This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/323830343a373936383a3a2f33322d3438203d3e20323731333033.roa File: 323830343a373936383a3a2f33322d3438203d3e20323731333033.roa (raw, json) Hash identifier: Q9jKzBdrl0fHevj0ER7eFXGcvGCuxwkP3A/B+QXgE+U= Subject key identifier: FE:98:DF:10:60:40:21:41:5F:7F:DC:0E:A4:A8:F1:7A:71:3E:9F:DA Certificate issuer: /CN=636B79A9B69034C7907429A3D4D5FF5D5A6275E7 Certificate serial: 1A810ECB4534F4132325B9678F0AF0C587C31B69 Authority key identifier: 63:6B:79:A9:B6:90:34:C7:90:74:29:A3:D4:D5:FF:5D:5A:62:75:E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/323830343a373936383a3a2f33322d3438203d3e20323731333033.roa Signing time: Tue 23 Dec 2025 17:41:27 +0000 ROA not before: Tue 23 Dec 2025 17:36:27 +0000 ROA not after: Tue 22 Dec 2026 17:41:27 +0000 asID: 271303 IP address blocks: 2804:7968::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.crl rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 27 Dec 2025 22:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:81:0e:cb:45:34:f4:13:23:25:b9:67:8f:0a:f0:c5:87:c3:1b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636B79A9B69034C7907429A3D4D5FF5D5A6275E7 Validity Not Before: Dec 23 17:36:27 2025 GMT Not After : Dec 22 17:41:27 2026 GMT Subject: CN=FE98DF10604021415F7FDC0EA4A8F17A713E9FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:e2:e4:eb:bd:4a:5d:82:7d:56:8e:2b:c7: 24:f9:aa:7d:1b:66:20:db:af:cf:dd:7d:3d:5c:be: 23:ac:d3:c5:78:b8:42:63:f0:f5:e2:c0:8b:a8:70: 5a:34:c6:93:8c:18:1a:9e:1a:26:27:18:4b:51:b1: e2:af:ef:14:19:7a:51:18:fb:3e:50:a8:ba:20:4f: 46:7c:2a:fc:11:1a:8f:db:79:10:cb:17:9d:63:e1: 7c:e2:1e:6f:e1:fa:5a:38:d2:bb:49:8c:01:b2:ea: c0:19:bf:ac:67:86:55:12:22:31:b1:2d:e2:2c:84: c9:06:f7:8f:01:bb:d4:5b:5f:1a:4f:c1:1d:f0:b4: 48:b1:26:b4:12:32:25:68:90:b5:5d:04:0f:b3:f7: 16:13:e9:35:b3:82:69:60:fb:a8:1d:cf:9e:5c:0b: b6:03:4c:98:f8:61:d1:88:22:bc:01:18:f8:36:95: fc:24:55:d9:b0:b5:f1:8c:47:80:6e:b2:a0:d3:b7: b2:15:40:38:1e:e2:a3:ea:09:80:a6:70:04:af:e8: b0:82:cf:f9:2f:82:97:ac:4c:f3:f7:58:ba:53:ee: fa:df:2c:a3:a7:15:d1:a0:9f:f1:0e:49:a8:7d:78: de:3a:d4:01:59:35:51:a4:a1:8d:12:50:f4:b3:d2: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:98:DF:10:60:40:21:41:5F:7F:DC:0E:A4:A8:F1:7A:71:3E:9F:DA X509v3 Authority Key Identifier: keyid:63:6B:79:A9:B6:90:34:C7:90:74:29:A3:D4:D5:FF:5D:5A:62:75:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636B79A9B69034C7907429A3D4D5FF5D5A6275E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/323830343a373936383a3a2f33322d3438203d3e20323731333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7968::/32 Signature Algorithm: