This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/323830343a323231633a3a2f33322d3438203d3e20323634353932.roa File: 323830343a323231633a3a2f33322d3438203d3e20323634353932.roa (raw, json) Hash identifier: DhRkX9MVpbp7nHJME8bIzXhtpw0rI/ChPYL/WFV90CQ= Subject key identifier: F4:0D:C2:49:FD:B1:6D:3F:DB:79:83:7F:97:4F:E8:80:76:5E:D4:D7 Certificate issuer: /CN=B558F6219859A6C785E4275ABE0738E504D862DF Certificate serial: 3CE31CBC073C408B0DB2AA9C86BBC671C5DBFA6F Authority key identifier: B5:58:F6:21:98:59:A6:C7:85:E4:27:5A:BE:07:38:E5:04:D8:62:DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B558F6219859A6C785E4275ABE0738E504D862DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/323830343a323231633a3a2f33322d3438203d3e20323634353932.roa Signing time: Thu 20 Nov 2025 18:20:44 +0000 ROA not before: Thu 20 Nov 2025 18:15:44 +0000 ROA not after: Thu 19 Nov 2026 18:20:44 +0000 asID: 264592 IP address blocks: 2804:221c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/B558F6219859A6C785E4275ABE0738E504D862DF.crl rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/B558F6219859A6C785E4275ABE0738E504D862DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B558F6219859A6C785E4275ABE0738E504D862DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 16 Dec 2025 14:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e3:1c:bc:07:3c:40:8b:0d:b2:aa:9c:86:bb:c6:71:c5:db:fa:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B558F6219859A6C785E4275ABE0738E504D862DF Validity Not Before: Nov 20 18:15:44 2025 GMT Not After : Nov 19 18:20:44 2026 GMT Subject: CN=F40DC249FDB16D3FDB79837F974FE880765ED4D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d1:97:f1:05:de:1b:79:dc:c4:93:07:f5:98: 59:f2:99:48:65:1f:73:df:34:27:ac:82:15:66:56: ea:d4:ab:7e:19:d3:ab:8c:08:c2:42:e1:b3:2f:86: ac:9c:7b:fe:29:57:34:bd:e6:88:a1:8b:ea:88:83: bf:b2:e4:53:0a:0c:3f:b7:9f:28:0e:c5:84:76:68: c1:50:a2:24:f7:bc:55:b2:0e:b1:37:93:aa:08:c2: c8:04:fc:44:52:3d:ff:54:55:78:6f:fe:d8:9b:f4: f1:43:d7:5c:b6:c7:5f:e8:5f:76:c1:86:e9:72:89: 6d:b6:49:08:fd:30:1c:7c:0d:66:2f:03:5d:f1:5d: 0d:73:b6:1c:c2:11:ca:88:33:a6:1b:7e:20:d7:9f: 5a:3d:c7:95:22:ba:c4:ff:47:35:61:5e:ee:ec:95: 12:16:9a:33:a7:2d:d6:b4:30:e1:69:f4:65:a3:3b: 97:8c:e5:3c:34:43:ae:a5:62:3f:1d:64:78:f6:67: 08:ec:b3:2a:7b:d6:0c:81:5b:56:89:99:e5:9d:95: 11:80:d1:b5:57:b7:21:5b:ac:64:ac:1f:6d:61:68: 13:5a:07:c9:00:91:0c:bd:93:4f:31:28:96:0e:46: 80:9b:c1:d1:7f:c4:7c:5d:ab:3a:7d:84:bc:6c:ee: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0D:C2:49:FD:B1:6D:3F:DB:79:83:7F:97:4F:E8:80:76:5E:D4:D7 X509v3 Authority Key Identifier: keyid:B5:58:F6:21:98:59:A6:C7:85:E4:27:5A:BE:07:38:E5:04:D8:62:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/B558F6219859A6C785E4275ABE0738E504D862DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B558F6219859A6C785E4275ABE0738E504D862DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/323830343a323231633a3a2f33322d3438203d3e20323634353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:221c::/32 