31 Dec 2025 13:08:15 +0000 ROA not after: Wed 30 Dec 2026 13:13:15 +0000 asID: 263121 IP address blocks: 2804:1218:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 Jan 2026 02:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:08:e8:d3:d1:d9:ac:63:34:fc:29:86:44:24:2f:05:96:87:d0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C Validity Not Before: Dec 31 13:08:15 2025 GMT Not After : Dec 30 13:13:15 2026 GMT Subject: CN=923FED1BEE3A9EBAF45AE5AA652E5DCBDF8B15C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:d0:36:62:b9:fd:08:23:fb:07:aa:24:b4: eb:6d:e3:d4:0d:a2:00:84:d3:81:1e:6d:4d:e7:34: 9e:12:bf:2e:27:31:22:4a:08:36:27:e3:03:1b:aa: 3c:7f:39:57:2a:01:e3:8c:2e:59:45:57:f7:bc:56: f9:de:63:bc:09:ba:2a:20:fc:72:d3:0a:27:87:b3: 04:65:55:18:f9:24:4f:cb:49:56:16:26:aa:45:7a: 07:ff:0b:bd:cb:0f:ca:8b:6f:d4:d6:a4:d5:9d:62: 4e:f9:a9:9e:ac:be:cb:47:c0:83:30:af:40:df:d5: f4:15:7f:7d:a3:ca:ed:39:61:8b:15:fd:a5:e0:65: 26:3e:b3:59:aa:c7:54:ce:07:86:38:d7:82:f1:56: e6:e7:72:90:2e:e9:7e:4d:d5:81:7d:71:bb:24:b7: 2d:ff:19:be:bf:0f:31:e7:42:5a:d2:0a:75:5d:f1: 8c:f2:f1:69:ee:6e:9a:e5:cf:41:20:8a:d1:2a:b0: b5:85:b6:43:f0:17:26:46:00:f4:80:b7:79:88:3c: 8e:12:37:60:8f:36:49:39:50:91:57:80:a0:db:d8: cf:57:1b:96:f6:97:40:98:9f:42:d1:70:14:79:6d: ac:de:a5:d1:13:f7:a2:60:e3:a0:5f:68:66:ae:7b: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3F:ED:1B:EE:3A:9E:BA:F4:5A:E5:AA:65:2E:5D:CB:DF:8B:15:C2 X509v3 Authority Key Identifier: keyid:1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a353030303a3a2f33362d3336203d3e20323633313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1218:5000::/36 Signature Algorithm: sha256WithRSAEncryption 1a:cb:d2:2c:ca:3a:cc:f8:c4:26:6e:ad:e1:2f:92:0e:86:d1: 70:dc:0f:16:eb:12:4e:c3:09:3a:a7:f3:a4:20:5a:fe:54:ad: c7:97:db:dd:10:0a:88:40:3e:46:58:d6:a6:3f:b3:6d:4b:0e: f0:09:b4:44:01:3b:84:50:dd:4a:a9:f4:96:87:1c:05:0d:a4: 8e:24:b7:7e:f7:e9:29:af:73:c9:7f:43:9e:2a:bd:bf:49:99: cb:3c:1f:7a:da:04:df:34:43:78:62:8c:c6:1a:b4:d1:fe:aa: 4b:93:41:4e:85:d1:18:1b:f1:54:c2:33:43:87:92:e3:66:35: 37:aa:ac:39:d1:e0:a0:01:7e:5e:22:2a:4c:ba:7c:55:b4:79: 21:b3:65:db:33:07:49:a8:8e:f5:e2:6a:f5:26:9f:00:03:a5: a3:ba:92:7b:c9:03:0d:16:8d:87:aa:0b:93:04:56:ea:37:71: 6c:e0:62:dd:d2:77:28:ac:6c:c2:bc:d9:8f:c8:6d:bd:17:68: d7:d2:e4:84:37:ec:f7:ae:10:e2:aa:5e:f0:45:28:f2:80:a3: d4:fc:6f:b4:c0:af:d8:c0:75:60:b9:09:df:29:93:fe:9f:03: 02:35:1c:4d:30:19:ae:fd:35:89:d1:d5:d7:31:c6:13:3a:57: 32:80:ee:f3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUTAjo09HZrGM0/CmGRCQvBZaH0EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NUFBMjA3MzIyQzNFMzE0NkM0REY0RDQzMTU5M0Qx NUJERUQ2QzAeFw0yNTEyMzExMzA4MTVaFw0yNjEyMzAxMzEzMTVaMDMxMTAvBgNV BAMTKDkyM0ZFRDFCRUUzQTlFQkFGNDVBRTVBQTY1MkU1RENCREY4QjE1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4NA2Yrn9CCP7B6oktOtt49QN ogCE04EebU3nNJ4Svy4nMSJKCDYn4wMbqjx/OVcqAeOMLllFV/e8VvneY7wJuiog /HLTCieHswRlVRj5JE/LSVYWJqpFegf/C73LD8qLb9TWpNWdYk75qZ6svstHwIMw r0Df1fQVf32jyu05YYsV/aXgZSY+s1mqx1TOB4Y414LxVubncpAu6X5N1YF9cbsk ty3/Gb6/DzHnQlrSCnVd8Yzy8Wnubprlz0EgitEqsLWFtkPwFyZGAPSAt3mIPI4S N2CPNkk5UJFXgKDb2M9XG5b2l0CYn0LRcBR5bazepdET96Jg46BfaGaue9iXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUkj/tG+46nrr0WuWqZS5dy9+LFcIwHwYDVR0j BBgwFoAUHWWqIHMiw+MUbE301DFZPRW97WwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUt5NERVdUxpMnVoVGtLc1lSSGVXZXBqbWRQTjFXVmpHcFZhZEFva2dy bTMvMC8xRDY1QUEyMDczMjJDM0UzMTQ2QzRERjRENDMxNTkzRDE1QkRFRDZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFENjVBQTIwNzMyMkMzRTMx NDZDNERGNEQ0MzE1OTNEMTVCREVENkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VLeTREVXVMaTJ1aFRrS3NZUkhlV2Vwam1kUE4xV1ZqR3BWYWRBb2tncm0zLzAv MzIzODMwMzQzYTMxMzIzMTM4M2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzMxMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEhhQMA0GCSqGSIb3DQEBCwUA A4IBAQAay9IsyjrM+MQmbq3hL5IOhtFw3A8W6xJOwwk6p/OkIFr+VK3Hl9vdEAqI QD5GWNamP7NtSw7wCbREATuEUN1KqfSWhxwFDaSOJLd+9+kpr3PJf0OeKr2/SZnL PB962gTfNEN4YozGGrTR/qpLk0FOhdEYG/FUwjNDh5LjZjU3qqw50eCgAX5eIipM unxVtHkhs2XbMwdJqI714mr1Jp8AA6WjupJ7yQMNFo2HqguTBFbqN3Fs4GLd0nco rGzCvNmPyG29F2jX0uSEN+z3rhDiql7wRSjygKPU/G+0wK/YwHVguQnfKZP+nwMC NRxNMBmu/TWJ0dXXMcYTOlcygO7z -----END CERTIFICATE-----Generated at Fri Jan 2 15:10:24 2026 by rpki-client