This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/323830343a6331383a3a2f33322d3430203d3e203532363737.roa File: 323830343a6331383a3a2f33322d3430203d3e203532363737.roa (raw, json) Hash identifier: UuXrq76U/ZaAK1gD5JTwAREf7VkzhOPiI6J4b9u8Omk= Subject key identifier: 0E:D6:F2:5B:39:50:E0:29:76:DB:19:A1:3C:F9:6E:69:C0:35:E4:9A Certificate issuer: /CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Certificate serial: 3494A9E9C6F61472DD6FD62CF9FC639F2497E901 Authority key identifier: AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/323830343a6331383a3a2f33322d3430203d3e203532363737.roa Signing time: Mon 22 Dec 2025 17:59:34 +0000 ROA not before: Mon 22 Dec 2025 17:54:34 +0000 ROA not after: Mon 21 Dec 2026 17:59:34 +0000 asID: 52677 IP address blocks: 2804:c18::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 10:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:94:a9:e9:c6:f6:14:72:dd:6f:d6:2c:f9:fc:63:9f:24:97:e9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Validity Not Before: Dec 22 17:54:34 2025 GMT Not After : Dec 21 17:59:34 2026 GMT Subject: CN=0ED6F25B3950E02976DB19A13CF96E69C035E49A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:d6:cc:b6:a9:50:8b:dd:75:33:bc:78:76: 07:8d:db:7e:7d:fb:c9:56:bb:9b:2b:9b:49:5c:7a: 42:4b:b8:e3:95:b6:9d:fb:aa:b1:2b:23:3e:4b:90: 45:1a:07:82:89:ff:20:80:31:ef:c4:48:ff:df:06: c0:1f:52:17:d2:9f:45:12:fe:6c:11:f3:ec:ae:df: 19:ec:63:d7:10:3f:14:e5:30:3b:da:b8:54:db:32: 9a:d8:0d:85:02:6e:46:d2:9c:3e:ff:7f:4a:c3:ca: 1a:93:4f:5e:5e:28:9a:35:d2:3b:a6:28:25:d6:fc: 90:47:5b:a0:ad:38:22:fd:97:44:65:d7:03:f7:b8: fe:11:09:ea:71:c2:e0:69:27:cb:d2:28:27:84:b2: a2:78:4e:38:49:d5:b7:02:ea:4a:d0:4b:18:83:29: ce:0f:e5:fd:60:85:8b:68:43:dd:a4:b6:a7:8a:19: 85:4d:ec:56:bf:14:be:f3:cd:ca:37:0d:03:9c:26: bc:1b:2b:b6:5d:84:c7:a1:59:bd:cf:47:45:1a:34: 98:2a:d2:c6:c8:34:4a:4f:97:0a:53:50:a4:b0:c6: 7c:3f:7e:fb:d4:8a:90:03:dc:c1:08:ca:89:7a:7c: a1:3c:28:6c:d0:95:fd:47:9d:a7:7d:1e:bf:d4:7f: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D6:F2:5B:39:50:E0:29:76:DB:19:A1:3C:F9:6E:69:C0:35:E4:9A X509v3 Authority Key Identifier: keyid:AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/323830343a6331383a3a2f33322d3430203d3e203532363737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:c18::/32 Signature Algorithm: sha256WithRSAEncryption 42:e7:17:09:3f:d8:08:9f:e7:5e:c1:4a:f8:2e:1e:77:39:f5: 