Signature Algorithm: sha256WithRSAEncryption 04:15:d8:f4:c2:8e:a8:c5:53:75:be:02:63:1d:3e:f6:80:40: d3:89:95:7e:84:f5:c6:87:d3:a7:ed:ac:11:76:05:e0:c1:ec: 93:64:4b:b0:09:7f:7a:35:3b:b1:0e:93:bc:8c:65:ab:fc:bd: 23:1e:68:06:ad:a0:a5:0c:f4:c8:ca:ca:92:80:8a:d8:47:11: cd:22:6d:e8:88:97:e3:96:0d:62:16:9d:8c:96:08:71:68:8d: ba:78:ec:b5:31:e1:7d:04:25:b3:bb:84:63:16:70:69:9a:77: 57:a2:e0:36:6f:84:9f:f5:5b:65:4d:84:f1:df:12:5b:7a:9e: 4b:6a:4e:da:ca:1d:a9:82:43:b1:17:e2:0b:13:c3:cf:21:e6: f1:c9:da:c1:d7:cf:8b:f3:a8:0a:fc:e2:01:c9:5e:d9:bb:99: ad:e6:7c:49:d1:48:53:a3:9b:86:aa:df:96:94:22:98:68:8c: 8e:fa:98:d6:5b:5e:c2:a3:3c:84:0b:13:4d:cf:d9:7e:43:ca: 74:54:4a:8f:59:5c:74:87:ec:a6:39:e2:dc:d4:77:7e:68:3a: 53:a7:19:a8:8b:87:50:1d:1d:3c:ec:45:6d:de:be:cb:84:af: 27:e4:b5:46:23:c9:60:19:ec:53:b7:c4:eb:2e:fa:49:b6:0a: 06:71:fd:94 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUPOMcvAc8QIsNsqqchrvGccXb+m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU1OEY2MjE5ODU5QTZDNzg1RTQyNzVBQkUwNzM4RTUw NEQ4NjJERjAeFw0yNTExMjAxODE1NDRaFw0yNjExMTkxODIwNDRaMDMxMTAvBgNV BAMTKEY0MERDMjQ5RkRCMTZEM0ZEQjc5ODM3Rjk3NEZFODgwNzY1RUQ0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN0ZfxBd4bedzEkwf1mFnymUhl H3PfNCesghVmVurUq34Z06uMCMJC4bMvhqyce/4pVzS95oihi+qIg7+y5FMKDD+3 nygOxYR2aMFQoiT3vFWyDrE3k6oIwsgE/ERSPf9UVXhv/tib9PFD11y2x1/oX3bB hulyiW22SQj9MBx8DWYvA13xXQ1zthzCEcqIM6YbfiDXn1o9x5UiusT/RzVhXu7s lRIWmjOnLda0MOFp9GWjO5eM5Tw0Q66lYj8dZHj2Zwjssyp71gyBW1aJmeWdlRGA 0bVXtyFbrGSsH21haBNaB8kAkQy9k08xKJYORoCbwdF/xHxdqzp9hLxs7vH9AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU9A3CSf2xbT/beYN/l0/ogHZe1NcwHwYDVR0j BBgwFoAUtVj2IZhZpseF5Cdavgc45QTYYt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnZXZThQZkVldEpyM1Z2M0ZETjVxaEtXYVZvNXB5bTNRQ3pHMkJzaUVw U1EvMC9CNTU4RjYyMTk4NTlBNkM3ODVFNDI3NUFCRTA3MzhFNTA0RDg2MkRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1NThGNjIxOTg1OUE2Qzc4 NUU0Mjc1QUJFMDczOEU1MDREODYyREYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJ2V2U4UGZFZXRKcjNWdjNGRE41cWhLV2FWbzVweW0zUUN6RzJCc2lFcFNRLzAv MzIzODMwMzQzYTMyMzIzMTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0 MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQiHDANBgkqhkiG9w0BAQsFAAOCAQEABBXY9MKO qMVTdb4CYx0+9oBA04mVfoT1xofTp+2sEXYF4MHsk2RLsAl/ejU7sQ6TvIxlq/y9 Ix5oBq2gpQz0yMrKkoCK2EcRzSJt6IiX45YNYhadjJYIcWiNunjstTHhfQQls7uE YxZwaZp3V6LgNm+En/VbZU2E8d8SW3qeS2pO2sodqYJDsRfiCxPDzyHm8cnawdfP i/OoCvziAcle2buZreZ8SdFIU6ObhqrflpQimGiMjvqY1ltewqM8hAsTTc/ZfkPK dFRKj1lcdIfspjni3NR3fmg6U6cZqIuHUB0dPOxFbd6+y4SvJ+S1RiPJYBnsU7fE 6y76SbYKBnH9lA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:25:41 2025 by rpki-client