This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33342d3334203d3e20323639323833.roa File: 323830343a363233383a3a2f33342d3334203d3e20323639323833.roa (raw, json) Hash identifier: LP+6zWbM2e+BJuK4UgIr94F3MNHWX48xDchYSmtSTFc= Subject key identifier: A9:E5:12:68:90:F0:52:B5:E8:B1:AC:F7:6D:FF:4C:D0:2A:66:83:BB Certificate issuer: /CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE Certificate serial: 5BE74DCD4554ABB901E9053C999867D215BDFCFA Authority key identifier: DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer Subject info access: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33342d3334203d3e20323639323833.roa Signing time: Thu 18 Dec 2025 13:37:00 +0000 ROA not before: Thu 18 Dec 2025 13:32:00 +0000 ROA not after: Thu 17 Dec 2026 13:37:00 +0000 asID: 269283 IP address blocks: 2804:6238::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 15:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e7:4d:cd:45:54:ab:b9:01:e9:05:3c:99:98:67:d2:15:bd:fc:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE Validity Not Before: Dec 18 13:32:00 2025 GMT Not After : Dec 17 13:37:00 2026 GMT Subject: CN=A9E5126890F052B5E8B1ACF76DFF4CD02A6683BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fd:25:90:85:9e:58:f7:5d:6e:59:4c:1f:32: 2e:8a:da:bc:58:f0:a6:c2:f9:f3:a5:b9:60:f5:7e: 73:4a:94:4e:c5:2f:52:9a:d4:33:2e:0e:49:14:d7: 26:67:ab:6c:26:70:a5:c6:fa:f4:bd:86:ea:29:67: 64:dd:95:22:ee:dc:f4:ca:90:11:16:6a:35:44:3c: 15:e9:f3:c1:6f:cd:a6:2b:a0:e1:58:e4:62:07:c8: 46:23:3f:c2:52:aa:18:ff:cb:6e:69:c7:00:41:c4: 6a:6c:5d:be:1a:de:43:3e:7e:0a:38:9b:61:d0:03: 37:9c:6d:4b:22:7d:00:77:0a:30:7c:94:7b:35:14: ff:37:8e:ee:ae:12:7e:24:90:94:9a:78:25:61:5e: ba:f2:cc:0d:9d:7e:11:4f:77:ac:71:74:61:b0:5b: 85:57:ca:84:78:d3:f4:4f:a4:4b:01:6b:b2:0d:64: 15:f8:06:64:f4:e8:b2:9b:f4:3c:a9:86:c4:b0:5f: 24:16:8e:b8:9b:23:8b:e6:bf:26:24:e3:6c:4a:aa: e0:3a:f9:41:fa:92:8b:b4:8b:dc:e9:d4:75:0b:e9: 00:b3:9f:be:05:8e:aa:f9:90:c6:57:7f:be:8f:26: 8e:18:47:05:9c:3d:40:da:34:b2:40:d9:84:7f:6c: 7d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E5:12:68:90:F0:52:B5:E8:B1:AC:F7:6D:FF:4C:D0:2A:66:83:BB X509v3 Authority Key Identifier: keyid:DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33342d3334203d3e20323639323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6238::/34 Signature Algorithm: sha256WithRSAEncryption c1:94:61:47:56:89:3c:ff:98:c8:fa:8e:18:2d:21:b9:5f:df: 8e:ec:7b:d0:8c:63:9f:d7:e2:c6:ff:cb:66:29:03:ff:4a:3b: 