23:79:41:31:c2:67:dc:b9:d5:2d:52:19:2e:89:c4:ac:dd:49: 1c:22:88:3b:9a:3b:11:0a:bd:c0:88:ef:7b:77:d6:ad:ea:5d: b4:fa:54:ff:b5:47:ff:5f:39:68:19:74:81:d0:ac:eb:0a:74: 98:9a:a3:c8:11:4d:40:92:4e:d8:a8:9b:61:d3:6f:d4:98:2c: 8c:fe:24:ba:5a:a0:9b:f7:96:1c:6c:6e:81:24:1c:8d:6b:91: 96:55:23:d4:cf:09:9d:e2:fd:19:5d:fe:89:2d:64:93:c9:a7: 99:f0:e3:e0:f1:1a:7f:ef:8f:8f:5c:a2:55:09:01:86:53:7d: bf:8f:4a:c1:c1:a0:6d:37:f4:76:a4:9e:06:2d:a9:68:ee:1b: 7c:2e:18:3c:53:10:ca:92:ed:bd:dc:f4:a2:a3:b7:3f:b5:fc: 3f:4c:07:21:c1:fb:f6:c5:7b:19:e6:40:e9:17:4a:0a:44:61: 97:64:bd:a3:49:db:c2:9a:03:18:a2:17:0e:60:31:2d:cc:0b: be:c3:11:3d:27:e4:05:cc:4a:de:a7:7a:6c:4d:59:6e:14:be: 04:d7:4d:4e:ef:5f:00:f1:38:cd:0c:23:03:59:1f:20:19:0d: 2a:a4:4c:3c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUNJSp6cb2FHLdb9Ys+fxjnySX6QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGRjQ4RDRERjhBRjY3MkUzM0JBREQ0RTI1MDlGRENF QjkxQTA3QTAeFw0yNTEyMjIxNzU0MzRaFw0yNjEyMjExNzU5MzRaMDMxMTAvBgNV BAMTKDBFRDZGMjVCMzk1MEUwMjk3NkRCMTlBMTNDRjk2RTY5QzAzNUU0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBdbMtqlQi911M7x4dgeN2359 +8lWu5srm0lcekJLuOOVtp37qrErIz5LkEUaB4KJ/yCAMe/ESP/fBsAfUhfSn0US /mwR8+yu3xnsY9cQPxTlMDvauFTbMprYDYUCbkbSnD7/f0rDyhqTT15eKJo10jum KCXW/JBHW6CtOCL9l0Rl1wP3uP4RCepxwuBpJ8vSKCeEsqJ4TjhJ1bcC6krQSxiD Kc4P5f1ghYtoQ92ktqeKGYVN7Fa/FL7zzco3DQOcJrwbK7ZdhMehWb3PR0UaNJgq 0sbINEpPlwpTUKSwxnw/fvvUipAD3MEIyol6fKE8KGzQlf1Hnad9Hr/Uf26/AgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUDtbyWzlQ4Cl22xmhPPluacA15JowHwYDVR0j BBgwFoAUr/9I1N+K9nLjO63U4lCf3OuRoHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz Q2kvMC9BRkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkY0OEQ0REY4QUY2NzJF MzNCQURENEUyNTA5RkRDRUI5MUEwN0EuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNyUlc0QThGa29vZnBSRWNrMkFjNVRUZlhkNXY1QTZDRlFzS0JxeVU5M0NpLzAv MzIzODMwMzQzYTYzMzEzODNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDM1MzIzNjM3 Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBAwYMA0GCSqGSIb3DQEBCwUAA4IBAQBC5xcJP9gIn+de wUr4Lh53OfUjeUExwmfcudUtUhkuicSs3UkcIog7mjsRCr3AiO97d9at6l20+lT/ tUf/XzloGXSB0KzrCnSYmqPIEU1Akk7YqJth02/UmCyM/iS6WqCb95YcbG6BJByN a5GWVSPUzwmd4v0ZXf6JLWSTyaeZ8OPg8Rp/74+PXKJVCQGGU32/j0rBwaBtN/R2 pJ4GLalo7ht8Lhg8UxDKku293PSio7c/tfw/TAchwfv2xXsZ5kDpF0oKRGGXZL2j SdvCmgMYohcOYDEtzAu+wxE9J+QFzErep3psTVluFL4E101O718A8TjNDCMDWR8g GQ0qpEw8 -----END CERTIFICATE-----Generated at Wed Dec 24 21:24:35 2025 by rpki-client