This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/323830343a6166343a3a2f33322d3332203d3e203532393330.roa File: 323830343a6166343a3a2f33322d3332203d3e203532393330.roa (raw, json) Hash identifier: Fv9x2aUEE9rGAJKm7InPpv/v67Nr9Z19gWV7A4zzv1I= Subject key identifier: 51:2E:09:7E:69:EF:7A:FC:A6:B5:AA:DB:6B:9A:7A:9B:8F:8A:74:71 Certificate issuer: /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD Certificate serial: 4D8759B0606053A832FA88575B1CD1ADFC757190 Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer Subject info access: rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/323830343a6166343a3a2f33322d3332203d3e203532393330.roa Signing time: Fri 19 Dec 2025 16:49:58 +0000 ROA not before: Fri 19 Dec 2025 16:44:58 +0000 ROA not after: Fri 18 Dec 2026 16:49:58 +0000 asID: 52930 IP address blocks: 2804:af4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 01:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:87:59:b0:60:60:53:a8:32:fa:88:57:5b:1c:d1:ad:fc:75:71:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD Validity Not Before: Dec 19 16:44:58 2025 GMT Not After : Dec 18 16:49:58 2026 GMT Subject: CN=512E097E69EF7AFCA6B5AADB6B9A7A9B8F8A7471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2b:27:bd:2c:c6:ff:99:94:d9:31:5f:0d:c7: 0e:40:5f:9c:12:7f:f2:a4:e3:bd:df:ce:3e:5e:2f: a5:db:d8:e4:aa:0f:86:5b:ac:6b:a3:12:f3:1d:ca: 46:66:e1:f7:7f:49:27:a5:55:9d:7b:d4:a1:b3:35: 38:c9:53:3e:1a:72:e0:d0:fb:d8:13:07:20:b7:f9: 9b:5e:e5:e7:82:7d:8c:71:59:53:ea:1e:d7:8a:79: b0:46:d4:97:ff:4f:8d:46:3a:e2:0e:a0:14:c9:9e: 13:06:6e:1a:66:fe:8d:2c:01:46:44:c8:cb:2a:c4: 00:35:fc:c3:a6:98:ec:b8:58:ab:69:2a:a9:88:46: 59:89:43:c4:12:c8:0a:e5:49:09:99:38:03:cf:40: 9f:0d:3a:4e:3d:05:8b:04:c4:9c:67:d7:75:14:3c: dc:ea:f4:32:ee:f9:cc:93:c9:d7:07:7d:ad:34:9a: 6c:14:db:23:9d:cd:ef:c1:db:a5:78:77:96:69:d9: a7:08:e8:cf:c7:80:e4:04:18:51:da:88:32:03:e3: 64:e9:75:e3:c0:d2:d4:0d:f4:6e:b9:03:83:5e:44: e5:51:4b:e9:fb:fa:71:35:d6:41:d6:94:26:c6:0b: de:c7:dd:d3:d8:2a:0b:97:75:24:07:d9:76:7a:a7: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2E:09:7E:69:EF:7A:FC:A6:B5:AA:DB:6B:9A:7A:9B:8F:8A:74:71 X509v3 Authority Key Identifier: keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/323830343a6166343a3a2f33322d3332203d3e203532393330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:af4::/32 Signature Algorithm: sha256WithRSAEncryption 66:5d:26:83:d2:8f:89:77:25:30:13:39:cb:5f:d5:2f:b6:cc: 