This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/323830343a386437633a3a2f33322d3438203d3e20323733333630.roa File: 323830343a386437633a3a2f33322d3438203d3e20323733333630.roa (raw, json) Hash identifier: tDvuoyt9lPgo5jemTMcolNsz8MHK+9xyqLPEnLKEBTY= Subject key identifier: 0D:14:66:10:FB:09:72:E1:01:21:0D:5F:AE:48:58:2C:E9:5E:D8:82 Certificate issuer: /CN=33B5534F9EC51CE84AFB461BED294ABBE0B81544 Certificate serial: 346F302611FB0F9902F9F9A4977DE8F19758C6AF Authority key identifier: 33:B5:53:4F:9E:C5:1C:E8:4A:FB:46:1B:ED:29:4A:BB:E0:B8:15:44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/323830343a386437633a3a2f33322d3438203d3e20323733333630.roa Signing time: Mon 22 Dec 2025 13:29:15 +0000 ROA not before: Mon 22 Dec 2025 13:24:15 +0000 ROA not after: Mon 21 Dec 2026 13:29:15 +0000 asID: 273360 IP address blocks: 2804:8d7c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 Jan 2026 08:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6f:30:26:11:fb:0f:99:02:f9:f9:a4:97:7d:e8:f1:97:58:c6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B5534F9EC51CE84AFB461BED294ABBE0B81544 Validity Not Before: Dec 22 13:24:15 2025 GMT Not After : Dec 21 13:29:15 2026 GMT Subject: CN=0D146610FB0972E101210D5FAE48582CE95ED882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:89:3a:15:c2:da:ee:1a:ac:ca:05:c6:ee: 74:52:09:e7:7d:27:a6:15:d2:fa:af:2b:1b:02:53: b4:9c:b6:c9:c0:e8:4b:e2:98:7a:9a:42:82:ba:0c: 9a:f8:3b:a0:b7:b9:82:33:b7:b7:48:92:f3:d5:ce: d8:62:9d:5f:9e:8f:6f:fa:d4:31:17:d1:20:d4:40: 54:cc:f8:24:73:36:7c:5d:09:8e:af:3b:72:5c:04: 47:63:c3:3e:d3:48:b8:b4:b7:58:f8:bc:3a:4d:63: d9:24:e2:32:33:49:88:f9:4f:7c:da:a7:5a:ba:a4: db:74:61:12:6c:e4:3b:df:eb:d0:ea:e9:74:40:10: 0c:d7:19:c2:b4:64:71:17:00:8d:84:51:6f:f7:42: 8e:3f:d1:de:2f:fd:eb:f8:95:90:08:af:e3:65:31: 7b:cc:10:0e:6e:bd:17:ad:6c:64:52:9f:b6:40:ea: da:d6:af:f5:f2:73:51:61:1d:d2:5d:53:77:20:e9: 71:e4:3f:92:d9:e6:fb:1b:9a:7b:b9:b9:c0:d4:2e: ee:f2:5e:7f:3a:22:10:7c:6a:c0:42:ec:97:79:f2: 9a:9c:3c:13:c3:fa:a8:32:40:bf:ac:09:0c:5c:8b: 7a:60:97:51:51:8a:c4:f3:54:a4:83:c8:b1:e3:34: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:14:66:10:FB:09:72:E1:01:21:0D:5F:AE:48:58:2C:E9:5E:D8:82 X509v3 Authority Key Identifier: keyid:33:B5:53:4F:9E:C5:1C:E8:4A:FB:46:1B:ED:29:4A:BB:E0:B8:15:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/323830343a386437633a3a2f33322d3438203d3e20323733333630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8d7c::/32 Signature Algorithm: sha256WithRSAEncryption 