sha256WithRSAEncryption 7d:4f:18:3b:a8:34:54:dc:aa:6d:ea:33:82:33:b7:bc:c6:23: 80:15:e8:24:e9:a3:d6:19:df:ff:dd:1c:9c:25:81:bc:72:b1: 68:38:0e:e9:26:5d:95:77:ba:dc:9e:7e:68:2b:95:f1:94:7e: a5:5a:bf:43:a0:f3:f5:ea:1f:70:a4:58:26:47:95:53:15:b5: 39:9e:d4:82:d8:73:01:74:1a:0d:80:d6:3f:52:d7:be:3f:70: 61:61:70:f2:d5:df:69:5e:a7:85:d6:dd:65:2a:cf:27:a4:bf: f7:1e:90:fb:02:a7:2c:c1:eb:57:ba:af:6c:5b:e0:f8:5e:33: c6:29:0b:52:3c:a1:03:e3:bc:b3:99:1d:1a:44:9e:73:23:13: e4:7e:b9:67:bd:ba:c9:d9:6a:60:e3:19:08:4b:62:53:39:92: 46:35:0e:e8:e6:8a:e5:bb:d7:40:9e:b8:c5:d6:b0:68:b2:b6: dc:88:82:61:2d:3d:be:ef:13:93:ec:39:96:33:8d:82:75:f4: db:6b:d0:3c:cf:cb:c2:a1:06:46:76:f1:6d:57:9b:d5:1c:58: 73:6c:fe:b3:66:b4:cf:0f:1e:bb:ac:6a:7e:62:d9:ae:96:20: 27:4a:ac:4e:c7:d6:dc:ad:fa:97:f4:11:05:0f:fe:65:7a:46: 29:92:80:75 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUGoEOy0U09BMjJblnjwrwxYfDG2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM2Qjc5QTlCNjkwMzRDNzkwNzQyOUEzRDRENUZGNUQ1 QTYyNzVFNzAeFw0yNTEyMjMxNzM2MjdaFw0yNjEyMjIxNzQxMjdaMDMxMTAvBgNV BAMTKEZFOThERjEwNjA0MDIxNDE1RjdGREMwRUE0QThGMTdBNzEzRTlGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdKuLk671KXYJ9Vo4rxyT5qn0b ZiDbr8/dfT1cviOs08V4uEJj8PXiwIuocFo0xpOMGBqeGiYnGEtRseKv7xQZelEY +z5QqLogT0Z8KvwRGo/beRDLF51j4XziHm/h+lo40rtJjAGy6sAZv6xnhlUSIjGx LeIshMkG948Bu9RbXxpPwR3wtEixJrQSMiVokLVdBA+z9xYT6TWzgmlg+6gdz55c C7YDTJj4YdGIIrwBGPg2lfwkVdmwtfGMR4BusqDTt7IVQDge4qPqCYCmcASv6LCC z/kvgpesTPP3WLpT7vrfLKOnFdGgn/EOSah9eN461AFZNVGkoY0SUPSz0ixNAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU/pjfEGBAIUFff9wOpKjxenE+n9owHwYDVR0j BBgwFoAUY2t5qbaQNMeQdCmj1NX/XVpidecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVpaNjdzN1hpaTJ3dTJkR3FmOW5xZEo3WWtRaFhLUkJhWnRqUEVoWFRq NEsvMC82MzZCNzlBOUI2OTAzNEM3OTA3NDI5QTNENEQ1RkY1RDVBNjI3NUU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzNkI3OUE5QjY5MDM0Qzc5 MDc0MjlBM0Q0RDVGRjVENUE2Mjc1RTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VaWjY3czdYaWkyd3UyZEdxZjlucWRKN1lrUWhYS1JCYVp0alBFaFhUajRLLzAv MzIzODMwMzQzYTM3MzkzNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx MzMzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAR5aDANBgkqhkiG9w0BAQsFAAOCAQEAfU8YO6g0 VNyqbeozgjO3vMYjgBXoJOmj1hnf/90cnCWBvHKxaDgO6SZdlXe63J5+aCuV8ZR+ pVq/Q6Dz9eofcKRYJkeVUxW1OZ7UgthzAXQaDYDWP1LXvj9wYWFw8tXfaV6nhdbd ZSrPJ6S/9x6Q+wKnLMHrV7qvbFvg+F4zxikLUjyhA+O8s5kdGkSecyMT5H65Z726 ydlqYOMZCEtiUzmSRjUO6OaK5bvXQJ64xdawaLK23IiCYS09vu8Tk+w5ljONgnX0 22vQPM/LwqEGRnbxbVeb1RxYc2z+s2a0zw8eu6xqfmLZrpYgJ0qsTsfW3K36l/QR BQ/+ZXpGKZKAdQ== -----END CERTIFICATE-----Generated at Fri Dec 26 23:16:05 2025 by rpki-client