40:17:f4:b8:77:1c:ae:6c:98:eb:11:07:01:5d:8a:44:73:c0: 7a:1b:c6:9f:d9:23:6a:5b:22:04:b7:b7:87:d7:6c:93:d1:db: 66:60:30:ab:4b:03:49:b4:b5:ab:ac:b8:78:c5:65:d8:25:dc: bf:ca:21:ab:84:cc:12:78:f8:f5:e1:f3:1f:44:ab:53:95:d9: 26:59:35:94:25:0b:2c:c0:f4:47:04:a4:d1:3d:74:e4:1a:e9: 10:e8:f8:95:53:e4:62:8f:de:77:08:6a:81:3e:27:8f:30:ec: 01:c9:70:b4:20:db:54:aa:fe:ff:82:13:f5:25:ed:0f:94:d6: 86:82:d4:29:ee:80:c5:31:a7:d3:4b:52:a5:6c:67:3c:68:fd: f0:78:b1:f0:44:dc:65:7d:3b:0d:c8:03:3d:53:3d:c1:32:7a: 42:0b:31:0c:6c:90:ef:24:cf:92:19:7c:84:e5:30:53:9e:eb: ca:d2:5e:da:29:df:5c:db:d8:eb:a1:b2:9b:bd:75:dc:42:cb: 91:32:fd:8c:09:08:70:15:38:11:5e:1b:ea:f1:52:62:bd:e1: 01:4b:df:a6:ac:9b:d8:e7:7e:2b:9e:1b:a5:5c:e0:3f:1b:e9: b3:5d:16:22 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUTYdZsGBgU6gy+ohXWxzRrfx1cZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGOUY3NUUyRkYyMTlCMkJERDYyNUVCQkMyOTRBOTg5 QkFCMEVCRDAeFw0yNTEyMTkxNjQ0NThaFw0yNjEyMTgxNjQ5NThaMDMxMTAvBgNV BAMTKDUxMkUwOTdFNjlFRjdBRkNBNkI1QUFEQjZCOUE3QTlCOEY4QTc0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKye9LMb/mZTZMV8Nxw5AX5wS f/Kk473fzj5eL6Xb2OSqD4ZbrGujEvMdykZm4fd/SSelVZ171KGzNTjJUz4acuDQ +9gTByC3+Zte5eeCfYxxWVPqHteKebBG1Jf/T41GOuIOoBTJnhMGbhpm/o0sAUZE yMsqxAA1/MOmmOy4WKtpKqmIRlmJQ8QSyArlSQmZOAPPQJ8NOk49BYsExJxn13UU PNzq9DLu+cyTydcHfa00mmwU2yOdze/B26V4d5Zp2acI6M/HgOQEGFHaiDID42Tp dePA0tQN9G65A4NeROVRS+n7+nE11kHWlCbGC97H3dPYKguXdSQH2XZ6pxY1AgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUUS4Jfmnvevymtarba5p6m4+KdHEwHwYDVR0j BBgwFoAUsPn3Xi/yGbK91iXrvClKmJurDr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6 anIvMC9CMEY5Rjc1RTJGRjIxOUIyQkRENjI1RUJCQzI5NEE5ODlCQUIwRUJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRjlGNzVFMkZGMjE5QjJC REQ2MjVFQkJDMjk0QTk4OUJBQjBFQkQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv MzIzODMwMzQzYTYxNjYzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzOTMz MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBAr0MA0GCSqGSIb3DQEBCwUAA4IBAQBmXSaD0o+JdyUw EznLX9UvtsxAF/S4dxyubJjrEQcBXYpEc8B6G8af2SNqWyIEt7eH12yT0dtmYDCr SwNJtLWrrLh4xWXYJdy/yiGrhMwSePj14fMfRKtTldkmWTWUJQsswPRHBKTRPXTk GukQ6PiVU+Rij953CGqBPiePMOwByXC0INtUqv7/ghP1Je0PlNaGgtQp7oDFMafT S1KlbGc8aP3weLHwRNxlfTsNyAM9Uz3BMnpCCzEMbJDvJM+SGXyE5TBTnuvK0l7a Kd9c29jrobKbvXXcQsuRMv2MCQhwFTgRXhvq8VJiveEBS9+mrJvY534rnhulXOA/ G+mzXRYi -----END CERTIFICATE-----Generated at Mon Dec 22 12:59:29 2025 by rpki-client