This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33322d3332203d3e20323632363235.roa File: 323830343a343936383a3a2f33322d3332203d3e20323632363235.roa (raw, json) Hash identifier: /c8uACmx5GjVV8awm0KN+gvthbvApS8njf2ZcdQmYnc= Subject key identifier: F3:4E:FD:B3:48:D0:E8:5F:9C:6B:BF:32:8E:7A:CC:B6:6A:F0:B7:D0 Certificate issuer: /CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C Certificate serial: 65F6D2079A864F1EEC228AAF4BFEDDC20A338937 Authority key identifier: F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer Subject info access: rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33322d3332203d3e20323632363235.roa Signing time: Mon 22 Dec 2025 18:07:06 +0000 ROA not before: Mon 22 Dec 2025 18:02:06 +0000 ROA not after: Mon 21 Dec 2026 18:07:06 +0000 asID: 262625 IP address blocks: 2804:4968::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 20:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f6:d2:07:9a:86:4f:1e:ec:22:8a:af:4b:fe:dd:c2:0a:33:89:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C Validity Not Before: Dec 22 18:02:06 2025 GMT Not After : Dec 21 18:07:06 2026 GMT Subject: CN=F34EFDB348D0E85F9C6BBF328E7ACCB66AF0B7D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:82:bb:00:aa:13:5b:e4:fa:59:47:d9:cf: 41:47:b0:a4:2d:49:e4:82:7d:39:9c:30:9a:c8:2e: 5f:47:ab:44:56:31:7a:ba:ee:36:00:3c:d2:fb:24: fb:a5:43:1c:18:1e:a6:d2:65:12:89:26:a8:a9:2b: 8f:fa:b4:da:40:47:43:32:03:93:31:9b:4b:ed:b3: b8:a4:8f:f5:04:86:a2:26:e4:6a:f3:ad:4f:22:4e: 06:12:e1:25:86:c7:e6:7a:59:20:05:f9:1b:1a:4a: 97:4d:6b:af:eb:66:c3:d8:11:48:03:f0:90:e3:e4: e9:c8:ec:49:90:b0:06:1e:f6:dd:9d:09:8e:93:72: 31:6a:47:af:f2:24:39:9e:bf:06:12:8a:45:24:60: 36:02:42:6c:d1:f4:f2:d9:88:06:24:b5:7c:56:6b: a2:32:12:39:b6:80:86:ae:52:51:67:2e:aa:ec:cd: 6c:30:da:fe:23:09:84:d6:94:9b:c1:fd:70:ea:5e: 5f:0c:1b:a0:b8:57:e4:fb:3e:7e:eb:27:ff:48:95: 3b:ee:5e:f6:fc:9b:37:cf:5b:29:5e:6c:6c:e5:2a: d5:5c:ba:44:78:52:7a:50:69:b7:a1:64:7e:5e:74: ff:78:29:e4:f6:2b:8b:f5:00:3e:e0:e2:f3:eb:46: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4E:FD:B3:48:D0:E8:5F:9C:6B:BF:32:8E:7A:CC:B6:6A:F0:B7:D0 X509v3 Authority Key Identifier: keyid:F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33322d3332203d3e20323632363235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4968::/32 Signature Algorithm: sha256WithRSAEncryption 57:b8:73:50:07:28:70:27:ec:b5:e1:ef:e6:63:05:6a:68:d9: 46:be:0d:da:66:64:0e:70:c4:0a:0b:90:fd:29:2d:dc:b0:05: 