43:ac:af:6c:e7:35:9b:65:31:03:8e:d6:8e:0a:ff:fd:88:ef: 6a:e9:7b:96:83:69:13:e3:ae:5e:85:24:a2:24:d7:76:7b:d7: 66:e9:99:3b:f3:c3:c5:bf:4f:a0:79:3b:f0:40:cd:f6:31:bd: 3c:53:e0:09:7c:ff:8c:17:53:ab:1a:1b:4d:26:81:c6:fd:35: 7a:5b:67:32:49:3c:0a:eb:42:c8:51:bb:10:64:51:ba:04:8d: 00:83:2a:d6:f8:90:15:cf:8c:b3:cb:74:0e:cf:44:07:f3:c7: 37:86:0e:61:0b:f4:e6:36:71:8d:2f:d9:49:b0:57:aa:8c:31: bd:ad:57:84:4a:2c:d8:21:0b:72:e2:8b:b5:3b:a9:d5:5e:1a: 5e:58:7d:17:94:eb:11:29:aa:6e:e3:19:3d:f3:0b:b6:fa:7c: e9:e0:ec:12:3f:48:d4:ee:c6:b6:7a:f5:f7:ed:29:63:6e:7c: 2d:b5:3c:ee:e5:09:2e:58:28:64:31:f9:4e:18:9b:3c:18:9d: 8f:99:84:67:31:40:28:16:dd:89:5a:6d:e3:1a:54:84:6c:ae: 62:d2:8c:75:56:2c:e2:d6:52:64:e8:7f:2c:74:1a:a0:13:72: 85:1e:85:7b:51:57:35:53:ab:56:21:10:6d:df:72:e1:ab:0e: 06:66:42:38 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUNG8wJhH7D5kC+fmkl33o8ZdYxq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNTUzNEY5RUM1MUNFODRBRkI0NjFCRUQyOTRBQkJF MEI4MTU0NDAeFw0yNTEyMjIxMzI0MTVaFw0yNjEyMjExMzI5MTVaMDMxMTAvBgNV BAMTKDBEMTQ2NjEwRkIwOTcyRTEwMTIxMEQ1RkFFNDg1ODJDRTk1RUQ4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrYk6FcLa7hqsygXG7nRSCed9 J6YV0vqvKxsCU7SctsnA6EvimHqaQoK6DJr4O6C3uYIzt7dIkvPVzthinV+ej2/6 1DEX0SDUQFTM+CRzNnxdCY6vO3JcBEdjwz7TSLi0t1j4vDpNY9kk4jIzSYj5T3za p1q6pNt0YRJs5Dvf69Dq6XRAEAzXGcK0ZHEXAI2EUW/3Qo4/0d4v/ev4lZAIr+Nl MXvMEA5uvRetbGRSn7ZA6trWr/Xyc1FhHdJdU3cg6XHkP5LZ5vsbmnu5ucDULu7y Xn86IhB8asBC7Jd58pqcPBPD+qgyQL+sCQxci3pgl1FRisTzVKSDyLHjNLtRAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUDRRmEPsJcuEBIQ1frkhYLOle2IIwHwYDVR0j BBgwFoAUM7VTT57FHOhK+0Yb7SlKu+C4FUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEpKeFJwOXJrSDR5TUpKNnJEdTFUTnFLanBBemFTbW1ZN3MzenBiZ0RQ NlgvMC8zM0I1NTM0RjlFQzUxQ0U4NEFGQjQ2MUJFRDI5NEFCQkUwQjgxNTQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjU1MzRGOUVDNTFDRTg0 QUZCNDYxQkVEMjk0QUJCRTBCODE1NDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hKSnhScDlya0g0eU1KSjZyRHUxVE5xS2pwQXphU21tWTdzM3pwYmdEUDZYLzAv MzIzODMwMzQzYTM4NjQzNzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASNfDANBgkqhkiG9w0BAQsFAAOCAQEAQ6yvbOc1 m2UxA47Wjgr//Yjvaul7loNpE+OuXoUkoiTXdnvXZumZO/PDxb9PoHk78EDN9jG9 PFPgCXz/jBdTqxobTSaBxv01eltnMkk8CutCyFG7EGRRugSNAIMq1viQFc+Ms8t0 Ds9EB/PHN4YOYQv05jZxjS/ZSbBXqowxva1XhEos2CELcuKLtTup1V4aXlh9F5Tr ESmqbuMZPfMLtvp86eDsEj9I1O7Gtnr19+0pY258LbU87uUJLlgoZDH5ThibPBid j5mEZzFAKBbdiVpt4xpUhGyuYtKMdVYs4tZSZOh/LHQaoBNyhR6Fe1FXNVOrViEQ bd9y4asOBmZCOA== -----END CERTIFICATE-----Generated at Mon Jan 5 03:07:51 2026 by rpki-client