This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a3a2f34382d313238203d3e2030.roa File: 323030313a313266383a3a2f34382d313238203d3e2030.roa (raw, json) Hash identifier: DrY41QHn2JuZ8z98MwRiNeU8uf3fKW1cYX4zVs8Ydhk= Subject key identifier: C7:B2:3F:C9:C0:B4:70:95:DA:40:A9:AA:AF:62:E2:32:49:85:02:BB Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Certificate serial: 5489605784B43CB63B43E71B458104273D48C499 Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a3a2f34382d313238203d3e2030.roa Signing time: Tue 09 Dec 2025 20:01:54 +0000 ROA not before: Tue 09 Dec 2025 19:56:54 +0000 ROA not after: Tue 08 Dec 2026 20:01:54 +0000 asID: 0 IP address blocks: 2001:12f8::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:89:60:57:84:b4:3c:b6:3b:43:e7:1b:45:81:04:27:3d:48:c4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0 Validity Not Before: Dec 9 19:56:54 2025 GMT Not After : Dec 8 20:01:54 2026 GMT Subject: CN=C7B23FC9C0B47095DA40A9AAAF62E232498502BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:26:61:fc:ad:9a:85:a0:60:27:4b:71:c6: 96:05:15:61:c5:61:23:82:5c:ad:5a:54:09:da:a1: 3c:7d:f2:8e:bc:64:01:fc:6e:97:74:5f:bb:5b:22: 2a:cf:07:4a:c9:56:d4:00:9d:24:98:57:ca:fc:8e: 30:0e:a7:7f:1a:c4:89:5f:4e:27:33:12:43:4d:41: 2b:95:91:b2:20:33:f7:44:9f:90:ba:52:e3:cc:ed: 50:d1:be:a7:86:06:59:d2:20:84:27:ec:fb:fc:60: 09:b9:eb:77:2c:75:99:ec:a6:05:c0:d5:84:ec:a8: 47:e1:b0:91:ba:de:5c:fd:f2:f1:79:34:66:f3:70: 6d:b7:81:90:1f:63:e4:6f:74:92:6c:bd:51:88:3c: bc:81:23:40:30:15:75:b7:9f:ce:d7:cf:ec:9e:13: be:b0:44:43:0b:73:31:eb:83:2a:50:a7:cc:e5:9f: 83:51:37:2a:de:a7:dc:c8:a2:60:66:59:64:c3:66: 11:d8:e4:99:47:d8:c4:47:b7:4a:38:81:fc:95:40: 26:ef:35:23:2c:7c:2a:26:2a:ab:82:32:37:2a:cd: b0:a3:5b:bf:b8:ee:1e:57:37:cc:ea:5e:f8:d7:3b: 11:84:87:7f:0a:74:11:84:cc:90:b9:0e:5a:9a:e6: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B2:3F:C9:C0:B4:70:95:DA:40:A9:AA:AF:62:E2:32:49:85:02:BB X509v3 Authority Key Identifier: keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323030313a313266383a3a2f34382d313238203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:12f8::/48 Signature Algorithm: sha256WithRSAEncryption 68:8a:08:b1:b9:ab:68:cc:d1:2b:e4:a9:0c:d6:e5:92:43:9c: 97:29:c6:ed:43:9b:dc:74:ef:01:c0:d1:21:67:50:3f:cb:8b: c4:d5:5a:85:41:44:0a:c4:06:cd:43:a4:a4:5c:55:b3:70:3a: ff:01:04:3d:d8:a9:9e:7d:ad:33:72:e3:fc:c4:1f:80:12:30: 60:a4:52:e7:77:c4:b3:31:c3:18:02:dc:0e:ab:f0:4a:db:90: e0:08:4a:b5:1c:0e:66:3a:bc:19:fc:6c:11:c7:54:be:1e:3b: 0e:6f:cd:d2:67:1a:8a:72:41:56:6d:47:bb:0a:19:c7:e6:40: 73:1d:f1:8f:77:72:2d:61:e1:e1:24:61:d7:95:25:1a:6c:23: 4f:ed:3d:9f:50:72:06:6c:94:2a:93:78:3c:50:07:a7:f9:f1: 25:ab:ac:3c:57:30:57:f0:1f:2b:ee:8b:d4:6c:07:6d:f7:e9: 0a:3d:28:dd:37:fc:b8:a4:53:52:fc:72:e1:91:d0:b1:6f:96: ec:5a:1d:9a:1c:9c:e5:cd:dc:41:9b:b8:2b:85:14:3d:16:77: 43:15:63:3e:9c:73:cb:6d:a4:04:1a:cc:56:81:5a:b0:3d:11: d1:66:d5:9d:b6:43:89:3c:6d:af:cb:72:20:20:a6:c8:40:b1: 64:44:e7:ce -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUVIlgV4S0PLY7Q+cbRYEEJz1IxJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF NDRCRjFGMDAeFw0yNTEyMDkxOTU2NTRaFw0yNjEyMDgyMDAxNTRaMDMxMTAvBgNV BAMTKEM3QjIzRkM5QzBCNDcwOTVEQTQwQTlBQUFGNjJFMjMyNDk4NTAyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZiZh/K2ahaBgJ0txxpYFFWHF YSOCXK1aVAnaoTx98o68ZAH8bpd0X7tbIirPB0rJVtQAnSSYV8r8jjAOp38axIlf TiczEkNNQSuVkbIgM/dEn5C6UuPM7VDRvqeGBlnSIIQn7Pv8YAm563csdZnspgXA 1YTsqEfhsJG63lz98vF5NGbzcG23gZAfY+RvdJJsvVGIPLyBI0AwFXW3n87Xz+ye E76wREMLczHrgypQp8zln4NRNyrep9zIomBmWWTDZhHY5JlH2MRHt0o4gfyVQCbv NSMsfComKquCMjcqzbCjW7+47h5XN8zqXvjXOxGEh38KdBGEzJC5Dlqa5iH9AgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUx7I/ycC0cJXaQKmqr2LiMkmFArswHwYDVR0j BBgwFoAUYyUZqcJ7OyhprDDt8pa0hORL8fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJ4NmljYUtwVldQNXVVQnpKUXpSdkVwanZTN1BWVzdaMkVyNEYycXQx Q3QvMi82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJGMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjUxOUE5QzI3QjNCMjg2 OUFDMzBFREYyOTZCNDg0RTQ0QkYxRjAuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCB kQYIKwYBBQUHMAuGgYRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0EyeDZpY2FLcFZXUDV1VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIv MzIzMDMwMzEzYTMxMzI2NjM4M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABEvgAADANBgkqhkiG9w0BAQsFAAOCAQEAaIoIsbmraMzRK+Sp DNblkkOclynG7UOb3HTvAcDRIWdQP8uLxNVahUFECsQGzUOkpFxVs3A6/wEEPdip nn2tM3Lj/MQfgBIwYKRS53fEszHDGALcDqvwStuQ4AhKtRwOZjq8GfxsEcdUvh47 Dm/N0mcainJBVm1HuwoZx+ZAcx3xj3dyLWHh4SRh15UlGmwjT+09n1ByBmyUKpN4 PFAHp/nxJausPFcwV/AfK+6L1GwHbffpCj0o3Tf8uKRTUvxy4ZHQsW+W7Fodmhyc 5c3cQZu4K4UUPRZ3QxVjPpxzy22kBBrMVoFasD0R0WbVnbZDiTxtr8tyICCmyECx ZETnzg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:16:25 2025 by rpki-client