45:2e:9e:df:de:66:44:05:0c:71:bc:86:07:48:56:40:9e:3a: b3:b3:e7:bd:2d:49:7c:c4:33:10:4b:a8:9f:fa:73:d4:32:e2: 63:c6:39:e4:ab:c2:af:fc:08:f8:77:28:1b:54:da:dd:e6:31: 6b:38:d5:ad:3a:88:d7:31:a9:08:71:b2:e8:aa:bc:7f:b5:39: 04:43:36:6f:f8:40:8b:1d:ef:14:b4:7d:79:93:90:d4:78:9c: dc:af:38:59:23:83:7a:af:12:7b:e2:a9:3b:de:b9:4d:f6:41: 75:43:94:93:aa:d4:b9:42:14:ef:27:57:da:63:fc:bf:91:fc: 0f:8f:3f:db:7b:b8:52:db:54:9b:d0:03:0d:48:4f:ab:fd:c6: bd:43:c0:48:48:41:2a:b4:9a:b7:6d:28:c2:da:6f:64:0b:06: 00:b0:92:de:7c:d4:0d:60:9e:d8:f9:83:fc:d5:67:94:33:d6: 57:b5:13:fc:fc:8b:18:cc:a1:95:9e:6d:7a:c7:4f:2c:08:e9: df:5b:69:d0:51:f3:7d:99:34:ca:3e:94:9c:35:51:15:03:58: ab:96:a6:69 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUZfbSB5qGTx7sIoqvS/7dwgoziTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA5MEMxQjFFN0NFMEREMEJDMTdGRDcwOTZCMzlCODBF OEIyNTMxQzAeFw0yNTEyMjIxODAyMDZaFw0yNjEyMjExODA3MDZaMDMxMTAvBgNV BAMTKEYzNEVGREIzNDhEMEU4NUY5QzZCQkYzMjhFN0FDQ0I2NkFGMEI3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wYK7AKoTW+T6WUfZz0FHsKQt SeSCfTmcMJrILl9Hq0RWMXq67jYAPNL7JPulQxwYHqbSZRKJJqipK4/6tNpAR0My A5Mxm0vts7ikj/UEhqIm5GrzrU8iTgYS4SWGx+Z6WSAF+RsaSpdNa6/rZsPYEUgD 8JDj5OnI7EmQsAYe9t2dCY6TcjFqR6/yJDmevwYSikUkYDYCQmzR9PLZiAYktXxW a6IyEjm2gIauUlFnLqrszWww2v4jCYTWlJvB/XDqXl8MG6C4V+T7Pn7rJ/9IlTvu Xvb8mzfPWylebGzlKtVcukR4UnpQabehZH5edP94KeT2K4v1AD7g4vPrRv4VAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU8079s0jQ6F+ca78yjnrMtmrwt9AwHwYDVR0j BBgwFoAU8JDBsefODdC8F/1wlrObgOiyUxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzlTazVtY25OOUphc0JrdXNiVXkyRkdnc1EzUm9Db3A5cDNVdnBya0hm Q2MvMC9GMDkwQzFCMUU3Q0UwREQwQkMxN0ZENzA5NkIzOUI4MEU4QjI1MzFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwOTBDMUIxRTdDRTBERDBC QzE3RkQ3MDk2QjM5QjgwRThCMjUzMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0c5U2s1bWNuTjlKYXNCa3VzYlV5MkZHZ3NRM1JvQ29wOXAzVXZwcmtIZkNjLzAv MzIzODMwMzQzYTM0MzkzNjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy MzYzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARJaDANBgkqhkiG9w0BAQsFAAOCAQEAV7hzUAco cCfsteHv5mMFamjZRr4N2mZkDnDECguQ/Skt3LAFRS6e395mRAUMcbyGB0hWQJ46 s7PnvS1JfMQzEEuon/pz1DLiY8Y55KvCr/wI+HcoG1Ta3eYxazjVrTqI1zGpCHGy 6Kq8f7U5BEM2b/hAix3vFLR9eZOQ1Hic3K84WSODeq8Se+KpO965TfZBdUOUk6rU uUIU7ydX2mP8v5H8D48/23u4UttUm9ADDUhPq/3GvUPASEhBKrSat20owtpvZAsG ALCS3nzUDWCe2PmD/NVnlDPWV7UT/PyLGMyhlZ5tesdPLAjp31tp0FHzfZk0yj6U nDVRFQNYq5amaQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:11:58 2025 by rpki-client