This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a3a2f33332d3333203d3e203631353932.roa File: 323830343a346333343a3a2f33332d3333203d3e203631353932.roa (raw, json) Hash identifier: tvRnmOzEmd5QNv4apINbm9VpBPpJFNWpZ1JdQq29ZWI= Subject key identifier: 16:1D:D3:4A:B0:16:EF:BE:8B:E4:2A:91:B4:6A:A2:E9:8D:98:74:A9 Certificate issuer: /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B Certificate serial: 31D2FAB0F55861AD09D538B796C1F017DE414CA4 Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a3a2f33332d3333203d3e203631353932.roa Signing time: Wed 10 Dec 2025 19:29:46 +0000 ROA not before: Wed 10 Dec 2025 19:24:46 +0000 ROA not after: Wed 09 Dec 2026 19:29:46 +0000 asID: 61592 IP address blocks: 2804:4c34::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 16 Dec 2025 13:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d2:fa:b0:f5:58:61:ad:09:d5:38:b7:96:c1:f0:17:de:41:4c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B Validity Not Before: Dec 10 19:24:46 2025 GMT Not After : Dec 9 19:29:46 2026 GMT Subject: CN=161DD34AB016EFBE8BE42A91B46AA2E98D9874A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:88:60:93:77:e2:21:00:7a:d2:79:4b:c0: 45:90:15:67:d4:e6:c9:52:7b:31:c4:ad:81:ed:57: 27:e6:d5:5c:75:9d:eb:d5:a9:7d:d7:d5:42:b5:12: 29:77:f9:e6:ef:56:69:69:7b:f0:9d:c4:01:91:f4: 96:52:34:7d:35:02:ab:0e:c4:04:a5:0e:da:d0:a5: 1b:4b:4a:39:03:94:2a:a9:92:b2:a1:c4:51:44:74: 96:e6:0f:83:45:1e:09:46:cc:c0:fa:e8:db:10:c5: d4:02:71:a8:88:16:11:b0:0f:40:94:55:d6:ed:c2: 8c:af:71:51:81:1a:91:83:84:54:11:aa:4c:82:1e: 40:04:de:d4:f5:7d:b2:18:f7:76:f8:0c:0c:35:78: b1:be:f6:da:55:9f:69:5a:3a:17:41:26:3d:d9:5b: 83:9d:dd:62:f0:27:4b:cd:c0:cf:d8:96:d3:a6:39: 9d:38:8e:56:96:6e:6b:04:f3:97:b1:45:e1:cd:12: 15:3e:cf:1c:a8:2e:d6:80:2c:97:a9:41:3e:cf:06: e0:8d:21:44:c8:e4:4d:78:c7:56:0b:6f:a1:49:4e: 20:bb:7b:55:c6:71:bb:ab:75:2e:10:38:da:04:8d: 86:de:66:31:e8:71:0b:7a:49:f3:de:24:28:00:fd: 9a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1D:D3:4A:B0:16:EF:BE:8B:E4:2A:91:B4:6A:A2:E9:8D:98:74:A9 X509v3 Authority Key Identifier: keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a3a2f33332d3333203d3e203631353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4c34::/33 Signature Algorithm: sha256WithRSAEncryption 64:32:39:53:a0:ff:df:6d:1d:c4:50:60:26:d4:fe:3c:23:6e: 27:f7:ee:1e:20:c2:b9:56:eb:97:a1:d5:6d:ba:cf:ec:0a:d1: 26:0c:c8:79:9a:c5:32:d0:fe:43:40:78:0c:73:81:3b:78:5f: bd:ef:d2:ef:28:56:e0:1f:3c:1c:f1:24:ba:3f:1b:de:25:42: aa:12:97:43:e6:10:39:2a:9b:78:e3:18:a1:90:c3:7d:1d:c2: 26:a5:25:93:7e:ec:b1:88:27:ef:9f:36:b5:42:ca:55:b2:66: 36:9e:bb:34:cf:ae:1a:10:09:94:20:3d:84:a3:8f:66:94:a7: 76:41:c0:34:f8:5a:69:10:37:f5:c3:cd:6b:e9:f0:d3:2a:66: 91:43:cb:76:66:fd:97:03:bf:e9:e9:80:0a:61:30:65:c0:94: e0:72:b1:52:a8:8d:36:c5:d5:5d:36:84:a7:46:d1:38:a0:fb: 58:89:e6:bd:ca:b7:59:6a:5b:01:0c:77:76:79:e4:f9:83:22: e7:70:d8:c8:54:69:83:22:a4:43:cd:75:20:1d:38:cd:57:19: 53:cb:5d:05:fd:44:7f:8b:a2:c4:07:8a:a6:96:a6:4d:90:3a: 71:47:f2:ca:f2:ba:b6:d8:e6:f9:23:f6:a7:a5:08:74:22:08: 1d:5c:5b:5c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUMdL6sPVYYa0J1Ti3lsHwF95BTKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RTlGRUE1NjYzMjFCRTA3ODI5ODJEMkQ4QkFCM0ZF M0E4RDIyQjAeFw0yNTEyMTAxOTI0NDZaFw0yNjEyMDkxOTI5NDZaMDMxMTAvBgNV BAMTKDE2MUREMzRBQjAxNkVGQkU4QkU0MkE5MUI0NkFBMkU5OEQ5ODc0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CIhgk3fiIQB60nlLwEWQFWfU 5slSezHErYHtVyfm1Vx1nevVqX3X1UK1Eil3+ebvVmlpe/CdxAGR9JZSNH01AqsO xASlDtrQpRtLSjkDlCqpkrKhxFFEdJbmD4NFHglGzMD66NsQxdQCcaiIFhGwD0CU VdbtwoyvcVGBGpGDhFQRqkyCHkAE3tT1fbIY93b4DAw1eLG+9tpVn2laOhdBJj3Z W4Od3WLwJ0vNwM/YltOmOZ04jlaWbmsE85exReHNEhU+zxyoLtaALJepQT7PBuCN IUTI5E14x1YLb6FJTiC7e1XGcburdS4QONoEjYbeZjHocQt6SfPeJCgA/ZpXAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUFh3TSrAW776L5CqRtGqi6Y2YdKkwHwYDVR0j BBgwFoAUkJ6f6lZjIb4HgpgtLYurP+Oo0iswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84 bXAvMS85MDlFOUZFQTU2NjMyMUJFMDc4Mjk4MkQyRDhCQUIzRkUzQThEMjJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwOUU5RkVBNTY2MzIxQkUw NzgyOTgyRDJEOEJBQjNGRTNBOEQyMkIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzEv MzIzODMwMzQzYTM0NjMzMzM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzYzMTM1 MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwDgQCAAIwCAMGBygETDQAMA0GCSqGSIb3DQEBCwUAA4IBAQBkMjlToP/f bR3EUGAm1P48I24n9+4eIMK5VuuXodVtus/sCtEmDMh5msUy0P5DQHgMc4E7eF+9 79LvKFbgHzwc8SS6PxveJUKqEpdD5hA5Kpt44xihkMN9HcImpSWTfuyxiCfvnza1 QspVsmY2nrs0z64aEAmUID2Eo49mlKd2QcA0+FppEDf1w81r6fDTKmaRQ8t2Zv2X A7/p6YAKYTBlwJTgcrFSqI02xdVdNoSnRtE4oPtYiea9yrdZalsBDHd2eeT5gyLn cNjIVGmDIqRDzXUgHTjNVxlTy10F/UR/i6LEB4qmlqZNkDpxR/LK8rq22Ob5I/an pQh0IggdXFtc -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:08 2025 by rpki-client