This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33322d3332203d3e20323634343235.roa File: 323830343a316536303a3a2f33322d3332203d3e20323634343235.roa (raw, json) Hash identifier: LX5xB7IgC6vRI0dc2P1bJuBIXpGZ+SSd9g+ExMdCD4k= Subject key identifier: A5:CF:0E:58:28:23:01:BF:B9:27:76:4F:6C:D5:94:C2:66:B1:90:5D Certificate issuer: /CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215 Certificate serial: 73E8F94E672B90CEB00DBE12C41685C0DA6D17EC Authority key identifier: 73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33322d3332203d3e20323634343235.roa Signing time: Wed 17 Dec 2025 18:11:28 +0000 ROA not before: Wed 17 Dec 2025 18:06:28 +0000 ROA not after: Wed 16 Dec 2026 18:11:28 +0000 asID: 264425 IP address blocks: 2804:1e60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 18:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e8:f9:4e:67:2b:90:ce:b0:0d:be:12:c4:16:85:c0:da:6d:17:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215 Validity Not Before: Dec 17 18:06:28 2025 GMT Not After : Dec 16 18:11:28 2026 GMT Subject: CN=A5CF0E58282301BFB927764F6CD594C266B1905D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:67:98:4a:ee:73:70:4b:9e:31:21:a3:d3: 42:44:10:b9:2b:0b:1b:13:f0:a2:b7:2a:28:25:94: fc:d9:40:9b:ad:5e:f5:a5:61:b6:87:86:be:fb:21: c4:93:47:00:1a:eb:15:c0:a1:f7:e8:1b:47:1f:36: 41:da:42:15:be:6c:0e:c4:cc:a2:38:f1:f5:18:1b: 8e:60:95:ec:3b:4d:5c:69:dc:af:3b:3f:13:b4:50: 04:b2:04:67:df:54:30:c2:4b:1c:1b:6d:75:d4:36: 86:cd:c5:0c:93:6b:e5:fc:9e:cd:ec:e0:76:7c:52: 91:3d:a6:b2:ed:11:59:6f:3f:44:85:3b:39:19:a6: e1:be:3b:11:d4:0d:a3:99:89:b9:86:69:1a:81:5a: 85:4f:de:6a:aa:78:23:48:7f:34:57:08:8b:13:83: f8:f4:44:8d:bd:3d:ef:99:12:53:82:7d:f9:ed:74: 1e:30:37:0a:0f:b6:1f:39:72:e8:6f:21:d6:45:54: c4:2d:18:47:92:e6:53:18:a2:7e:a6:ae:20:7a:6d: 0f:85:49:fc:04:c0:c9:47:6c:e7:0e:97:1f:73:3a: ac:cc:d1:f9:c7:66:aa:ed:d4:3e:92:4f:7b:76:30: 2b:df:d2:59:e6:1c:17:84:06:de:96:37:ae:ae:89: 7b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CF:0E:58:28:23:01:BF:B9:27:76:4F:6C:D5:94:C2:66:B1:90:5D X509v3 Authority Key Identifier: keyid:73:A6:2C:CA:EA:15:4B:FA:72:B0:CE:99:3D:A0:2C:1A:DC:EA:52:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A62CCAEA154BFA72B0CE993DA02C1ADCEA5215.