17:86:b2:78:80:e5:24:e9:68:77:8b:a5:85:f9:1a:8a:cc:a6: 21:1e:0a:a2:45:3c:4c:8a:fa:61:bd:3b:77:1d:40:19:53:9c: 5d:ef:d8:54:17:9b:3c:5e:c6:27:7f:91:34:9a:87:68:7b:8d: 3f:49:30:6a:cc:a8:f9:21:02:5a:e8:21:38:24:e2:d3:bf:54: 76:c5:5f:4c:5d:50:c0:be:5b:b1:ba:84:4b:b6:7c:17:8e:d0: eb:52:3e:42:a8:c4:b0:06:af:57:e5:a2:d0:1a:46:aa:2d:50: 2a:64:92:31:d4:ac:b1:72:e0:41:8a:af:63:98:aa:b7:e5:d6: 4b:33:18:cc:6c:79:b1:6f:c9:28:94:e8:3e:6e:c5:13:5b:d1: c9:08:aa:d3:7d:f9:1b:ce:53:07:bd:96:7c:37:be:8f:41:a9: 84:da:a6:42:88:23:67:aa:97:df:ca:18:1b:66:67:3b:76:e8: 37:ef:62:71:65:8c:da:5a:b7:19:40:98:19:4e:79:53:92:d1: ed:07:57:9c:d3:a0:14:f5:53:02:4e:96:40:77:17:bc:7e:98: 19:03:88:9e -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUW+dNzUVUq7kB6QU8mZhn0hW9/PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3RjAwRUREQTMyNjM5NERBNjVCRjJCOTIzM0Y3MkU0 REVBOThERTAeFw0yNTEyMTgxMzMyMDBaFw0yNjEyMTcxMzM3MDBaMDMxMTAvBgNV BAMTKEE5RTUxMjY4OTBGMDUyQjVFOEIxQUNGNzZERkY0Q0QwMkE2NjgzQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt/SWQhZ5Y911uWUwfMi6K2rxY 8KbC+fOluWD1fnNKlE7FL1Ka1DMuDkkU1yZnq2wmcKXG+vS9huopZ2TdlSLu3PTK kBEWajVEPBXp88FvzaYroOFY5GIHyEYjP8JSqhj/y25pxwBBxGpsXb4a3kM+fgo4 m2HQAzecbUsifQB3CjB8lHs1FP83ju6uEn4kkJSaeCVhXrryzA2dfhFPd6xxdGGw W4VXyoR40/RPpEsBa7INZBX4BmT06LKb9DyphsSwXyQWjribI4vmvyYk42xKquA6 +UH6kou0i9zp1HUL6QCzn74Fjqr5kMZXf76PJo4YRwWcPUDaNLJA2YR/bH2LAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUqeUSaJDwUrXosaz3bf9M0Cpmg7swHwYDVR0j BBgwFoAU338A7doyY5TaZb8rkjP3Lk3qmN4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzI5R2tGUHNRQzZuelNMWkZTVlM4Q3FucW5TYlQ3eTRHYXJWUTVmVWZG dGMvMC9ERjdGMDBFRERBMzI2Mzk0REE2NUJGMkI5MjMzRjcyRTRERUE5OERFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGN0YwMEVEREEzMjYzOTRE QTY1QkYyQjkyMzNGNzJFNERFQTk4REUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzcyOUdrRlBzUUM2bnpTTFpGU1ZTOENxbnFuU2JUN3k0R2FyVlE1ZlVmRnRjLzAv MzIzODMwMzQzYTM2MzIzMzM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5 MzIzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYGKARiOAAwDQYJKoZIhvcNAQELBQADggEBAMGUYUdW iTz/mMj6jhgtIblf347se9CMY5/X4sb/y2YpA/9KOxeGsniA5STpaHeLpYX5GorM piEeCqJFPEyK+mG9O3cdQBlTnF3v2FQXmzxexid/kTSah2h7jT9JMGrMqPkhAlro ITgk4tO/VHbFX0xdUMC+W7G6hEu2fBeO0OtSPkKoxLAGr1flotAaRqotUCpkkjHU rLFy4EGKr2OYqrfl1kszGMxsebFvySiU6D5uxRNb0ckIqtN9+RvOUwe9lnw3vo9B qYTapkKII2eql9/KGBtmZzt26DfvYnFljNpatxlAmBlOeVOS0e0HV5zToBT1UwJO lkB3F7x+mBkDiJ4= -----END CERTIFICATE-----Generated at Wed Dec 24 15:58:37 2025 by rpki-client