This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33332d3333203d3e20323632363235.roa File: 323830343a343936383a3a2f33332d3333203d3e20323632363235.roa (raw, json) Hash identifier: cFK3cYtA4HCRrI/+5dGSsm4gmJ2Sn7EH2xDZpHsM0aU= Subject key identifier: 79:A1:F3:2C:3F:6B:6D:30:D9:A3:4F:30:83:73:38:31:8F:25:94:72 Certificate issuer: /CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C Certificate serial: 641776CFC6B1D93790F1EFCB4322188BFBA26C41 Authority key identifier: F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer Subject info access: rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33332d3333203d3e20323632363235.roa Signing time: Mon 22 Dec 2025 18:07:06 +0000 ROA not before: Mon 22 Dec 2025 18:02:06 +0000 ROA not after: Mon 21 Dec 2026 18:07:06 +0000 asID: 262625 IP address blocks: 2804:4968::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 20:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:17:76:cf:c6:b1:d9:37:90:f1:ef:cb:43:22:18:8b:fb:a2:6c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C Validity Not Before: Dec 22 18:02:06 2025 GMT Not After : Dec 21 18:07:06 2026 GMT Subject: CN=79A1F32C3F6B6D30D9A34F30837338318F259472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:00:23:7c:33:54:0e:64:c8:85:67:68:b5: ff:0b:0b:0f:c0:a0:ae:25:09:ef:ec:10:4c:11:a3: 82:25:36:72:76:4d:9c:7a:2e:1b:c8:40:a3:a6:b3: 76:b9:58:59:98:c3:d8:3c:aa:49:76:16:a3:c3:83: 3f:f8:98:30:88:98:d4:27:fb:84:a6:a3:0b:31:28: cd:bc:8f:70:1f:76:c0:f7:81:30:16:d8:f2:85:a3: 3c:f9:a1:5f:85:08:71:28:72:74:18:5b:3f:4c:10: 5e:f3:5d:f6:1d:50:13:31:af:af:ce:6b:55:f6:b1: 53:b4:c5:2d:f2:47:d1:60:7b:4d:d2:db:87:ee:bf: 61:62:a0:12:c7:5c:34:ff:c7:ce:de:07:f1:58:9c: ea:7c:5d:7e:65:13:b6:42:65:68:ba:1c:56:47:10: f8:76:1c:11:a2:88:d3:fd:12:97:96:ea:14:20:5d: 75:6d:30:b5:1e:d6:f0:eb:7f:dd:59:ad:68:ec:f7: 5b:51:57:cb:e6:e5:56:a3:5e:96:24:a1:89:62:4b: bf:4b:6d:ae:a1:e1:bb:f6:d7:f1:ec:6c:fa:e4:f8: 2b:e9:eb:78:1c:59:50:88:e0:59:0f:d9:c9:91:3f: 8e:73:b8:68:ec:21:d6:81:33:5b:f1:71:2e:41:c7: 0a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A1:F3:2C:3F:6B:6D:30:D9:A3:4F:30:83:73:38:31:8F:25:94:72 X509v3 Authority Key Identifier: keyid:F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33332d3333203d3e20323632363235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4968::/33 Signature Algorithm: sha256WithRSAEncryption 0b:51:9c:a6:68:ef:97:9d:73:1d:44:2f:19:c9:57:e2:03:82: 73:f1:2e:f8:23:44:c3:52:40:bd:76:c6:0e:5a:b2:35:ec:1e: 