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33322d3332203d3e20323634343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1e60::/32 Signature Algorithm: sha256WithRSAEncryption 9a:9c:35:fb:01:ca:a2:57:14:1a:6d:06:6a:4d:02:ff:94:7d: 37:19:f2:08:33:d6:c9:41:17:9f:a2:a3:67:cf:dd:8c:a4:10: 07:85:73:a7:12:0e:9b:49:f4:82:0c:31:da:75:fe:03:86:95: ba:88:4c:e2:60:60:a0:b9:a4:0e:fd:5c:cd:c8:79:e3:96:76: ef:4d:79:0b:fb:30:f8:0f:35:db:3e:c1:96:f4:a5:0d:81:9c: ef:92:2d:ec:2a:6a:68:73:5b:34:17:b4:f0:e5:1d:05:63:01: f4:f3:df:9f:21:37:55:9b:5b:4c:5d:3d:08:89:a7:78:b1:02: e3:26:e4:b0:6a:03:ce:58:d2:88:f5:fd:7a:34:1b:77:44:55: 96:59:1c:d8:0e:6a:e2:7e:c0:4b:0b:60:f7:e0:ee:8e:cc:92: 60:79:14:fb:10:b8:2f:b2:a7:ba:d6:0d:61:11:bc:0f:6b:86: 78:25:5f:3f:03:81:1f:1f:c6:d3:b2:9b:74:12:6b:3f:e1:41: 40:83:23:1c:a5:c3:e2:0d:42:ac:55:5c:58:db:10:5c:e6:48: a1:87:d8:b0:05:e3:df:5a:89:fb:c9:d7:62:48:32:40:c9:dc: d3:bd:af:25:17:3f:82:d0:3c:2e:b6:ee:36:05:29:af:8a:5d: a8:06:fd:47 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUc+j5TmcrkM6wDb4SxBaFwNptF+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBNjJDQ0FFQTE1NEJGQTcyQjBDRTk5M0RBMDJDMUFE Q0VBNTIxNTAeFw0yNTEyMTcxODA2MjhaFw0yNjEyMTYxODExMjhaMDMxMTAvBgNV BAMTKEE1Q0YwRTU4MjgyMzAxQkZCOTI3NzY0RjZDRDU5NEMyNjZCMTkwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SmeYSu5zcEueMSGj00JEELkr CxsT8KK3KigllPzZQJutXvWlYbaHhr77IcSTRwAa6xXAoffoG0cfNkHaQhW+bA7E zKI48fUYG45glew7TVxp3K87PxO0UASyBGffVDDCSxwbbXXUNobNxQyTa+X8ns3s 4HZ8UpE9prLtEVlvP0SFOzkZpuG+OxHUDaOZibmGaRqBWoVP3mqqeCNIfzRXCIsT g/j0RI29Pe+ZElOCffntdB4wNwoPth85cuhvIdZFVMQtGEeS5lMYon6mriB6bQ+F SfwEwMlHbOcOlx9zOqzM0fnHZqrt1D6ST3t2MCvf0lnmHBeEBt6WN66uiXt7AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUpc8OWCgjAb+5J3ZPbNWUwmaxkF0wHwYDVR0j BBgwFoAUc6YsyuoVS/pysM6ZPaAsGtzqUhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL NGQvMC83M0E2MkNDQUVBMTU0QkZBNzJCMENFOTkzREEwMkMxQURDRUE1MjE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczQTYyQ0NBRUExNTRCRkE3 MkIwQ0U5OTNEQTAyQzFBRENFQTUyMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv MzIzODMwMzQzYTMxNjUzNjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0 MzQzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQeYDANBgkqhkiG9w0BAQsFAAOCAQEAmpw1+wHK olcUGm0Gak0C/5R9NxnyCDPWyUEXn6KjZ8/djKQQB4VzpxIOm0n0ggwx2nX+A4aV uohM4mBgoLmkDv1czch545Z27015C/sw+A812z7BlvSlDYGc75It7CpqaHNbNBe0 8OUdBWMB9PPfnyE3VZtbTF09CImneLEC4ybksGoDzljSiPX9ejQbd0RVllkc2A5q 4n7ASwtg9+DujsySYHkU+xC4L7KnutYNYRG8D2uGeCVfPwOBHx/G07KbdBJrP+FB QIMjHKXD4g1CrFVcWNsQXOZIoYfYsAXj31qJ+8nXYkgyQMnc072vJRc/gtA8Lrbu NgUpr4pdqAb9Rw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:49:21 2025 by rpki-client