This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a3a2f33322d3336203d3e20323730343138.roa File: 323830343a366262343a3a2f33322d3336203d3e20323730343138.roa (raw, json) Hash identifier: WPcaiVUkUlZcHuLrEaNcTKIJOQOqOiLNrrvO4j8lhE4= Subject key identifier: 72:AB:99:CD:4C:A6:F3:FD:B6:54:A4:D8:92:5B:29:DB:80:64:25:B5 Certificate issuer: /CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Certificate serial: 402AE0966B0F8B7AE467796327D37E38A768DFC7 Authority key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject info access: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a3a2f33322d3336203d3e20323730343138.roa Signing time: Mon 22 Dec 2025 15:34:13 +0000 ROA not before: Mon 22 Dec 2025 15:29:13 +0000 ROA not after: Mon 21 Dec 2026 15:34:13 +0000 asID: 270418 IP address blocks: 2804:6bb4::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 11:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2a:e0:96:6b:0f:8b:7a:e4:67:79:63:27:d3:7e:38:a7:68:df:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Validity Not Before: Dec 22 15:29:13 2025 GMT Not After : Dec 21 15:34:13 2026 GMT Subject: CN=72AB99CD4CA6F3FDB654A4D8925B29DB806425B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:d8:ba:ac:55:7b:6a:79:c6:c9:40:01:a2: df:ab:a4:c5:f7:1f:c9:58:02:4a:1d:7c:83:4a:46: 55:59:a8:b2:7d:96:ca:63:7a:d6:dd:d9:56:39:e4: f6:a8:1d:04:0e:a9:26:f1:1d:d4:db:c8:8b:e4:0f: 42:3a:3a:de:32:be:ab:af:3b:f2:d8:b1:00:b6:29: 26:25:fb:a8:f6:92:2d:52:09:9d:f7:a7:b9:36:a9: 27:47:62:be:79:bf:d4:6a:7f:d0:1d:96:fc:9d:7d: 34:4a:ee:fd:7d:11:b1:cd:11:05:cf:8c:65:b1:cd: b4:a0:9a:5a:87:87:f1:0f:1a:66:ca:19:71:2f:18: fe:5b:43:c6:55:98:fc:2d:38:bd:67:04:c5:80:ad: 8c:3e:c1:47:8f:89:0c:cb:42:e2:e9:38:45:19:e2: 03:57:c8:32:7e:d2:f4:a2:d4:2d:7d:bd:b2:a9:b5: af:99:5c:db:3e:85:54:8d:df:81:e1:bf:64:12:92: 1f:84:72:cf:ee:34:af:64:d8:22:9a:5f:16:7e:30: a3:24:4f:aa:b8:f2:83:63:f1:76:69:5e:ec:8a:13: 23:d5:e4:7c:cd:89:44:18:ac:b5:98:58:13:8e:72: 39:f0:b2:00:63:48:05:c7:cb:68:53:b9:72:46:12: 1d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AB:99:CD:4C:A6:F3:FD:B6:54:A4:D8:92:5B:29:DB:80:64:25:B5 X509v3 Authority Key Identifier: keyid:CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a3a2f33322d3336203d3e20323730343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6bb4::/32 Signature Algorithm: sha256WithRSAEncryption 54:f1:3f:f4:e9:33:ad:39:68:e5:69:9e:03:02:29:01:fe:62: ac:fd:84:0a:97:fa:e0:bc:c3:98:35:e7:49:d6:e4:70:d4:89: b5:3c:dc:71:c7:09:32:39:90:c9:31:7b:bc:dd:1d:7a:14:fd: fe:d7:3b:79:18:e7:a7:c4:b3:5f:a5:82:ab:b7:87:02:3e:1e: 46:9b:c4:ec:36:1b:e6:29:b9:13:06:1c:c4:e5:39:a9:75:7a: 8c:a0:bf:94:d7:ce:3c:4b:3f:ca:c5:17:02:08:05:51:e0:4c: d0:41:1b:1f:cc:a8:55:fa:a6:04:12:94:75:2a:d8:98:6e:a9: d5:96:79:ea:93:a9:5e:6a:2c:f9:0a:4d:35:05:ad:4d:c9:32: 0a:8a:bf:26:f2:29:0d:c7:af:04:b4:25:16:9b:c6:09:44:cf: 6c:e9:80:98:95:ed:68:2d:f2:65:fa:d0:1f:c8:8a:f0:a8:62: 28:5f:55:9e:47:a6:43:ed:06:3d:7c:f3:6b:05:31:c5:64:ae: b8:82:60:fc:81:17:cb:e3:27:66:24:ca:d1:86:34:db:6d:ab: b5:b8:9f:11:3f:90:73:c7:6a:5b:08:42:3e:4b:e4:a8:e3:73: 9f:cc:ea:91:03:fd:b3:5f:68:95:ab:b1:9a:89:6c:eb:cf:bc: dd:42:e8:69 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUQCrglmsPi3rkZ3ljJ9N+OKdo38cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFRjFGRDY2OTBEQ0NFRDUyMDUzMzhFRTBCQzdEMEUx ODhERTg0MjAeFw0yNTEyMjIxNTI5MTNaFw0yNjEyMjExNTM0MTNaMDMxMTAvBgNV BAMTKDcyQUI5OUNENENBNkYzRkRCNjU0QTREODkyNUIyOURCODA2NDI1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyti6rFV7annGyUABot+rpMX3 H8lYAkodfINKRlVZqLJ9lspjetbd2VY55PaoHQQOqSbxHdTbyIvkD0I6Ot4yvquv O/LYsQC2KSYl+6j2ki1SCZ33p7k2qSdHYr55v9Rqf9AdlvydfTRK7v19EbHNEQXP jGWxzbSgmlqHh/EPGmbKGXEvGP5bQ8ZVmPwtOL1nBMWArYw+wUePiQzLQuLpOEUZ 4gNXyDJ+0vSi1C19vbKpta+ZXNs+hVSN34Hhv2QSkh+Ecs/uNK9k2CKaXxZ+MKMk T6q48oNj8XZpXuyKEyPV5HzNiUQYrLWYWBOOcjnwsgBjSAXHy2hTuXJGEh2zAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUcquZzUym8/22VKTYklsp24BkJbUwHwYDVR0j BBgwFoAUze8f1mkNzO1SBTOO4Lx9DhiN6EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5 YUcvMC9DREVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERUYxRkQ2NjkwRENDRUQ1 MjA1MzM4RUUwQkM3RDBFMTg4REU4NDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVLMUI1RGlNc2hwQ3R4d3pqV1U5V3hjeVJEWkcyeEo4REpHcnlxQkw2eWFHLzAv MzIzODMwMzQzYTM2NjI2MjM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNzMw MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARrtDANBgkqhkiG9w0BAQsFAAOCAQEAVPE/9Okz rTlo5WmeAwIpAf5irP2ECpf64LzDmDXnSdbkcNSJtTzccccJMjmQyTF7vN0dehT9 /tc7eRjnp8SzX6WCq7eHAj4eRpvE7DYb5im5EwYcxOU5qXV6jKC/lNfOPEs/ysUX AggFUeBM0EEbH8yoVfqmBBKUdSrYmG6p1ZZ56pOpXmos+QpNNQWtTckyCoq/JvIp DcevBLQlFpvGCUTPbOmAmJXtaC3yZfrQH8iK8KhiKF9VnkemQ+0GPXzzawUxxWSu uIJg/IEXy+MnZiTK0YY0222rtbifET+Qc8dqWwhCPkvkqONzn8zqkQP9s19olaux mols68+83ULoaQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:57:39 2025 by rpki-client