60:f7:c8:41:e8:3e:63:25:ff:87:ed:24:f7:f5:f2:84:4e:9c: a0:18:97:e4:ad:cc:b6:04:58:8c:ba:7b:3b:a8:6c:83:a4:41: 5b:4f:a8:9b:95:a5:b5:ea:4e:70:44:08:4e:93:26:ca:5e:e2: ff:f4:cd:a8:ad:01:c8:c8:b9:21:a5:6a:6c:22:a0:f6:a7:e4: 64:db:03:92:c1:bf:c3:9e:39:f1:ee:64:d4:77:c3:bb:83:be: 6c:39:ad:ca:b0:e5:21:c4:21:cc:fa:a8:27:f8:2c:58:c5:f2: 69:60:bb:e5:93:6e:1f:7c:ae:3b:b7:47:31:bd:14:45:4b:14: 4e:d2:24:89:e4:fd:d1:9b:45:ef:cf:d5:8c:c7:78:39:d8:d4: ce:a0:fb:84:c2:a4:32:c9:1a:cd:d8:0f:94:a9:bb:92:a3:60: 22:e2:4d:9f:8e:0d:71:3c:f6:b7:3e:bd:39:75:5e:fa:80:63: 4e:39:78:bd:12:da:4a:11:f3:88:27:b6:b4:00:f3:30:2e:5f: f9:d3:f9:b7:92:fa:f4:5a:3a:aa:03:9a:32:9e:de:fe:b0:4e: 6a:ee:50:eb -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUZBd2z8ax2TeQ8e/LQyIYi/uibEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA5MEMxQjFFN0NFMEREMEJDMTdGRDcwOTZCMzlCODBF OEIyNTMxQzAeFw0yNTEyMjIxODAyMDZaFw0yNjEyMjExODA3MDZaMDMxMTAvBgNV BAMTKDc5QTFGMzJDM0Y2QjZEMzBEOUEzNEYzMDgzNzMzODMxOEYyNTk0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcwAjfDNUDmTIhWdotf8LCw/A oK4lCe/sEEwRo4IlNnJ2TZx6LhvIQKOms3a5WFmYw9g8qkl2FqPDgz/4mDCImNQn +4SmowsxKM28j3AfdsD3gTAW2PKFozz5oV+FCHEocnQYWz9MEF7zXfYdUBMxr6/O a1X2sVO0xS3yR9Fge03S24fuv2FioBLHXDT/x87eB/FYnOp8XX5lE7ZCZWi6HFZH EPh2HBGiiNP9EpeW6hQgXXVtMLUe1vDrf91ZrWjs91tRV8vm5VajXpYkoYliS79L ba6h4bv21/HsbPrk+Cvp63gcWVCI4FkP2cmRP45zuGjsIdaBM1vxcS5BxwolAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUeaHzLD9rbTDZo08wg3M4MY8llHIwHwYDVR0j BBgwFoAU8JDBsefODdC8F/1wlrObgOiyUxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzlTazVtY25OOUphc0JrdXNiVXkyRkdnc1EzUm9Db3A5cDNVdnBya0hm Q2MvMC9GMDkwQzFCMUU3Q0UwREQwQkMxN0ZENzA5NkIzOUI4MEU4QjI1MzFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwOTBDMUIxRTdDRTBERDBC QzE3RkQ3MDk2QjM5QjgwRThCMjUzMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0c5U2s1bWNuTjlKYXNCa3VzYlV5MkZHZ3NRM1JvQ29wOXAzVXZwcmtIZkNjLzAv MzIzODMwMzQzYTM0MzkzNjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMy MzYzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYHKARJaAAwDQYJKoZIhvcNAQELBQADggEBAAtRnKZo 75edcx1ELxnJV+IDgnPxLvgjRMNSQL12xg5asjXsHmD3yEHoPmMl/4ftJPf18oRO nKAYl+StzLYEWIy6ezuobIOkQVtPqJuVpbXqTnBECE6TJspe4v/0zaitAcjIuSGl amwioPan5GTbA5LBv8OeOfHuZNR3w7uDvmw5rcqw5SHEIcz6qCf4LFjF8mlgu+WT bh98rju3RzG9FEVLFE7SJInk/dGbRe/P1YzHeDnY1M6g+4TCpDLJGs3YD5Spu5Kj YCLiTZ+ODXE89rc+vTl1XvqAY045eL0S2koR84gntrQA8zAuX/nT+beS+vRaOqoD mjKe3v6wTmruUOs= -----END CERTIFICATE-----Generated at Tue Dec 23 09:11:55 2025 by rpki-client